Wenas!

Recientemente parece q m entraron unos virus en mi PC y ahora tengo algunos problemas. Si alguien me puede ayudar GRACIAS!!!

1- introduzco la pagina del google como pagina de inicio y me da un error en el que pone q no s puede encontrar file:///c:/secure32.html

2- no puedo poner mi propio fondo de escritorio. Estando en el escritorio, botón derecho propiedades, pestaña escritorio veo algunos fondos pero sin poder cambiar

3- al cerrar mi PC siempre me da un error con explorer.exe y siempre tengo q finalizarlo manualmente haciendo click en finalizar ahora

Espero encontrar respuestas y disfrutar de mi PC.

Gracias por adelantado!!!

Descarga el programa HijackThis 1.99.1 y colócalo en una carpeta propia para el HijackThis (por ejemplo una carpeta C:\HijackThis\). Ejecútalo y presiona el botón "Do a system scan and save a logfile"; el programa realizará el escaneo e inmediatamente generará el Log, sólo te pedira el nombre del archivo y su ubicación, puedes simplemente guardarlo así como está. Se abrirá el Bloc de Notas, copia todo el contenido y pégalo como respuesta a este tema.
Una vez descargado, da doble click en el icono del HijackThis.exe.
Primero da click en el botón "Config", y aparecerán 7 opciones . Fíjate que no estén tildadas la primera ( “Mark everything found for fixing alter scan”) y la última (“Run Hijack This scan at startup and show it ítems are fond”).Luego presiona "Back"
Para empezar el escaneo de posibles hijackers, clickea en el botón "Scan". Se te presentará una lista con todos los elementos encontrados por el programa .
Baja el HijackThis de aquí:
http://www.trucoswindows.net/downloadview-....html#dldetails
Comienza un nuevo post y pega el log acá:
http://www.trucoswindows.net/foro/index.php?act=SF&s=&f=31
Salu2
Caito

Logfile of HijackThis v1.99.1
Scan saved at 16:29:13, on 28/11/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Archivos de programa\Symantec\Norton Ghost 2003\GhostStartService.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\passrv.exe
C:\Archivos de programa\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
C:\Archivos de programa\WinFast\WFTVFM\WFWIZ.exe
C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
C:\Archivos de programa\Java\jre1.5.0_05\bin\jusched.exe
C:\Archivos de programa\QuickTime\qttask.exe
C:\Archivos de programa\SurfAccuracy\SAcc.exe
C:\WINDOWS\system32\paytime.exe
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\APVXDWIN.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Microsoft Student\Microsoft Student 2006 - DVD\EDICT.EXE
C:\Archivos de programa\Skype\Phone\Skype.exe
C:\WINDOWS\system32\paytime.exe
C:\winstall.exe
C:\WINDOWS\tool2.exe
C:\WINDOWS\tool2.exe
C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\pavsrv51.exe
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\psimsvc.exe
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\AVENGINE.EXE
C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\SRVLOAD.EXE
C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\WebProxy.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\WINDOWS\system32\taskmgr.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\WinRAR\WinRAR.exe
C:\DOCUME~1\Usuario\CONFIG~1\Temp\Rar$EX20.828\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page = c:\secure32.html
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - Default URLSearchHook is missing
O1 - Hosts: 216.255.180.50 www.halifax-online.co.uk
O1 - Hosts: 216.255.180.50 ibank.barclays.co.uk
O1 - Hosts: 216.255.180.50 online.lloydstsb.co.uk
O1 - Hosts: 216.255.180.50 online-business.lloydstsb.co.uk
O1 - Hosts: 216.255.180.50 www.ukpersonal.hsbc.co.uk
O1 - Hosts: 216.255.180.50 banesnet.banesto.es
O1 - Hosts: 216.255.180.50 extranet.banesto.es
O1 - Hosts: 216.255.180.50 ebanking.bccbrescia.it
O1 - Hosts: 216.255.180.50 www.bankofscotlandhalifax-online.co.uk
O1 - Hosts: 216.255.180.50 oi.cajamadrid.es
O1 - Hosts: 216.255.180.50 bancae.caixapenedes.com
O1 - Hosts: 216.255.180.50 banking.postbank.de
O1 - Hosts: 216.255.180.50 meine.deutsche-bank.de
O1 - Hosts: 216.255.180.50 myonlineaccounts2.abbeynational.co.uk
O1 - Hosts: 216.255.180.50 ibank.cahoot.com
O1 - Hosts: 216.255.180.50 webbank.openplan.co.uk
O1 - Hosts: 216.255.180.50 bancopostaonline.poste.it
O1 - Hosts: 216.255.180.50 mybank.bybank.it
O1 - Hosts: 216.255.180.50 ibank.internationalbanking.barclays.com
O1 - Hosts: 216.255.180.50 welcome7.co-operativebank.co.uk
O1 - Hosts: 216.255.180.50 welcome11.co-operativebankonline.co.uk
O3 - Toolbar: (no name) - {a19ef336-01d4-48e6-926a-fe7e1c747aed} - (no file)
O4 - HKLM\..\Run: [GhostStartTrayApp] C:\Archivos de programa\Symantec\Norton Ghost 2003\GhostStartTrayApp.exe
O4 - HKLM\..\Run: [WinFast Schedule] C:\Archivos de programa\WinFast\WFTVFM\WFWIZ.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\jre1.5.0_05\bin\jusched.exe
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SurfAccuracy] C:\Archivos de programa\SurfAccuracy\SAcc.exe
O4 - HKLM\..\Run: [PayTime] C:\WINDOWS\system32\paytime.exe
O4 - HKLM\..\Run: [Sin Espias] C:\Archivos de programa\SinEspias\No-Spy.exe /autorun
O4 - HKLM\..\Run: [stnospy] C:\Archivos de programa\SinEspias\no-spy.exe /autorun
O4 - HKLM\..\Run: [SCANINICIO] "C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\Inicio.exe"
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [RealTray] C:\Archivos de programa\Real\RealPlayer\RealPlay.exe SYSTEMBOOTHIDEPLAYER
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [L06EXLRD_2033109] "C:\Archivos de programa\Microsoft Student\Microsoft Student 2006 - DVD\EDICT.EXE" -m
O4 - HKCU\..\Run: [Skype] "C:\Archivos de programa\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [PayTime] C:\WINDOWS\system32\paytime.exe
O4 - HKCU\..\Run: [Registry Cleaner] "C:\Archivos de programa\TPT Registry_Cleaner (Trial)\RegClean.exe"
O4 - HKCU\..\Run: [Windows installer] C:\winstall.exe
O4 - Startup: Adobe Gamma.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O8 - Extra context menu item: &Google Search - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://C:\Archivos de programa\Google\GoogleToolbar1.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {B205A35E-1FC4-4CE3-818B-899DBBB3388C} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Encarta Search Bar\ENCSBAR.DLL
O9 - Extra button: Real.com - {CD67F990-D8E9-11d2-98FE-00C0F0318AFE} - C:\WINDOWS\system32\Shdocvw.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab31267.cab
O16 - DPF: {14B87622-7E19-4EA8-93B3-97215F77A6BC} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/Messe...nt.cab31267.cab
O16 - DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} (ZoneIntro Class) - http://messenger.zone.msn.com/binary/ZIntro.cab32846.cab
O16 - DPF: {D7BF3304-138B-4DD5-86EE-491BB6A2286C} - http://www.azebar.com/install/azesearch.cab
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - "C:\ARCHIV~1\MSNMES~1\msgrapp.dll" (file missing)
O20 - Winlogon Notify: ShellScrap - C:\WINDOWS\system32\m428lefu1h28.dll (file missing)
O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: GhostStartService - Symantec Corporation - C:\Archivos de programa\Symantec\Norton Ghost 2003\GhostStartService.exe
O23 - Service: Panda Antispam Service (PASSRV) - Unknown owner - C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\passrv.exe
O23 - Service: Panda Process Protection Service (PavPrSrv) - Panda Software - C:\Archivos de programa\Archivos comunes\Panda Software\PavShld\pavprsrv.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\pavsrv51.exe
O23 - Service: Panda Imanager Service (PSIMSVC) - Panda Software Internacional - C:\Archivos de programa\Panda Software\Panda Platinum Internet Security\psimsvc.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe

Baja la version trial del Spy Sweeper :
http://www.webroot.com/consumer/products/spysweeper
Instálalo usando “Standard Install “opción.
Te pedirá una dirección de email .
Se actualizará.
Luego andá a “Options”>Sweep options” y marca “Sweep all folders on selected drives”
Marca “Local disc C “ ( o pon el que quieres analizar )
Y en “What to Sweep “ selecciona todas las casillas
Haz clic en “Sweep” y comenzará el scaneo
Al finalizar haz clic en “Remove”, clic en “Selected All “ y luego pulsa “Next”
En “Results” selecciona “Session Log “, marca “Save to File “
Guarda el reporte (Log) en un lugar conveniente.
Copia y pega ese log en tu próximo pos junto a un nuevo reporte del Hijack.
Salu2
Caito

********
15:05: | Start of Session, martes, 29 de noviembre de 2005 |
15:05: Spy Sweeper started
15:05: Sweep initiated using definitions version 574
15:05: Starting Memory Sweep
15:07: Memory Sweep Complete, Elapsed Time: 00:01:58
15:07: Starting Registry Sweep
15:07: Found Adware: azsearch toolbar
15:07: HKLM\software\azentretienco\ (3 subtraces) (ID = 103905)
15:07: HKLM\software\microsoft\code store database\distribution units\{d7bf3304-138b-4dd5-86ee-491bb6a2286c}\ (9 subtraces) (ID = 103943)
15:07: HKLM\software\microsoft\internet explorer\toolbar\ || {a19ef336-01d4-48e6-926a-fe7e1c747aed} (ID = 103945)
15:07: Found Adware: coolwebsearch (cws)
15:07: HKLM\software\microsoft\windows\currentversion\run\ || paytime (ID = 112449)
15:07: Found Adware: ist yoursitebar
15:07: HKCR\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 147829)
15:07: HKLM\software\classes\ysbactivex.installer\ (3 subtraces) (ID = 147849)
15:07: Found Adware: ist software
15:07: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/ysbactivex.dll\ (2 subtraces) (ID = 147854)
15:07: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\ysbactivex.dll (ID = 147857)
15:07: HKCR\ysbactivex.installer\ (3 subtraces) (ID = 147869)
15:07: Found Adware: surf accuracy
15:07: HKLM\software\sacc\ (11 subtraces) (ID = 203068)
15:07: HKLM\software\microsoft\windows\currentversion\run\ || surfaccuracy (ID = 203069)
15:07: HKLM\software\microsoft\windows\currentversion\uninstall\sacc\ (2 subtraces) (ID = 203070)
15:07: Found Trojan Horse: trojan-backdoor-zubox
15:07: HKCR\acpi.acpi.1\ (3 subtraces) (ID = 484081)
15:07: HKCR\acpi.acpi.1\clsid\ (1 subtraces) (ID = 484083)
15:07: HKCR\acpi.ext\ (5 subtraces) (ID = 484085)
15:07: HKCR\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484093)
15:07: HKCR\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484124)
15:07: HKLM\software\classes\acpi.acpi.1\ (3 subtraces) (ID = 484140)
15:07: HKLM\software\classes\acpi.ext\ (5 subtraces) (ID = 484144)
15:07: HKLM\software\classes\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484152)
15:07: HKLM\software\classes\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484210)
15:07: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\system32\mdms.exe (ID = 812317)
15:07: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\tool1.exe (ID = 890587)
15:07: HKLM\software\classes\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 920458)
15:07: Found Adware: cws_secure32.html hijack
15:07: HKLM\software\microsoft\internet explorer\main\ || local page (ID = 946024)
15:07: HKLM\software\microsoft\internet explorer\main\ || start page (ID = 946025)
15:07: HKLM\software\microsoft\internet explorer\main\ || default_page_url (ID = 946027)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || paytime (ID = 112403)
15:07: Found Adware: spysheriff
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 142127)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\ (4 subtraces) (ID = 480808)
15:07: Found Trojan Horse: trojan-backdoor-securemulti
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 484139)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\mzu\ || pt (ID = 656825)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || local page (ID = 946022)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || start page (ID = 946023)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || default_page_url (ID = 946026)
15:07: Registry Sweep Complete, Elapsed Time:00:00:16
15:08: Starting Cookie Sweep
15:08: Found Spy Cookie: 2o7.net cookie
15:08: usuario@2o7[2].txt (ID = 1957)
15:08: Found Spy Cookie: yieldmanager cookie
15:08: usuario@ad.yieldmanager[1].txt (ID = 3751)
15:08: Found Spy Cookie: hbmediapro cookie
15:08: usuario@adopt.hbmediapro[2].txt (ID = 2768)
15:08: Found Spy Cookie: apmebf cookie
15:08: usuario@apmebf[2].txt (ID = 2229)
15:08: Found Spy Cookie: falkag cookie
15:08: usuario@as-eu.falkag[1].txt (ID = 2650)
15:08: Found Spy Cookie: atlas dmt cookie
15:08: usuario@atdmt[2].txt (ID = 2253)
15:08: Found Spy Cookie: atwola cookie
15:08: usuario@atwola[1].txt (ID = 2255)
15:08: Found Spy Cookie: belnk cookie
15:08: usuario@belnk[1].txt (ID = 2292)
15:08: Found Spy Cookie: ccbill cookie
15:08: usuario@ccbill[2].txt (ID = 2369)
15:08: usuario@cnn.122.2o7[1].txt (ID = 1958)
15:08: usuario@dist.belnk[2].txt (ID = 2293)
15:08: Found Spy Cookie: fastclick cookie
15:08: usuario@fastclick[2].txt (ID = 2651)
15:08: Found Spy Cookie: fe.lea.lycos.com cookie
15:08: usuario@fe.lea.lycos[1].txt (ID = 2660)
15:08: usuario@fe.lea.lycos[2].txt (ID = 2660)
15:08: Found Spy Cookie: gamespy cookie
15:08: usuario@gamespy[1].txt (ID = 2719)
15:08: Found Spy Cookie: go.com cookie
15:08: usuario@go[1].txt (ID = 2728)
15:08: usuario@microsoftwga.112.2o7[1].txt (ID = 1958)
15:08: Found Spy Cookie: qksrv cookie
15:08: usuario@qksrv[2].txt (ID = 3213)
15:08: Found Spy Cookie: realmedia cookie
15:08: usuario@realmedia[1].txt (ID = 3235)
15:08: Found Spy Cookie: rn11 cookie
15:08: usuario@rn11[2].txt (ID = 3261)
15:08: Found Spy Cookie: adjuggler cookie
15:08: usuario@rotator.adjuggler[1].txt (ID = 2071)
15:08: usuario@sel.as-eu.falkag[2].txt (ID = 2650)
15:08: Found Spy Cookie: serving-sys cookie
15:08: usuario@serving-sys[2].txt (ID = 3343)
15:08: Found Spy Cookie: dealtime cookie
15:08: usuario@stat.dealtime[2].txt (ID = 2506)
15:08: Found Spy Cookie: onestat.com cookie
15:08: usuario@stat.onestat[2].txt (ID = 3098)
15:08: Found Spy Cookie: statcounter cookie
15:08: usuario@statcounter[1].txt (ID = 3447)
15:08: Found Spy Cookie: reliablestats cookie
15:08: usuario@stats1.reliablestats[2].txt (ID = 3254)
15:08: Found Spy Cookie: toplist cookie
15:08: usuario@toplist[1].txt (ID = 3557)
15:08: Found Spy Cookie: tradedoubler cookie
15:08: usuario@tradedoubler[1].txt (ID = 3575)
15:08: Found Spy Cookie: trafficmp cookie
15:08: usuario@trafficmp[1].txt (ID = 3581)
15:08: Found Spy Cookie: tribalfusion cookie
15:08: usuario@tribalfusion[1].txt (ID = 3589)
15:08: Found Spy Cookie: redzip cookie
15:08: usuario@www.redzip[2].txt (ID = 3250)
15:08: Found Spy Cookie: upspiral cookie
15:08: usuario@www.upspiral[2].txt (ID = 3615)
15:08: Found Spy Cookie: xiti cookie
15:08: usuario@xiti[1].txt (ID = 3717)
15:08: Found Spy Cookie: yadro cookie
15:08: usuario@yadro[1].txt (ID = 3743)
15:08: Found Spy Cookie: ysbweb cookie
15:08: usuario@ysbweb[1].txt (ID = 3756)
15:08: Found Spy Cookie: zedo cookie
15:08: usuario@zedo[2].txt (ID = 3762)
15:08: Cookie Sweep Complete, Elapsed Time: 00:00:03
15:08: Starting File Sweep
15:08: c:\archivos de programa\surfaccuracy (3 subtraces) (ID = -2147478266)
15:10: azesearch.bmp (ID = 50322)
15:11: Found Trojan Horse: trojan-backdoor-us15info
15:11: tool4[1].txt (ID = 183857)
15:11: tool5[1].txt (ID = 183857)
15:14: tool4.exe (ID = 183857)
15:14: tool5.exe (ID = 183857)
15:14: Found Adware: apropos
15:14: wingenerics.dll (ID = 50187)
15:16: Found System Monitor: potentially rootkit-masked files
15:16: 00001649_438b54c1_000b71b0 (ID = 0)
15:16: 00002e40_438b3a87_0000b71b (ID = 0)
15:16: 00002c3b_438b3ab6_0004c4b4 (ID = 0)
15:16: 00006952_438c5391_000aba95 (ID = 0)
15:16: 00001cd0_438b3a90_0006acfc (ID = 0)
15:16: 0000187e_438b3c26_00007a12 (ID = 0)
15:16: 00000f3e_438b171b_0001e848 (ID = 0)
15:16: 0000366b_438b3aa6_00022551 (ID = 0)
15:16: 00003b25_438b395e_000e8b25 (ID = 0)
15:16: 000016c5_438b3c5b_0005f5e1 (ID = 0)
15:16: 00001547_438b1722_000b34a7 (ID = 0)
15:16: 00001cd0_438b19c8_0004c4b4 (ID = 0)
15:16: 00004230_438b3aa8_0002625a (ID = 0)
15:16: 00007eb7_438b3aa8_00089544 (ID = 0)
15:16: 00004230_438b1a11_000af79e (ID = 0)
15:16: 00002c3b_438b5d21_000e8b25 (ID = 0)
15:16: 00007f96_438b5931_0008d24d (ID = 0)
15:16: 00000124_438b171b_000c65d4 (ID = 0)
15:16: 00000099_438b171b_0002625a (ID = 0)
15:16: 00000ddc_438b4b06_00003d09 (ID = 0)
15:16: 00000822_438b3ad1_00057bcf (ID = 0)
15:16: 00000bdb_4388d1fd_00000000 (ID = 0)
15:16: 00006899_438b3d43_00076417 (ID = 0)
15:16: 000060bf_438b1c9f_000baeb9 (ID = 0)
15:16: 00005f45_438b2b0a_000a037a (ID = 0)
15:16: 000019d9_438b207f_000501bd (ID = 0)
15:16: 00005991_438b3ad2_0000b71b (ID = 0)
15:16: 0000440d_438b171f_00066ff3 (ID = 0)
15:16: 00005991_438b4da1_00053ec6 (ID = 0)
15:16: 00003ef6_438b1aa8_00076417 (ID = 0)
15:16: 00004db7_4388d021_00000000 (ID = 0)
15:16: 00003cd5_438b3d7b_0003567e (ID = 0)
15:16: 0000491c_438b1720_00081b32 (ID = 0)
15:16: 00004db7_438b1721_000d59f8 (ID = 0)
15:16: 00005f90_438c53b6_000e8b25 (ID = 0)
15:16: 000012e1_438b3adb_000d1cef (ID = 0)
15:16: 000056ae_4388d210_0003d090 (ID = 0)
15:16: 000054de_438b1723_0007270e (ID = 0)
15:16: 00001e1f_438b3960_0002625a (ID = 0)
15:16: 000054de_4388d053_00007a12 (ID = 0)
15:16: 000026ca_438b3b1e_000aba95 (ID = 0)
15:16: 0000422d_438b1cc5_00090f56 (ID = 0)
15:16: 00005991_438b1ab3_00022551 (ID = 0)
15:16: 00006bfc_438b4914_00057bcf (ID = 0)
15:16: 00004080_438b3dcf_000e4e1c (ID = 0)
15:16: 000066c4_438b19e0_0001e848 (ID = 0)
15:16: 0000121f_438b3adc_00053ec6 (ID = 0)
15:16: 00001649_438c53c7_000a037a (ID = 0)
15:16: 00004823_438c532f_0001e848 (ID = 0)
15:16: 0000153c_438b37c4_000dd40a (ID = 0)
15:16: 00006df1_438c53db_0001e848 (ID = 0)
15:16: 0000440d_438b4793_00016e36 (ID = 0)
15:16: 00000f3e_438b4774_00031975 (ID = 0)
15:16: 00000902_438b3b55_00076417 (ID = 0)
15:16: 0000409d_438b4da2_00040d99 (ID = 0)
15:16: 00004db7_438b4794_000e4e1c (ID = 0)
15:16: 00007f96_438b4914_000a7d8c (ID = 0)
15:16: 00003b25_438b1744_0006ea05 (ID = 0)
15:16: 00006bfc_438b1747_000ca2dd (ID = 0)
15:16: 00004ae1_438a1a0d_0004c4b4 (ID = 0)
15:16: 00005772_438b3bb7_000dd40a (ID = 0)
15:16: 00001ad4_438b1745_0000b71b (ID = 0)
15:16: 00004944_4389d92a_00098968 (ID = 0)
15:16: 000013e9_438b3db6_00076417 (ID = 0)
15:16: 00002c49_438b1db9_0001ab3f (ID = 0)
15:16: 00003d6c_438a1a0f_000ec82e (ID = 0)
15:16: 00006952_438a1a9b_0009c671 (ID = 0)
15:16: 000063cb_438b4879_0003d090 (ID = 0)
15:16: 000039b3_4388d084_000ca2dd (ID = 0)
15:16: 00003c61_438b1dba_0008583b (ID = 0)
15:16: 00007ff5_438b4915_0001312d (ID = 0)
15:16: 000018be_438a02bf_00007a12 (ID = 0)
15:16: 000041bb_4389f01f_00066ff3 (ID = 0)
15:16: 00002c3b_438b1a25_00081b32 (ID = 0)
15:16: 00005af1_438a1ed6_00076417 (ID = 0)
15:16: 00007ff5_438b5940_00000000 (ID = 0)
15:16: 00000120_4388d22d_000c65d4 (ID = 0)
15:16: 0000440d_438b5851_00057bcf (ID = 0)
15:16: 000063cb_4389d615_0002625a (ID = 0)
15:16: 00002350_4388d231_0008d24d (ID = 0)
15:16: 00000029_4389d21f_00094c5f (ID = 0)
15:16: 00001a49_438b18fe_00057bcf (ID = 0)
15:16: 000072ae_438b53aa_0006acfc (ID = 0)
15:16: 00004df2_4388d38e_0000b71b (ID = 0)
15:16: 000022ee_4388d23d_00007a12 (ID = 0)
15:16: 00006270_438b263f_000ec82e (ID = 0)
15:16: 00004b40_4388d24d_00044aa2 (ID = 0)
15:16: 00004dc8_4388d0ca_00016e36 (ID = 0)
15:16: 00006784_4388ce6a_00081b32 (ID = 0)
15:16: 00006e5d_438b3960_000487ab (ID = 0)
15:16: 00006952_438b545a_0008583b (ID = 0)
15:16: 00006df1_4389d336_000c65d4 (ID = 0)
15:16: 0000491c_438b5854_00044aa2 (ID = 0)
15:16: 00006b36_4388d252_0003567e (ID = 0)
15:16: 0000798b_438b1ac4_0000f424 (ID = 0)
15:16: 00006443_4388d0e5_00007a12 (ID = 0)
15:16: 00004823_438b513f_00029f63 (ID = 0)
15:16: 00001ad4_438b3960_0007a120 (ID = 0)
15:16: 00005af1_4389d337_0009c671 (ID = 0)
15:16: 00005cfd_4388d25f_00066ff3 (ID = 0)
15:16: 00005772_438b60f1_0005f5e1 (ID = 0)
15:16: 00004944_4388d393_000487ab (ID = 0)
15:16: 00004dc8_438b47a1_00039387 (ID = 0)
15:16: 00001a49_4388d260_00039387 (ID = 0)
15:16: 000011f4_438b1f7b_000e4e1c (ID = 0)
15:16: 00002fff_438b1dfd_000ca2dd (ID = 0)
15:16: 00003bf6_4388d266_000a7d8c (ID = 0)
15:17: 000066bb_4388d115_0009c671 (ID = 0)
15:17: 000026a6_438b47ae_0003d090 (ID = 0)
15:17: 0000401d_438b1ec6_00022551 (ID = 0)
15:17: 000015a1_4388d422_00007a12 (ID = 0)
15:17: 00006784_438b517c_00029f63 (ID = 0)
15:17: 00006784_4389d289_00029f63 (ID = 0)
15:17: 0000428b_4388d115_000a7d8c (ID = 0)
15:17: 000072ae_438b376b_000501bd (ID = 0)
15:17: 00004080_438b1bc4_000501bd (ID = 0)
15:17: 000026a6_4388d116_00022551 (ID = 0)
15:17: 0000797d_4388d268_000baeb9 (ID = 0)
15:17: 000073da_438b1adc_0008d24d (ID = 0)
15:17: 00005d03_4388d12a_00089544 (ID = 0)
15:17: 000058b0_438b1ae5_00098968 (ID = 0)
15:17: 00001e1f_4389d5cd_000e8b25 (ID = 0)
15:17: 00005f32_438b4aef_0004c4b4 (ID = 0)
15:17: 00004ae1_4388ce6f_00007a12 (ID = 0)
15:17: 00004cad_4388d27a_0007de29 (ID = 0)
15:17: 0000701f_438b47bc_000487ab (ID = 0)
15:17: 00007983_438b1d84_0001312d (ID = 0)
15:17: 00005422_4388d429_0006acfc (ID = 0)
15:17: 00007a5a_4388d12d_0007de29 (ID = 0)
15:17: 0000314f_4388d27c_0007a120 (ID = 0)
15:17: 00001af4_438b200c_00022551 (ID = 0)
15:17: 00004509_4388d137_00022551 (ID = 0)
15:17: 000023c9_438b1c77_00081b32 (ID = 0)
15:17: index (ID = 0)
15:17: dns (ID = 0)
15:17: 00002e40_4388d39f_000c28cb (ID = 0)
15:17: 000041bb_438a0c03_000632ea (ID = 0)
15:17: 00003ef6_4388d439_0001312d (ID = 0)
15:17: 00003d6c_438c46b9_000632ea (ID = 0)
15:17: 00004b40_438b39cc_000487ab (ID = 0)
15:17: 00007ff5_4388d17f_000487ab (ID = 0)
15:17: 00004657_438b1d93_000bebc2 (ID = 0)
15:17: 00003699_438b4e22_000501bd (ID = 0)
15:17: 00002c3b_438b4d73_0007de29 (ID = 0)
15:17: 00005e14_4388d2b4_000a7d8c (ID = 0)
15:17: 000015a1_438b4d75_0008583b (ID = 0)
15:17: 00005422_438b4d76_0000b71b (ID = 0)
15:17: 00004e45_4388d187_000ca2dd (ID = 0)
15:17: 0000323b_4388d191_00081b32 (ID = 0)
15:17: 00000822_4388d43a_000ca2dd (ID = 0)
15:17: 00004e45_438b5940_0000f424 (ID = 0)
15:17: 0000260d_4388d19b_0002625a (ID = 0)
15:17: 000018be_438c6066_000ac2c2 (ID = 0)
15:17: 00001547_4389d52d_00044aa2 (ID = 0)
15:17: 000041bb_438a1ed6_000f0537 (ID = 0)
15:17: 00001366_4388d3be_000487ab (ID = 0)
15:17: 000012e1_4389da18_00000000 (ID = 0)
15:17: 00001cd0_4388d3d0_00007a12 (ID = 0)
15:17: 0000030a_4388d1a8_00053ec6 (ID = 0)
15:17: 00007dd1_438b1e36_00098968 (ID = 0)
15:17: 0000765f_438b253e_000a4083 (ID = 0)
15:17: 00005878_438b39cc_0008d24d (ID = 0)
15:17: 00000bdb_4389d710_00040d99 (ID = 0)
15:17: 00000384_438b1f1f_000c28cb (ID = 0)
15:17: 0000798b_4389da18_00003d09 (ID = 0)
15:17: 00007bb9_438b1b37_0003567e (ID = 0)
15:17: 000026e9_4389d33c_000d59f8 (ID = 0)
15:17: 000039b3_4389d535_0000b71b (ID = 0)
15:17: 00005c67_438b1ca1_00022551 (ID = 0)
15:17: 00003cd6_438b1ca1_00066ff3 (ID = 0)
15:17: 00000fbf_438b1ca2_00003d09 (ID = 0)
15:17: 00000029_43897fb3_0003567e (ID = 0)
15:17: 00003d6c_4388ce7b_0002dc6c (ID = 0)
15:17: 0000366b_4388d3e3_00098968 (ID = 0)
15:17: 00006ad6_438b1cb4_00007a12 (ID = 0)
15:17: 00007e87_4389d4a8_000b71b0 (ID = 0)
15:17: 0000301c_4389d70c_000c65d4 (ID = 0)
15:17: 00005d03_438b47bf_00000000 (ID = 0)
15:17: 00007f4f_438b1f27_0008583b (ID = 0)
15:17: 00005e9d_438b1e6a_000501bd (ID = 0)
15:17: 00006b89_438b5a1a_0002625a (ID = 0)
15:17: 00001ad4_438b0264_000c28cb (ID = 0)
15:17: 00006784_438c5349_000baeb9 (ID = 0)
15:17: 00006172_438b1e7e_0001e848 (ID = 0)
15:17: 000026e9_438a1ed7_00040d99 (ID = 0)
15:17: 00000ecc_438b202a_000487ab (ID = 0)
15:17: 00004823_4388d596_00066ff3 (ID = 0)
15:17: 000018be_438c4650_0003d090 (ID = 0)
15:17: 00004230_4388d3f4_0005f5e1 (ID = 0)
15:17: 00006b72_438b1ead_00044aa2 (ID = 0)
15:17: 000018d7_438b1f32_000d9701 (ID = 0)
15:17: 00003d6c_4389d30b_000ca2dd (ID = 0)
15:17: 00007eb7_4388d3f4_00090f56 (ID = 0)
15:17: 0000323b_438b493b_00098968 (ID = 0)
15:17: 000046cf_438b2031_00039387 (ID = 0)
15:17: 000072ae_4388ce7f_00029f63 (ID = 0)
15:17: 0000127e_438b1fd2_0009c671 (ID = 0)
15:17: 00003d6c_4388d636_0003567e (ID = 0)
15:17: 00001953_438b1f51_0003567e (ID = 0)
15:17: 00004ae1_438afd19_00003d09 (ID = 0)
15:17: 000001d3_438b2033_0006ea05 (ID = 0)
15:17: 000056ae_4389d715_00029f63 (ID = 0)
15:17: 000019da_438b265a_00031975 (ID = 0)
15:17: 00004823_4389804b_000e1113 (ID = 0)
15:17: 00000e90_438b2037_000f0537 (ID = 0)
15:17: 00002cd6_4389d30f_00031975 (ID = 0)
15:17: 00004d06_438b585e_000e1113 (ID = 0)
15:17: 00007f61_438b256a_00040d99 (ID = 0)
15:17: 00000bb3_4388ced0_000d9701 (ID = 0)
15:17: 00000099_438a1f61_00031975 (ID = 0)
15:17: 00002833_438b1f61_0008583b (ID = 0)
15:17: 00006784_4388d5f0_000a4083 (ID = 0)
15:17: 0000491c_438afed2_000af79e (ID = 0)
15:17: 00000124_438a1020_0007de29 (ID = 0)
15:17: 000018be_438a1e36_00031975 (ID = 0)
15:17: 00000822_438b5f6b_000bebc2 (ID = 0)
15:17: 00002cd6_4388d646_00029f63 (ID = 0)
15:17: 000072ae_4388d647_00089544 (ID = 0)
15:17: 00005f32_438a25f4_0005b8d8 (ID = 0)
15:17: 00005064_438b265f_00094c5f (ID = 0)
15:17: 0000249e_438b1f6a_000501bd (ID = 0)
15:17: 00002cd6_438c536b_000632ea (ID = 0)
15:17: 000057d3_438b205d_00031975 (ID = 0)
15:17: 00002e40_438a297b_0007a120 (ID = 0)
15:17: 00006784_438a1e36_00094c5f (ID = 0)
15:17: 000066bb_4389d58a_00016e36 (ID = 0)
15:17: 000001eb_438a1ef2_00007a12 (ID = 0)
15:17: 00004ae1_438a1e36_000b71b0 (ID = 0)
15:17: 00002b0c_438b1f71_00076417 (ID = 0)
15:17: 00005f90_4388d662_0001312d (ID = 0)
15:17: 00000124_438a1f82_00098968 (ID = 0)
15:17: 00005772_438b1b4f_000cdfe6 (ID = 0)
15:17: 000045c5_438b2bb2_00098968 (ID = 0)
15:17: 000072ae_438c5377_0001ab3f (ID = 0)
15:17: 0000458f_438b2069_00090f56 (ID = 0)
15:17: 00001649_4388d674_0007270e (ID = 0)
15:17: 0000301c_438b49bb_00040d99 (ID = 0)
15:17: 000049f7_438b2443_00040d99 (ID = 0)
15:17: 00005e14_438b4bd8_00044aa2 (ID = 0)
15:17: 0000305e_438a1021_00094c5f (ID = 0)
15:17: 0000428b_4389d58a_0005b8d8 (ID = 0)
15:17: 000069d0_438b2e9a_00098968 (ID = 0)
15:17: 00004ae1_4389d2b0_0009c671 (ID = 0)
15:17: 00006df1_4389efff_0003567e (ID = 0)
15:17: 00005cfd_438b4a5e_0000b71b (ID = 0)
15:17: 00004e45_438b4918_00003d09 (ID = 0)
15:17: 00006df1_4388d686_00053ec6 (ID = 0)
15:17: 000012e1_438b4db0_000a037a (ID = 0)
15:17: 0000030a_438a24ab_0002dc6c (ID = 0)
15:17: 0000323b_438b5940_000a7d8c (ID = 0)
15:17: 0000692c_438b1b70_0007270e (ID = 0)
15:17: 0000767d_438b4809_0008d24d (ID = 0)
15:17: 00004ae1_438b473c_000d1cef (ID = 0)
15:17: 00002cd6_438a1a14_00039387 (ID = 0)
15:17: 000072ae_438982e5_00089544 (ID = 0)
15:17: 000037e6_438b207c_0007270e (ID = 0)
15:17: 0000797d_438b5b57_00066ff3 (ID = 0)
15:17: 000049bb_438b2a9d_000487ab (ID = 0)
15:17: 0000305e_438a1f85_00016e36 (ID = 0)
15:17: 000072ae_438a1a14_000c28cb (ID = 0)
15:17: 000018be_43898af2_000af79e (ID = 0)
15:17: 00000bb3_438a1f00_00007a12 (ID = 0)
15:17: 000001eb_438c5d21_0008d24d (ID = 0)
15:17: 00004df2_438b4bd8_00089544 (ID = 0)
15:17: 0000301c_438a24ac_00031975 (ID = 0)
15:17: 00007ff5_4389d68a_0008583b (ID = 0)
15:17: 00005f90_4388ce88_0001ab3f (ID = 0)
15:17: 00000bb3_438c5d2c_0009c671 (ID = 0)
15:17: 0000440d_4389d511_000632ea (ID = 0)
15:17: 0000323b_438a1506_0005f5e1 (ID = 0)
15:17: 00005c46_438b273f_000632ea (ID = 0)
15:17: 000066bb_438a23a9_0007de29 (ID = 0)
15:17: 00002ea6_438b37aa_00007a12 (ID = 0)
15:17: 00000c7b_438b25b0_0008583b (ID = 0)
15:17: 000018be_438980b7_0005f5e1 (ID = 0)
15:17: 00006784_438980c2_0007270e (ID = 0)
15:17: 00004ae1_438980d6_000a7d8c (ID = 0)
15:17: 000012e1_438b1ab9_00040d99 (ID = 0)
15:17: 000013d3_438b2b12_0001e848 (ID = 0)
15:17: 000012db_4389d496_00044aa2 (ID = 0)
15:17: 00003d6c_43898114_000e1113 (ID = 0)
15:17: 000054de_438a1123_0003567e (ID = 0)
15:17: 000026a6_4389d58b_0002625a (ID = 0)
15:17: 00000029_43898846_000b34a7 (ID = 0)
15:17: 00000029_438a1a75_000a4083 (ID = 0)
15:18: 00007bb9_4389da7d_00003d09 (ID = 0)
15:18: 00004823_4389889e_000e1113 (ID = 0)
15:18: 000072ae_4389d320_00090f56 (ID = 0)
15:18: 00000029_4388ce2e_00003d09 (ID = 0)
15:18: 00007a5a_4389d5b0_000487ab (ID = 0)
15:18: 00002cd6_43898287_00094c5f (ID = 0)
15:18: 000029d8_438b2b13_0002dc6c (ID = 0)
15:18: 000056ae_438b49ce_000632ea (ID = 0)
15:18: 00003ef6_438a2b01_000e4e1c (ID = 0)
15:18: 00004027_438b2e56_00003d09 (ID = 0)
15:18: 0000153c_4388cf3b_000487ab (ID = 0)
15:18: 0000767d_4389d5b0_0008583b (ID = 0)
15:18: 00006032_4389d9de_0000f424 (ID = 0)
15:18: 00004823_438a1a76_000b34a7 (ID = 0)
15:18: 00004509_4389d5b0_00089544 (ID = 0)
15:18: 00000f3e_4389d4bb_000aba95 (ID = 0)
15:18: 00000f3e_4388cfb6_0007de29 (ID = 0)
15:18: 00006784_438c468d_00039387 (ID = 0)
15:18: 00001238_438b480f_000c65d4 (ID = 0)
15:18: 0000182f_438b27e1_0003d090 (ID = 0)
15:18: 00004ae1_438c468e_00053ec6 (ID = 0)
15:18: 00006784_438a1a7a_000cdfe6 (ID = 0)
15:18: 00004a80_438b3be4_0009c671 (ID = 0)
15:18: 00000124_4388cfc2_00007a12 (ID = 0)
15:18: 0000305e_4388cfd6_0007270e (ID = 0)
15:18: 00004a80_4389dafe_000af79e (ID = 0)
15:18: 00000120_438b49ef_0000f424 (ID = 0)
15:18: 00003d6c_438a1e4d_00081b32 (ID = 0)
15:18: 0000030a_438b5a1b_0004c4b4 (ID = 0)
15:18: 00001796_438b2771_00039387 (ID = 0)
15:18: 00000a4a_438b289e_00053ec6 (ID = 0)
15:18: 0000440d_4388cfd9_000a4083 (ID = 0)
15:18: 00001238_4389d5b4_0003d090 (ID = 0)
15:18: 00003807_438b261e_000ec82e (ID = 0)
15:18: 00003d6c_438b375d_000bebc2 (ID = 0)
15:18: 0000301c_438b5a1b_0007a120 (ID = 0)
15:18: 0000491c_4388cfdb_0001312d (ID = 0)
15:18: 00004944_438b4bd8_000c65d4 (ID = 0)
15:18: 000026e9_438b475a_0003567e (ID = 0)
15:18: 00000633_438b2624_00090f56 (ID = 0)
15:18: 00000732_438b49d3_0000b71b (ID = 0)
15:18: 00003a9e_438b4af8_000aba95 (ID = 0)
15:18: 00007282_438b2625_0004c4b4 (ID = 0)
15:18: 0000759a_438b4a0e_00031975 (ID = 0)
15:18: 00007a5a_438b173f_000d1cef (ID = 0)
15:18: 00002cd6_438a1e57_0002625a (ID = 0)
15:18: 0000491c_4389d51a_00081b32 (ID = 0)
15:18: 00007049_4389daaf_000b34a7 (ID = 0)
15:18: 00004d06_4389d51a_000c28cb (ID = 0)
15:18: 00005d03_4389d593_000501bd (ID = 0)
15:18: 0000797d_438b4af9_00057bcf (ID = 0)
15:18: 00003b25_438b4819_0001e848 (ID = 0)
15:18: 0000428b_438a23af_00007a12 (ID = 0)
15:18: 00006952_438a1e68_000d9701 (ID = 0)
15:18: 00003bf6_438a2612_00053ec6 (ID = 0)
15:18: 00000bb3_438b4762_0003d090 (ID = 0)
15:18: 00004db7_4389d51d_00031975 (ID = 0)
15:18: 00004e57_438b28f8_000c28cb (ID = 0)
15:18: 00007f96_438a1410_000cdfe6 (ID = 0)
15:18: 0000798b_438b4db1_00029f63 (ID = 0)
15:18: 000022ee_4389d76e_000c65d4 (ID = 0)
15:18: 00003bf6_4389d7b5_0001e848 (ID = 0)
15:18: 0000187e_4389db00_00000000 (ID = 0)
15:18: 00004e45_4389d6a5_0000f424 (ID = 0)
15:18: 000022ee_438b4a16_000b71b0 (ID = 0)
15:18: 00005f90_438a1e6c_0006acfc (ID = 0)
15:18: 00004823_4389d260_00044aa2 (ID = 0)
15:18: 000012db_438a1f23_00090f56 (ID = 0)
15:18: 00003a9e_438a2612_000c28cb (ID = 0)
15:18: 0000121f_438b4db1_000dd40a (ID = 0)
15:18: 00001366_438b4bf4_00090f56 (ID = 0)
15:18: 0000767d_438a23b6_00016e36 (ID = 0)
15:18: 0000153c_438a1f24_0006acfc (ID = 0)
15:18: 0000121f_4389da68_000e1113 (ID = 0)
15:18: 00005e14_4389d90c_000cdfe6 (ID = 0)
15:18: 00002ea6_438a1f08_0003d090 (ID = 0)
15:18: 0000797d_4389d7ff_00053ec6 (ID = 0)
15:18: 00003b25_4388d143_0001ab3f (ID = 0)
15:18: 00007e87_438a1f28_000d9701 (ID = 0)
15:18: 0000139d_438b616f_000ca2dd (ID = 0)
15:18: 00004657_4389dbf3_0001e848 (ID = 0)
15:18: 0000692c_4389dad8_0001312d (ID = 0)
15:18: 00006df1_438b54e3_00057bcf (ID = 0)
15:18: 000073da_4389da6b_00007a12 (ID = 0)
15:18: 00005422_4389d9fd_000487ab (ID = 0)
15:18: 00000bdb_438b5a1c_0001ab3f (ID = 0)
15:18: 00006b89_4389d6f5_0006ea05 (ID = 0)
15:18: 00004ae1_438a1a92_0008583b (ID = 0)
15:18: 000022ee_438a24e0_000b71b0 (ID = 0)
15:18: 00003ef6_4389d9ff_0001312d (ID = 0)
15:18: 0000797d_438a2613_0007de29 (ID = 0)
15:18: 00000732_4389d72e_0007de29 (ID = 0)
15:18: 000015a1_438b5e2c_0002dc6c (ID = 0)
15:18: 000056ae_438b5a1c_00022551 (ID = 0)
15:18: 000016c5_4389db06_000b34a7 (ID = 0)
15:18: 0000428b_438b47ad_00057bcf (ID = 0)
15:18: 00001cd0_438b4bf7_000487ab (ID = 0)
15:18: 00006e5d_438b483b_000487ab (ID = 0)
15:18: 00005d03_438b589f_00039387 (ID = 0)
15:18: 00004c85_438b2701_0004c4b4 (ID = 0)
15:18: 00002350_4389d752_000c28cb (ID = 0)
15:18: 00006ad6_4389dbac_0000f424 (ID = 0)
15:18: 00005878_438b4a2c_000b71b0 (ID = 0)
15:18: 00000822_4389da05_00057bcf (ID = 0)
15:18: 00000f3e_438b57a9_0009c671 (ID = 0)
15:18: 00000732_438b5a1d_00031975 (ID = 0)
15:18: 00000099_438b57aa_000501bd (ID = 0)
15:18: 00005968_438b2820_00000000 (ID = 0)
15:18: 0000314f_4389d8fd_00090f56 (ID = 0)
15:18: 00000ddc_438b5bc0_00029f63 (ID = 0)
15:18: 0000305e_438b57ba_000bebc2 (ID = 0)
15:18: 00006899_4389db0c_0007de29 (ID = 0)
15:18: 000022cd_4389ddf0_000ca2dd (ID = 0)
15:18: 00005753_4389db90_000a4083 (ID = 0)
15:18: 0000047e_4389dbad_000d1cef (ID = 0)
15:18: 00004db7_438b5862_00089544 (ID = 0)
15:18: 00001547_438b586c_000e1113 (ID = 0)
15:18: 000013e9_4389db0d_0001e848 (ID = 0)
15:18: 00001547_438a2330_0006acfc (ID = 0)
15:18: 00005cfd_4389d79f_00089544 (ID = 0)
15:18: 00006e5d_438a23df_000cdfe6 (ID = 0)
15:18: 00005f49_438a262e_0001312d (ID = 0)
15:18: 000001eb_4389d46e_00094c5f (ID = 0)
15:18: 000072ae_4389c053_000e8b25 (ID = 0)
15:18: 00000a28_438b2b22_000baeb9 (ID = 0)
15:18: 00003bb1_438b26de_000d9701 (ID = 0)
15:18: 00001649_4389c057_000e4e1c (ID = 0)
15:18: 00000ddc_438a262e_0003d090 (ID = 0)
15:18: 000054de_438b586d_000d9701 (ID = 0)
15:18: 00005772_4389da8f_00057bcf (ID = 0)
15:18: 00004cad_438a262e_00094c5f (ID = 0)
15:18: 000066c4_438a2a0a_000baeb9 (ID = 0)
15:18: 000066c4_4389d9be_0005f5e1 (ID = 0)
15:18: 000039b3_438b586e_00076417 (ID = 0)
15:18: 00003d6c_438a1a97_00039387 (ID = 0)
15:18: 00007eb7_4389d9d7_0007270e (ID = 0)
15:18: 00006df1_438a0302_000632ea (ID = 0)
15:18: 00002d12_438b586f_0003567e (ID = 0)
15:18: 00004230_4389d9c1_00090f56 (ID = 0)
15:18: 00002cd6_438a1a98_000dd40a (ID = 0)
15:18: 00004db7_438a03c3_0008d24d (ID = 0)
15:18: 000022ee_438b5a5a_00007a12 (ID = 0)
15:18: 00000f3e_438a0f45_0007a120 (ID = 0)
15:18: 00007bb9_438b60d3_000d59f8 (ID = 0)
15:18: 0000489c_4389dec9_0001ab3f (ID = 0)
15:18: 0000422d_4389dbc4_000e8b25 (ID = 0)
15:18: 00004080_4389db0d_0008583b (ID = 0)
15:18: 000058b0_438b4dd7_000c28cb (ID = 0)
15:18: 0000314f_438a2643_000af79e (ID = 0)
15:18: 0000314f_438b5bd9_00066ff3 (ID = 0)
15:18: 00003e12_4389d7a6_00098968 (ID = 0)
15:18: 00006032_438b4d41_000a037a (ID = 0)
15:18: 0000288f_4389dcb7_000b71b0 (ID = 0)
15:18: 00000124_438b57b9_0009c671 (ID = 0)
15:18: 00005991_4389da0c_000dd40a (ID = 0)
15:18: 00001ad4_438b5917_00081b32 (ID = 0)
15:18: 00005e14_438b5bea_000d1cef (ID = 0)
15:18: 0000390c_438b579d_000bebc2 (ID = 0)
15:18: 000063cb_438b591a_000c65d4 (ID = 0)
15:18: 00006bfc_438b591d_00029f63 (ID = 0)
15:18: 00004df2_438b5beb_0008583b (ID = 0)
15:18: 00003ef6_438b5e7d_0001312d (ID = 0)
15:18: 00005cfd_438b5a6f_000487ab (ID = 0)
15:18: 0000305e_4389d4db_00029f63 (ID = 0)
15:18: 00001238_438b0263_00057bcf (ID = 0)
15:18: 00004944_438b5c22_000baeb9 (ID = 0)
15:18: 0000261e_4389de54_0003567e (ID = 0)
15:18: 00005876_438b29c1_0003567e (ID = 0)
15:18: 000001eb_4389f074_00029f63 (ID = 0)
15:18: 00003b25_438b0263_000d1cef (ID = 0)
15:18: 00003cd6_4389db9a_00089544 (ID = 0)
15:18: 00002e40_438b03d9_00076417 (ID = 0)
15:18: 00000732_438b02fe_0008d24d (ID = 0)
15:18: 0000368e_4389dbc6_0002625a (ID = 0)
15:18: 0000491c_438a1fd1_0008d24d (ID = 0)
15:18: 00006bfc_438a140b_00031975 (ID = 0)
15:18: 0000305e_438a03a8_00016e36 (ID = 0)
15:18: 00005c67_4389db9a_0007de29 (ID = 0)
15:18: 000054dc_4389dbc5_0005b8d8 (ID = 0)
15:18: 00004823_4389ef9e_000aba95 (ID = 0)
15:18: 00002e40_438b5c46_0000b71b (ID = 0)
15:18: 00006e5d_438b0264_00081b32 (ID = 0)
15:18: 00007049_438b61c5_000b71b0 (ID = 0)
15:19: 00001366_438b5c47_000a037a (ID = 0)
15:19: 00004509_438a13b1_000a037a (ID = 0)
15:19: 00001cd0_438a29c9_0005b8d8 (ID = 0)
15:19: 00004cad_438b4b68_000c28cb (ID = 0)
15:19: 000063cb_438b026b_00098968 (ID = 0)
15:19: 00004df2_438a2662_00090f56 (ID = 0)
15:19: 00001cd0_438b5c7f_00057bcf (ID = 0)
15:19: 000071f0_4389df0a_00007a12 (ID = 0)
15:19: 00002cf7_438b2866_0000b71b (ID = 0)
15:19: 000009ce_438b2b26_00076417 (ID = 0)
15:19: 00003f4a_438b2867_0002dc6c (ID = 0)
15:19: 00005cfd_438b033e_000a7d8c (ID = 0)
15:19: 0000409d_438b6053_00031975 (ID = 0)
15:19: 00005db2_4389db4c_00094c5f (ID = 0)
15:19: 00001cd0_438b03e9_000ca2dd (ID = 0)
15:19: 00003ef6_438b4d79_00089544 (ID = 0)
15:19: 00006bfc_438b028a_000dd40a (ID = 0)
15:19: 00004823_438a0295_000487ab (ID = 0)
15:19: 00001649_4388ce98_000b71b0 (ID = 0)
15:19: 00001916_4389dece_000f0537 (ID = 0)
15:19: 0000366b_438b5c80_00076417 (ID = 0)
15:19: 00003e12_438b5ad1_0001e848 (ID = 0)
15:19: 000012db_438b37ab_0002625a (ID = 0)
15:19: 00006f11_438b2ab9_000e1113 (ID = 0)
15:19: 00001953_4389dfe2_00090f56 (ID = 0)
15:19: 000066c4_438b5c83_00029f63 (ID = 0)
15:19: 0000440d_438b383a_00007a12 (ID = 0)
15:19: 00000384_4389df1a_0003567e (ID = 0)
15:19: 00001547_438b38d0_0001312d (ID = 0)
15:19: 0000767d_438b1743_0005b8d8 (ID = 0)
15:19: 000072ae_438a0b69_000cdfe6 (ID = 0)
15:19: 00006bcb_4389dfe2_000cdfe6 (ID = 0)
15:19: 00001a49_438b034a_0007270e (ID = 0)
15:19: 00001a49_438b5aef_0002625a (ID = 0)
15:19: 000063cb_438b3961_0006acfc (ID = 0)
15:19: 00006be8_4389df4e_000a037a (ID = 0)
15:19: 00005e9d_4389de79_00081b32 (ID = 0)
15:19: 00000fc9_4389dfe3_0000f424 (ID = 0)
15:19: 00002c3b_438b0517_000632ea (ID = 0)
15:19: 00005f32_438b034d_0001312d (ID = 0)
15:19: 00005039_4389df53_000a7d8c (ID = 0)
15:19: 00003bf6_438b5b48_00044aa2 (ID = 0)
15:19: 000018be_438b3732_0001e848 (ID = 0)
15:19: 0000692c_438b6210_0001ab3f (ID = 0)
15:19: 00000e12_4389dfe8_0001312d (ID = 0)
15:19: 00003a9e_438b5b56_000a4083 (ID = 0)
15:19: 00000ddc_438b036c_0007a120 (ID = 0)
15:19: 00005991_438b0719_00007a12 (ID = 0)
15:19: 0000409d_438b071d_0002625a (ID = 0)
15:19: 0000491c_438a1045_0008583b (ID = 0)
15:19: 00006b36_438b39cc_000d9701 (ID = 0)
15:19: 00004230_438b5c9c_000c28cb (ID = 0)
15:19: 000012e1_438b071f_000487ab (ID = 0)
15:19: 0000314f_438b036d_000632ea (ID = 0)
15:19: 00006784_438a02bf_0005b8d8 (ID = 0)
15:19: 00005422_438b051b_0003567e (ID = 0)
15:19: 0000798b_438b0720_00007a12 (ID = 0)
15:19: 00002d12_438b1724_0006acfc (ID = 0)
15:19: 00007e87_438b37c5_000f0537 (ID = 0)
15:19: 00005d24_438b2abe_000af79e (ID = 0)
15:19: 00005cfd_438b39ce_0001ab3f (ID = 0)
15:19: 00007f96_438b396f_000ec82e (ID = 0)
15:19: 0000121f_438b0720_000aba95 (ID = 0)
15:19: 00005af1_438a0317_00076417 (ID = 0)
15:19: 00006172_4389ded8_00076417 (ID = 0)
15:19: 00006b89_438b02e5_0005b8d8 (ID = 0)
15:19: 0000494a_4389df36_000dd40a (ID = 0)
15:19: 0000121f_438b6061_0003d090 (ID = 0)
15:19: 0000390c_438b37c6_000d59f8 (ID = 0)
15:19: 00000588_438b2ac9_0006ea05 (ID = 0)
15:19: 00004dc8_438b1724_000cdfe6 (ID = 0)
15:19: 00000822_438a2b18_0001e848 (ID = 0)
15:19: 000018d7_4389df40_000f0537 (ID = 0)
15:19: 000073da_438b6062_00000000 (ID = 0)
15:19: 0000187e_438b62db_00090f56 (ID = 0)
15:19: 000058b0_438b6062_00003d09 (ID = 0)
15:19: 00005e76_438b2e7e_000e1113 (ID = 0)
15:19: 00006443_438b1725_0005b8d8 (ID = 0)
15:19: 000068f5_438b2b8e_000632ea (ID = 0)
15:19: 000018be_4389efaa_000aba95 (ID = 0)
15:19: 00005991_438a2b18_000a7d8c (ID = 0)
15:19: 000066bb_438b1728_000487ab (ID = 0)
15:19: 00004823_438a0a82_000f0537 (ID = 0)
15:19: 0000797d_438b0367_0007270e (ID = 0)
15:19: 00005991_438b6052_0002dc6c (ID = 0)
15:19: 000026ca_438b609b_000487ab (ID = 0)
15:19: 00000f3e_438b37ee_0000f424 (ID = 0)
15:19: 0000798b_438b6060_00040d99 (ID = 0)
15:19: 00004509_438b1743_0007a120 (ID = 0)
15:19: 00002d12_438b38d7_00016e36 (ID = 0)
15:19: 00000677_4389df3a_000b34a7 (ID = 0)
15:19: 00003699_438b60ac_0009c671 (ID = 0)
15:19: 00000099_438b37ee_000b71b0 (ID = 0)
15:19: 00004ae1_438a0b24_0008583b (ID = 0)
15:19: 0000440d_438a03bd_0001ab3f (ID = 0)
15:19: 00000124_438b37fa_00098968 (ID = 0)
15:19: 0000323b_438b3979_00029f63 (ID = 0)
15:19: 00002d12_438a0401_00003d09 (ID = 0)
15:19: 00006952_438a02eb_0000b71b (ID = 0)
15:19: 000018be_438a16ff_0007de29 (ID = 0)
15:19: 000012db_438a0333_0000b71b (ID = 0)
15:19: 00003e12_438b3a3c_00029f63 (ID = 0)
15:19: 00004d06_438a1049_0008583b (ID = 0)
15:19: 0000074d_438b1724_0007a120 (ID = 0)
15:19: 00002213_438b397a_00057bcf (ID = 0)
15:19: 000066bb_438b390f_000f0537 (ID = 0)
15:19: 000018be_438a0ab5_000bebc2 (ID = 0)
15:19: 0000260d_438b397a_000ca2dd (ID = 0)
15:19: 00005f90_438a0b8d_000af79e (ID = 0)
15:19: 00005f90_438a02fe_00007a12 (ID = 0)
15:19: 00007ff5_438a1410_000ec82e (ID = 0)
15:19: 000026a6_438b1738_000e4e1c (ID = 0)
15:19: 0000428b_438b3912_00076417 (ID = 0)
15:19: 000063cb_438a140b_0002625a (ID = 0)
15:19: 00006952_438a0b79_00039387 (ID = 0)
15:19: 0000491c_438a03bd_000a7d8c (ID = 0)
15:19: 00003cd5_438b6356_000bebc2 (ID = 0)
15:19: 00006032_438a2a0f_0006acfc (ID = 0)
15:19: 00002c3b_438a2a0f_000a037a (ID = 0)
15:19: 00005af1_438a0bf9_00090f56 (ID = 0)
15:19: 00001a49_438b3a3c_0007270e (ID = 0)
15:19: 00003c61_438a2d3d_0001312d (ID = 0)
15:19: 00006b89_438b397b_0000b71b (ID = 0)
15:19: 00006df1_4388cea4_0001e848 (ID = 0)
15:19: 000041bb_438a031c_0003d090 (ID = 0)
15:19: 000015a1_438a2a14_000c65d4 (ID = 0)
15:19: 000016c5_438b632c_0007a120 (ID = 0)
15:19: 00007eb7_438b5ccc_000a037a (ID = 0)
15:19: 00001238_438b1743_000f0537 (ID = 0)
15:19: 00002fff_438a2d3f_000baeb9 (ID = 0)
15:19: 0000701f_438b393a_00089544 (ID = 0)
15:19: 0000074d_438a1220_000b34a7 (ID = 0)
15:19: 00004080_438b63e6_0007de29 (ID = 0)
15:19: 00003b25_438a13ba_0008d24d (ID = 0)
15:19: 00002ea6_438a0c68_000d1cef (ID = 0)
15:19: 000060bf_438b64f6_0008d24d (ID = 0)
15:19: 00002213_438b17f3_00081b32 (ID = 0)
15:19: 00002ea6_438a0332_000d1cef (ID = 0)
15:19: 00005d03_438b393e_000ec82e (ID = 0)
15:19: 0000153c_438a0349_000a4083 (ID = 0)
15:19: 00005753_438b64da_000f0537 (ID = 0)
15:19: 000048cc_438b64b8_000aba95 (ID = 0)
15:19: 00001547_438a1103_00044aa2 (ID = 0)
15:19: 000023c9_438b649f_0002625a (ID = 0)
15:19: 00005f32_438b3a3c_0008583b (ID = 0)
15:19: 0000260d_438b1800_000a7d8c (ID = 0)
15:19: 000033ea_438b647d_000b34a7 (ID = 0)
15:19: 00005db2_438b6455_00044aa2 (ID = 0)
15:19: 0000030a_438b397b_000487ab (ID = 0)
15:19: 00006c69_438a2d50_00000000 (ID = 0)
15:19: 00005c67_438b6549_00040d99 (ID = 0)
15:19: 00000029_4389c030_00016e36 (ID = 0)
15:19: 0000491c_438b3888_000d9701 (ID = 0)
15:19: 00004e45_438b02ab_0003d090 (ID = 0)
15:19: 00004db7_438afee0_0003d090 (ID = 0)
15:19: 00004dc8_438a1225_000d59f8 (ID = 0)
15:19: 000026ca_438b0729_0000f424 (ID = 0)
15:19: 0000390c_438b171b_00007a12 (ID = 0)
15:19: 00000029_438afc39_0003d090 (ID = 0)
15:19: 00004823_438b161f_00016e36 (ID = 0)
15:19: 00004b40_438b18d4_0008d24d (ID = 0)
15:19: 000056ae_438b39ac_000632ea (ID = 0)
15:19: 00005f49_438b3a4a_00022551 (ID = 0)
15:19: 00007a5a_438b3940_000d59f8 (ID = 0)
15:19: 0000767d_438b3941_000487ab (ID = 0)
15:19: 00000732_438b39ad_000501bd (ID = 0)
15:19: 00006784_438a0ab6_00090f56 (ID = 0)
15:19: 00004509_438b3941_000aba95 (ID = 0)
15:19: 00001238_438b3941_000f0537 (ID = 0)
15:19: 00001649_438a0b91_00094c5f (ID = 0)
15:19: 000001eb_438a0c40_00098968 (ID = 0)
15:19: 00007ac2_438b2eba_0005f5e1 (ID = 0)
15:19: 0000030a_438b1803_00022551 (ID = 0)
15:19: 00003960_438b2c76_0001e848 (ID = 0)
15:19: 00000120_438b39ad_000c28cb (ID = 0)
15:19: 00001649_438b1693_0006ea05 (ID = 0)
15:19: 0000759a_438b39ad_000e1113 (ID = 0)
15:19: 00002350_438b39ae_00044aa2 (ID = 0)
15:19: 0000301c_438b180f_000e8b25 (ID = 0)
15:19: 00002d12_4389d555_00007a12 (ID = 0)
15:19: 00007e87_438a0356_000a4083 (ID = 0)
15:20: 00007e87_438b577b_000cdfe6 (ID = 0)
15:20: 0000153c_438b5746_00090f56 (ID = 0)
15:20: 00004cad_438b3a5d_000f0537 (ID = 0)
15:20: 0000314f_438b3a5f_00076417 (ID = 0)
15:20: 0000047e_438b659e_000aba95 (ID = 0)
15:20: 000026a6_438a132b_00094c5f (ID = 0)
15:20: 0000701f_438a132c_000aba95 (ID = 0)
15:20: 00006df1_438a0bea_000c28cb (ID = 0)
15:20: 0000323b_438b02af_0005b8d8 (ID = 0)
15:20: 0000542c_4389df7f_000e4e1c (ID = 0)
15:20: 00005f90_4389d328_00003d09 (ID = 0)
15:20: 000058b0_438b0724_00094c5f (ID = 0)
15:20: 00000de5_438b2ae5_000e1113 (ID = 0)
15:20: 00005af1_4388ceb2_00039387 (ID = 0)
15:20: 00005d03_438b173d_000baeb9 (ID = 0)
15:20: 00001547_438afee4_000c28cb (ID = 0)
15:20: 00002f14_438b6591_0007a120 (ID = 0)
15:20: 00004080_438a2c19_0007de29 (ID = 0)
15:20: 00006ad6_438b659e_00089544 (ID = 0)
15:20: 000054de_438afee9_0002625a (ID = 0)
15:20: 00005f32_438b5b31_00003d09 (ID = 0)
15:20: 00002cd6_438afd2a_0001e848 (ID = 0)
15:20: 00004dc8_4389d556_000f0537 (ID = 0)
15:20: locrv42a.exe (ID = 0)
15:20: 000041bb_4388cebd_00022551 (ID = 0)
15:20: 00001e1f_438b0263_000e8b25 (ID = 0)
15:20: 00004823_438afcfe_0000f424 (ID = 0)
15:20: 00005e14_438b037e_000baeb9 (ID = 0)
15:20: 00004230_438b03f6_00066ff3 (ID = 0)
15:20: 00000732_438b181e_000a4083 (ID = 0)
15:20: ace.dll (ID = 0)
15:20: 000026e9_438a031d_0008d24d (ID = 0)
15:20: 000072ae_438a02e9_0000f424 (ID = 0)
15:20: 00001e1f_438b1744_00076417 (ID = 0)
15:20: 00006e5d_438b1744_000e4e1c (ID = 0)
15:20: 00005f49_438b1917_000c65d4 (ID = 0)
15:20: 00002ea6_438b16b9_00022551 (ID = 0)
15:20: 0000153c_438b16f8_00022551 (ID = 0)
15:20: 00002350_438b1875_000632ea (ID = 0)
15:20: mqpverif.exe (ID = 0)
15:20: 00006443_438a1321_00029f63 (ID = 0)
15:20: data.bin (ID = 0)
15:20: 000072ae_438afd2a_0003567e (ID = 0)
15:20: 00006952_438afd31_000b34a7 (ID = 0)
15:20: 00001a49_438a25f0_00094c5f (ID = 0)
15:20: 000018be_438afcfe_0002625a (ID = 0)
15:20: 00006443_438b014c_00089544 (ID = 0)
15:20: 00005f90_438afd3a_000b34a7 (ID = 0)
15:20: 00004e45_438b17c6_000c65d4 (ID = 0)
15:20: 00001649_438afda5_000a037a (ID = 0)
15:20: 00000099_4389d4d2_00057bcf (ID = 0)
15:20: msftbios.sys (ID = 0)
15:20: 000041bb_438afe05_000d59f8 (ID = 0)
15:20: 000026a6_438b019b_00029f63 (ID = 0)
15:20: 0000260d_4389d6eb_0004c4b4 (ID = 0)
15:20: 000023c9_4389db88_000b71b0 (ID = 0)
15:20: 0000030a_438b02e7_00090f56 (ID = 0)
15:20: 00006443_4389d57d_00090f56 (ID = 0)
15:20: 00000bb3_4389d487_000a7d8c (ID = 0)
15:20: 00000bb3_438afe4e_00040d99 (ID = 0)
15:20: 0000301c_438b02e8_0002dc6c (ID = 0)
15:20: 00007a5a_438b01ac_00057bcf (ID = 0)
15:20: 0000153c_438afe66_000487ab (ID = 0)
15:20: 00007e87_438afe72_0001ab3f (ID = 0)
15:20: 0000390c_438afe79_0002625a (ID = 0)
15:20: 00000bdb_438b02e8_000f0537 (ID = 0)
15:20: pjlcedit.exe (ID = 0)
15:20: 000066bb_438a1329_0006ea05 (ID = 0)
15:20: 00005878_438b033d_00057bcf (ID = 0)
15:20: 00004d06_438b1721_0001e848 (ID = 0)
15:20: 00005af1_4388d95c_000af79e (ID = 0)
15:20: 00002cd6_4388ce7b_000cdfe6 (ID = 0)
15:20: 00004df2_438b19b3_0009c671 (ID = 0)
15:20: 00004d06_4388cfe2_000d59f8 (ID = 0)
15:20: 00002d12_438a121f_00053ec6 (ID = 0)
15:20: 00003a9e_438b3a41_0007de29 (ID = 0)
15:20: 00001547_4388d02a_00057bcf (ID = 0)
15:20: 00007049_438b3bba_000bebc2 (ID = 0)
15:20: 0000074d_4388d0bf_000501bd (ID = 0)
15:20: 000026e9_4388e0d5_000aba95 (ID = 0)
15:20: ai_27-11-2005.log (ID = 0)
15:20: 0000701f_4388d116_00098968 (ID = 0)
15:20: 00001ad4_4388d16b_0007de29 (ID = 0)
15:20: 000063cb_4388d16d_0005f5e1 (ID = 0)
15:20: 00000732_4388d217_000c28cb (ID = 0)
15:20: 00006bfc_4388d16e_0006acfc (ID = 0)
15:20: 00003e12_4388d25f_000e8b25 (ID = 0)
15:20: 00005f32_4388d261_00007a12 (ID = 0)
15:20: 00002213_4388d192_00007a12 (ID = 0)
15:20: 00006b89_4388d1a4_000b34a7 (ID = 0)
15:20: 0000301c_4388d1fc_0004c4b4 (ID = 0)
15:20: 0000759a_4388d231_000487ab (ID = 0)
15:20: 00005878_4388d250_000af79e (ID = 0)
15:20: 00005f49_4388d270_0004c4b4 (ID = 0)
15:20: 00003a9e_4388d267_0003567e (ID = 0)
15:20: 00000ddc_4388d270_000e8b25 (ID = 0)
15:20: 00000029_4388d4f9_00098968 (ID = 0)
15:20: 00004ae1_4388d617_000c65d4 (ID = 0)
15:20: 000018be_4388d5d2_00081b32 (ID = 0)
15:20: 000041bb_4388d95c_000e4e1c (ID = 0)
15:20: 00004823_4389c03d_000cdfe6 (ID = 0)
15:20: 00006784_4389c040_000a7d8c (ID = 0)
15:20: 00006df1_438a1ae1_0007de29 (ID = 0)
15:20: 00004ae1_4389c046_00016e36 (ID = 0)
15:20: 00003d6c_4389c051_00003d09 (ID = 0)
15:20: 00006952_4389c055_000a4083 (ID = 0)
15:20: 00005f90_4389c055_000e8b25 (ID = 0)
15:20: 00005af1_4389c05b_00044aa2 (ID = 0)
15:20: 000041bb_4389c070_0009c671 (ID = 0)
15:20: 000026e9_4389c072_0002dc6c (ID = 0)
15:20: 000001eb_4389c073_000b34a7 (ID = 0)
15:20: 00000bb3_4389c07c_00039387 (ID = 0)
15:20: 00002ea6_4389c07c_0007a120 (ID = 0)
15:20: 0000153c_4389c090_0006acfc (ID = 0)
15:20: 000018be_438a1801_000e4e1c (ID = 0)
15:20: 00006784_438a1802_000d1cef (ID = 0)
15:20: 000012db_4389c08d_000c28cb (ID = 0)
15:20: 00007e87_4389c093_000e8b25 (ID = 0)
15:20: 00004823_438a17b2_0008d24d (ID = 0)
15:20: 00000029_438b508e_00007a12 (ID = 0)
15:20: 00000029_438a1932_0005f5e1 (ID = 0)
15:20: 000039b3_438a112f_0002dc6c (ID = 0)
15:20: 00005af1_438b55bf_000632ea (ID = 0)
15:20: 00000029_438a1c3d_000e8b25 (ID = 0)
15:20: 00007a5a_438a1330_00066ff3 (ID = 0)
15:20: 00002852_438b2adc_000632ea (ID = 0)
15:20: 00001649_4389d335_0000f424 (ID = 0)
15:20: 000041bb_4389d33a_0008583b (ID = 0)
15:20: 000018be_438a1a79_00029f63 (ID = 0)
15:20: 0000153c_4389d4a4_000b34a7 (ID = 0)
15:20: 000072ae_438a1a9a_00000000 (ID = 0)
15:20: 00004823_438a1de8_00094c5f (ID = 0)
15:20: 00005878_438b5a5c_00016e36 (ID = 0)
15:20: 000054de_4389d534_000a037a (ID = 0)
15:20: 00006e5d_4389d5de_000f0537 (ID = 0)
15:20: 00001ad4_4389d5e6_00081b32 (ID = 0)
15:20: 000072ae_438a1e57_0005b8d8 (ID = 0)
15:20: 00006bfc_4389d625_00098968 (ID = 0)
15:20: 00002213_4389d6d6_0003567e (ID = 0)
15:20: 000054de_438a2337_000a7d8c (ID = 0)
15:20: 000039b3_438a2337_000baeb9 (ID = 0)
15:20: 00001e1f_438a1407_0007270e (ID = 0)
15:20: 0000759a_4389d73c_0003567e (ID = 0)
15:20: 00004e45_438a246e_000cdfe6 (ID = 0)
15:20: 00003b25_438a23bb_00016e36 (ID = 0)
15:20: 00005878_438a24e1_00081b32 (ID = 0)
15:20: 00000029_438b3696_000a037a (ID = 0)
15:20: 00000ddc_4389d8da_0001e848 (ID = 0)
15:20: 00004cad_4389d8e7_0005b8d8 (ID = 0)
15:20: 00003e12_438a24e3_0001e848 (ID = 0)
15:20: 00006b36_438a24e1_000a037a (ID = 0)
15:20: ai_29-11-2005.log (ID = 0)
15:20: 00005cfd_438a24e2_00066ff3 (ID = 0)
15:20: 00001366_4389d96f_0003567e (ID = 0)
15:20: 00002c3b_4389d9e0_00053ec6 (ID = 0)
15:20: 0000139d_4389daa4_000ca2dd (ID = 0)
15:20: 000058b0_4389da6b_00081b32 (ID = 0)
15:20: 000026ca_4389da6f_0008d24d (ID = 0)
15:20: 00003699_4389da70_00000000 (ID = 0)
15:21: 00000902_4389da78_000e4e1c (ID = 0)
15:21: 00000bb3_438b3785_0007270e (ID = 0)
15:21: 000033ea_4389db7d_000af79e (ID = 0)
15:21: 00002f14_4389dba9_00029f63 (ID = 0)
15:21: 000048cc_4389db89_000501bd (ID = 0)
15:21: ai_28-11-2005.log (ID = 0)
15:21: 00003a61_4389dcee_0007a120 (ID = 0)
15:21: 00000029_438c51cc_000cdfe6 (ID = 0)
15:21: 00000029_438c5fa1_00066ff3 (ID = 0)
15:21: ai_26-11-2005.log (ID = 0)
15:21: 00006b72_4389dee3_00044aa2 (ID = 0)
15:21: 000018be_4388ce5d_00044aa2 (ID = 0)
15:21: 000032e6_4389dee5_00098968 (ID = 0)
15:21: 00000099_4388cfb7_0000f424 (ID = 0)
15:21: 00007f4f_4389df36_0003d090 (ID = 0)
15:21: 00004402_4389df3d_0006acfc (ID = 0)
15:21: 00005f1e_4389e037_000c28cb (ID = 0)
15:21: 00007ff5_438b02a9_000cdfe6 (ID = 0)
15:21: 00000029_4389e9ca_0007de29 (ID = 0)
15:21: 00001649_4389effd_000bebc2 (ID = 0)
15:21: 00000029_438a026d_00031975 (ID = 0)
15:21: 00003d6c_438a02c3_0003d090 (ID = 0)
15:21: 00005878_438b18d6_00066ff3 (ID = 0)
15:21: 00000f3e_438a035f_000d1cef (ID = 0)
15:21: 00004d06_438a03c2_000d1cef (ID = 0)
15:21: 00000029_438a0a66_00039387 (ID = 0)
15:21: 0000428b_438a132a_000d1cef (ID = 0)
15:21: 00002cd6_438a0b68_0007a120 (ID = 0)
15:21: 00000bb3_438a0c61_000ec82e (ID = 0)
15:21: 000026e9_438a0c3f_0001ab3f (ID = 0)
15:21: 00005d03_438a132f_000632ea (ID = 0)
15:21: File Sweep Complete, Elapsed Time: 00:13:35
15:21: Full Sweep has completed. Elapsed time 00:16:05
15:21: Traces Found: 1011
15:54: Removal process initiated
15:54: Quarantining All Traces: spysheriff
15:54: Quarantining All Traces: trojan-backdoor-securemulti
15:54: Quarantining All Traces: trojan-backdoor-us15info
15:54: Quarantining All Traces: trojan-backdoor-zubox
15:54: Quarantining All Traces: apropos
15:54: apropos is in use. It will be removed on reboot.
15:54: wingenerics.dll is in use. It will be removed on reboot.
15:54: Quarantining All Traces: azsearch toolbar
15:54: Quarantining All Traces: coolwebsearch (cws)
15:54: Quarantining All Traces: cws_secure32.html hijack
15:54: Quarantining All Traces: ist software
15:54: Quarantining All Traces: ist yoursitebar
15:54: Quarantining All Traces: surf accuracy
15:54: surf accuracy is in use. It will be removed on reboot.
15:54: c:\archivos de programa\surfaccuracy is in use. It will be removed on reboot.
15:54: Quarantining All Traces: 2o7.net cookie
15:54: Quarantining All Traces: adjuggler cookie
15:54: Quarantining All Traces: apmebf cookie
15:54: Quarantining All Traces: atlas dmt cookie
15:54: Quarantining All Traces: atwola cookie
15:54: Quarantining All Traces: belnk cookie
15:54: Quarantining All Traces: ccbill cookie
15:54: Quarantining All Traces: dealtime cookie
15:54: Quarantining All Traces: falkag cookie
15:54: Quarantining All Traces: fastclick cookie
15:54: Quarantining All Traces: fe.lea.lycos.com cookie
15:54: Quarantining All Traces: gamespy cookie
15:54: Quarantining All Traces: go.com cookie
15:54: Quarantining All Traces: hbmediapro cookie
15:54: Quarantining All Traces: onestat.com cookie
15:54: Quarantining All Traces: qksrv cookie
15:54: Quarantining All Traces: realmedia cookie
15:54: Quarantining All Traces: redzip cookie
15:54: Quarantining All Traces: reliablestats cookie
15:54: Quarantining All Traces: rn11 cookie
15:55: Quarantining All Traces: serving-sys cookie
15:55: Quarantining All Traces: statcounter cookie
15:55: Quarantining All Traces: toplist cookie
15:55: Quarantining All Traces: tradedoubler cookie
15:55: Quarantining All Traces: trafficmp cookie
15:55: Quarantining All Traces: tribalfusion cookie
15:55: Quarantining All Traces: upspiral cookie
15:55: Quarantining All Traces: xiti cookie
15:55: Quarantining All Traces: yadro cookie
15:55: Quarantining All Traces: yieldmanager cookie
15:55: Quarantining All Traces: ysbweb cookie
15:55: Quarantining All Traces: zedo cookie
15:55: Removal process completed. Elapsed time 00:00:37
********
14:32: | Start of Session, martes, 29 de noviembre de 2005 |
14:32: Spy Sweeper started
14:32: Sweep initiated using definitions version 574
14:33: Starting Memory Sweep
14:35: Memory Sweep Complete, Elapsed Time: 00:02:31
14:35: Starting Registry Sweep
14:35: Found Adware: azsearch toolbar
14:35: HKLM\software\azentretienco\ (3 subtraces) (ID = 103905)
14:35: HKLM\software\microsoft\code store database\distribution units\{d7bf3304-138b-4dd5-86ee-491bb6a2286c}\ (9 subtraces) (ID = 103943)
14:35: HKLM\software\microsoft\internet explorer\toolbar\ || {a19ef336-01d4-48e6-926a-fe7e1c747aed} (ID = 103945)
14:35: Found Adware: coolwebsearch (cws)
14:35: HKLM\software\microsoft\windows\currentversion\run\ || paytime (ID = 112449)
14:35: Found Adware: ist yoursitebar
14:35: HKCR\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 147829)
14:35: HKLM\software\classes\ysbactivex.installer\ (3 subtraces) (ID = 147849)
14:35: Found Adware: ist software
14:35: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/ysbactivex.dll\ (2 subtraces) (ID = 147854)
14:35: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\ysbactivex.dll (ID = 147857)
14:35: HKCR\ysbactivex.installer\ (3 subtraces) (ID = 147869)
14:35: Found Adware: surf accuracy
14:35: HKLM\software\sacc\ (11 subtraces) (ID = 203068)
14:35: HKLM\software\microsoft\windows\currentversion\run\ || surfaccuracy (ID = 203069)
14:35: HKLM\software\microsoft\windows\currentversion\uninstall\sacc\ (2 subtraces) (ID = 203070)
14:35: Found Trojan Horse: trojan-backdoor-zubox
14:35: HKCR\acpi.acpi.1\ (3 subtraces) (ID = 484081)
14:35: HKCR\acpi.acpi.1\clsid\ (1 subtraces) (ID = 484083)
14:35: HKCR\acpi.ext\ (5 subtraces) (ID = 484085)
14:35: HKCR\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484093)
14:35: HKCR\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484124)
14:35: HKLM\software\classes\acpi.acpi.1\ (3 subtraces) (ID = 484140)
14:35: HKLM\software\classes\acpi.ext\ (5 subtraces) (ID = 484144)
14:35: HKLM\software\classes\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484152)
14:35: HKLM\software\classes\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484210)
14:35: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\system32\mdms.exe (ID = 812317)
14:35: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\tool1.exe (ID = 890587)
14:35: HKLM\software\classes\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 920458)
14:35: Found Adware: cws_secure32.html hijack
14:35: HKLM\software\microsoft\internet explorer\main\ || local page (ID = 946024)
14:35: HKLM\software\microsoft\internet explorer\main\ || start page (ID = 946025)
14:35: HKLM\software\microsoft\internet explorer\main\ || default_page_url (ID = 946027)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || paytime (ID = 112403)
14:35: Found Adware: spysheriff
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 142127)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\ (4 subtraces) (ID = 480808)
14:35: Found Trojan Horse: trojan-backdoor-securemulti
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 484139)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\mzu\ || pt (ID = 656825)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || local page (ID = 946022)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || start page (ID = 946023)
14:35: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || default_page_url (ID = 946026)
14:35: Registry Sweep Complete, Elapsed Time:00:00:20
14:35: Starting Cookie Sweep
14:35: Found Spy Cookie: 2o7.net cookie
14:35: usuario@2o7[2].txt (ID = 1957)
14:35: Found Spy Cookie: yieldmanager cookie
14:35: usuario@ad.yieldmanager[1].txt (ID = 3751)
14:35: Found Spy Cookie: hbmediapro cookie
14:35: usuario@adopt.hbmediapro[2].txt (ID = 2768)
14:35: Found Spy Cookie: apmebf cookie
14:35: usuario@apmebf[2].txt (ID = 2229)
14:35: Found Spy Cookie: falkag cookie
14:35: usuario@as-eu.falkag[1].txt (ID = 2650)
14:35: Found Spy Cookie: atlas dmt cookie
14:35: usuario@atdmt[2].txt (ID = 2253)
14:35: Found Spy Cookie: atwola cookie
14:35: usuario@atwola[1].txt (ID = 2255)
14:35: Found Spy Cookie: belnk cookie
14:35: usuario@belnk[1].txt (ID = 2292)
14:35: Found Spy Cookie: ccbill cookie
14:35: usuario@ccbill[2].txt (ID = 2369)
14:35: usuario@cnn.122.2o7[1].txt (ID = 1958)
14:35: usuario@dist.belnk[2].txt (ID = 2293)
14:35: Found Spy Cookie: fastclick cookie
14:35: usuario@fastclick[2].txt (ID = 2651)
14:35: Found Spy Cookie: fe.lea.lycos.com cookie
14:35: usuario@fe.lea.lycos[1].txt (ID = 2660)
14:35: usuario@fe.lea.lycos[2].txt (ID = 2660)
14:35: Found Spy Cookie: gamespy cookie
14:35: usuario@gamespy[1].txt (ID = 2719)
14:35: Found Spy Cookie: go.com cookie
14:35: usuario@go[1].txt (ID = 2728)
14:35: usuario@microsoftwga.112.2o7[1].txt (ID = 1958)
14:35: Found Spy Cookie: qksrv cookie
14:35: usuario@qksrv[2].txt (ID = 3213)
14:35: Found Spy Cookie: realmedia cookie
14:35: usuario@realmedia[1].txt (ID = 3235)
14:35: Found Spy Cookie: rn11 cookie
14:35: usuario@rn11[2].txt (ID = 3261)
14:35: Found Spy Cookie: adjuggler cookie
14:35: usuario@rotator.adjuggler[1].txt (ID = 2071)
14:35: usuario@sel.as-eu.falkag[2].txt (ID = 2650)
14:35: Found Spy Cookie: serving-sys cookie
14:35: usuario@serving-sys[2].txt (ID = 3343)
14:35: Found Spy Cookie: dealtime cookie
14:35: usuario@stat.dealtime[2].txt (ID = 2506)
14:35: Found Spy Cookie: onestat.com cookie
14:35: usuario@stat.onestat[2].txt (ID = 3098)
14:35: Found Spy Cookie: statcounter cookie
14:35: usuario@statcounter[1].txt (ID = 3447)
14:35: Found Spy Cookie: reliablestats cookie
14:35: usuario@stats1.reliablestats[2].txt (ID = 3254)
14:35: Found Spy Cookie: toplist cookie
14:35: usuario@toplist[1].txt (ID = 3557)
14:35: Found Spy Cookie: tradedoubler cookie
14:35: usuario@tradedoubler[1].txt (ID = 3575)
14:36: Found Spy Cookie: trafficmp cookie
14:36: usuario@trafficmp[2].txt (ID = 3581)
14:36: Found Spy Cookie: tribalfusion cookie
14:36: usuario@tribalfusion[1].txt (ID = 3589)
14:36: Found Spy Cookie: redzip cookie
14:36: usuario@www.redzip[2].txt (ID = 3250)
14:36: Found Spy Cookie: upspiral cookie
14:36: usuario@www.upspiral[2].txt (ID = 3615)
14:36: Found Spy Cookie: xiti cookie
14:36: usuario@xiti[1].txt (ID = 3717)
14:36: Found Spy Cookie: yadro cookie
14:36: usuario@yadro[1].txt (ID = 3743)
14:36: Found Spy Cookie: ysbweb cookie
14:36: usuario@ysbweb[1].txt (ID = 3756)
14:36: Found Spy Cookie: zedo cookie
14:36: usuario@zedo[2].txt (ID = 3762)
14:36: Cookie Sweep Complete, Elapsed Time: 00:00:03
14:36: Starting File Sweep
14:36: c:\archivos de programa\surfaccuracy (3 subtraces) (ID = -2147478266)
14:39: azesearch.bmp (ID = 50322)
14:39: Found Trojan Horse: trojan-backdoor-us15info
14:39: tool4[1].txt (ID = 183857)
14:39: tool5[1].txt (ID = 183857)
14:41: tool4.exe (ID = 183857)
14:42: tool5.exe (ID = 183857)
14:42: Found Adware: apropos
14:42: wingenerics.dll (ID = 50187)
14:43: Found System Monitor: potentially rootkit-masked files
14:43: 00001649_438b54c1_000b71b0 (ID = 0)
14:43: 00002e40_438b3a87_0000b71b (ID = 0)
14:43: 00002c3b_438b3ab6_0004c4b4 (ID = 0)
14:43: 00006952_438c5391_000aba95 (ID = 0)
14:43: 00003d6c_438c46b9_000632ea (ID = 0)
14:43: 00001cd0_438b3a90_0006acfc (ID = 0)
14:43: 0000187e_438b3c26_00007a12 (ID = 0)
14:43: 00000f3e_438b171b_0001e848 (ID = 0)
14:43: 0000366b_438b3aa6_00022551 (ID = 0)
14:43: 00003b25_438b395e_000e8b25 (ID = 0)
14:43: 000016c5_438b3c5b_0005f5e1 (ID = 0)
14:43: 00001547_438b1722_000b34a7 (ID = 0)
14:43: 00001cd0_438b19c8_0004c4b4 (ID = 0)
14:43: 00004230_438b3aa8_0002625a (ID = 0)
14:43: 00007eb7_438b3aa8_00089544 (ID = 0)
14:43: 00004230_438b1a11_000af79e (ID = 0)
14:43: 00002c3b_438b5d21_000e8b25 (ID = 0)
14:43: 00007f96_438b5931_0008d24d (ID = 0)
14:43: 00000124_438b171b_000c65d4 (ID = 0)
14:43: 00000099_438b171b_0002625a (ID = 0)
14:43: 00000ddc_438b4b06_00003d09 (ID = 0)
14:43: 00000822_438b3ad1_00057bcf (ID = 0)
14:43: 00000bdb_4388d1fd_00000000 (ID = 0)
14:43: 00006899_438b3d43_00076417 (ID = 0)
14:43: 000060bf_438b1c9f_000baeb9 (ID = 0)
14:43: 00005f45_438b2b0a_000a037a (ID = 0)
14:43: 000019d9_438b207f_000501bd (ID = 0)
14:43: 00005991_438b3ad2_0000b71b (ID = 0)
14:43: 0000440d_438b171f_00066ff3 (ID = 0)
14:43: 00005991_438b4da1_00053ec6 (ID = 0)
14:43: 00003ef6_438b1aa8_00076417 (ID = 0)
14:43: 00004db7_4388d021_0000000

"junto a un nuevo reporte del Hijack".
Salu2
Caito

********
15:05: | Start of Session, martes, 29 de noviembre de 2005 |
15:05: Spy Sweeper started
15:05: Sweep initiated using definitions version 574
15:05: Starting Memory Sweep
15:07: Memory Sweep Complete, Elapsed Time: 00:01:58
15:07: Starting Registry Sweep
15:07: Found Adware: azsearch toolbar
15:07: HKLM\software\azentretienco\ (3 subtraces) (ID = 103905)
15:07: HKLM\software\microsoft\code store database\distribution units\{d7bf3304-138b-4dd5-86ee-491bb6a2286c}\ (9 subtraces) (ID = 103943)
15:07: HKLM\software\microsoft\internet explorer\toolbar\ || {a19ef336-01d4-48e6-926a-fe7e1c747aed} (ID = 103945)
15:07: Found Adware: coolwebsearch (cws)
15:07: HKLM\software\microsoft\windows\currentversion\run\ || paytime (ID = 112449)
15:07: Found Adware: ist yoursitebar
15:07: HKCR\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 147829)
15:07: HKLM\software\classes\ysbactivex.installer\ (3 subtraces) (ID = 147849)
15:07: Found Adware: ist software
15:07: HKLM\software\microsoft\windows\currentversion\moduleusage\c:/windows/downloaded program files/ysbactivex.dll\ (2 subtraces) (ID = 147854)
15:07: HKLM\software\microsoft\windows\currentversion\shareddlls\ || c:\windows\downloaded program files\ysbactivex.dll (ID = 147857)
15:07: HKCR\ysbactivex.installer\ (3 subtraces) (ID = 147869)
15:07: Found Adware: surf accuracy
15:07: HKLM\software\sacc\ (11 subtraces) (ID = 203068)
15:07: HKLM\software\microsoft\windows\currentversion\run\ || surfaccuracy (ID = 203069)
15:07: HKLM\software\microsoft\windows\currentversion\uninstall\sacc\ (2 subtraces) (ID = 203070)
15:07: Found Trojan Horse: trojan-backdoor-zubox
15:07: HKCR\acpi.acpi.1\ (3 subtraces) (ID = 484081)
15:07: HKCR\acpi.acpi.1\clsid\ (1 subtraces) (ID = 484083)
15:07: HKCR\acpi.ext\ (5 subtraces) (ID = 484085)
15:07: HKCR\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484093)
15:07: HKCR\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484124)
15:07: HKLM\software\classes\acpi.acpi.1\ (3 subtraces) (ID = 484140)
15:07: HKLM\software\classes\acpi.ext\ (5 subtraces) (ID = 484144)
15:07: HKLM\software\classes\*\shellex\contextmenuhandlers\sysacpildap\ (1 subtraces) (ID = 484152)
15:07: HKLM\software\classes\typelib\{5e2121e1-0300-11d4-8d3b-444553540000}\ (9 subtraces) (ID = 484210)
15:07: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\system32\mdms.exe (ID = 812317)
15:07: HKLM\system\currentcontrolset\services\sharedaccess\parameters\firewallpolicy\standardprofile\authorizedapplications\list\ || c:\windows\tool1.exe (ID = 890587)
15:07: HKLM\software\classes\clsid\{42f2c9ba-614f-47c0-b3e3-ecfd34eed658}\ (8 subtraces) (ID = 920458)
15:07: Found Adware: cws_secure32.html hijack
15:07: HKLM\software\microsoft\internet explorer\main\ || local page (ID = 946024)
15:07: HKLM\software\microsoft\internet explorer\main\ || start page (ID = 946025)
15:07: HKLM\software\microsoft\internet explorer\main\ || default_page_url (ID = 946027)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || paytime (ID = 112403)
15:07: Found Adware: spysheriff
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 142127)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\ (4 subtraces) (ID = 480808)
15:07: Found Trojan Horse: trojan-backdoor-securemulti
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\windows\currentversion\run\ || windows installer (ID = 484139)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\mzs\mdms\mzu\ || pt (ID = 656825)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || local page (ID = 946022)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || start page (ID = 946023)
15:07: HKU\S-1-5-21-2052111302-776561741-839522115-1003\software\microsoft\internet explorer\main\ || default_page_url (ID = 946026)
15:07: Registry Sweep Complete, Elapsed Time:00:00:16
15:08: Starting Cookie Sweep
15:08: Found Spy Cookie: 2o7.net cookie
15:08: usuario@2o7[2].txt (ID = 1957)
15:08: Found Spy Cookie: yieldmanager cookie
15:08: usuario@ad.yieldmanager[1].txt (ID = 3751)
15:08: Found Spy Cookie: hbmediapro cookie
15:08: usuario@adopt.hbmediapro[2].txt (ID = 2768)
15:08: Found Spy Cookie: apmebf cookie
15:08: usuario@apmebf[2].txt (ID = 2229)
15:08: Found Spy Cookie: falkag cookie
15:08: usuario@as-eu.falkag[1].txt (ID = 2650)
15:08: Found Spy Cookie: atlas dmt cookie
15:08: usuario@atdmt[2].txt (ID = 2253)
15:08: Found Spy Cookie: atwola cookie
15:08: usuario@atwola[1].txt (ID = 2255)
15:08: Found Spy Cookie: belnk cookie
15:08: usuario@belnk[1].txt (ID = 2292)
15:08: Found Spy Cookie: ccbill cookie
15:08: usuario@ccbill[2].txt (ID = 2369)
15:08: usuario@cnn.122.2o7[1].txt (ID = 1958)
15:08: usuario@dist.belnk[2].txt (ID = 2293)
15:08: Found Spy Cookie: fastclick cookie
15:08: usuario@fastclick[2].txt (ID = 2651)
15:08: Found Spy Cookie: fe.lea.lycos.com cookie
15:08: usuario@fe.lea.lycos[1].txt (ID = 2660)
15:08: usuario@fe.lea.lycos[2].txt (ID = 2660)
15:08: Found Spy Cookie: gamespy cookie
15:08: usuario@gamespy[1].txt (ID = 2719)
15:08: Found Spy Cookie: go.com cookie
15:08: usuario@go[1].txt (ID = 2728)
15:08: usuario@microsoftwga.112.2o7[1].txt (ID = 1958)
15:08: Found Spy Cookie: qksrv cookie
15:08: usuario@qksrv[2].txt (ID = 3213)
15:08: Found Spy Cookie: realmedia cookie
15:08: usuario@realmedia[1].txt (ID = 3235)
15:08: Found Spy Cookie: rn11 cookie
15:08: usuario@rn11[2].txt (ID = 3261)
15:08: Found Spy Cookie: adjuggler cookie
15:08: usuario@rotator.adjuggler[1].txt (ID = 2071)
15:08: usuario@sel.as-eu.falkag[2].txt (ID = 2650)
15:08: Found Spy Cookie: serving-sys cookie
15:08: usuario@serving-sys[2].txt (ID = 3343)
15:08: Found Spy Cookie: dealtime cookie
15:08: usuario@stat.dealtime[2].txt (ID = 2506)
15:08: Found Spy Cookie: onestat.com cookie
15:08: usuario@stat.onestat[2].txt (ID = 3098)
15:08: Found Spy Cookie: statcounter cookie
15:08: usuario@statcounter[1].txt (ID = 3447)
15:08: Found Spy Cookie: reliablestats cookie
15:08: usuario@stats1.reliablestats[2].txt (ID = 3254)
15:08: Found Spy Cookie: toplist cookie
15:08: usuario@toplist[1].txt (ID = 3557)
15:08: Found Spy Cookie: tradedoubler cookie
15:08: usuario@tradedoubler[1].txt (ID = 3575)
15:08: Found Spy Cookie: trafficmp cookie
15:08: usuario@trafficmp[1].txt (ID = 3581)
15:08: Found Spy Cookie: tribalfusion cookie
15:08: usuario@tribalfusion[1].txt (ID = 3589)
15:08: Found Spy Cookie: redzip cookie
15:08: usuario@www.redzip[2].txt (ID = 3250)
15:08: Found Spy Cookie: upspiral cookie
15:08: usuario@www.upspiral[2].txt (ID = 3615)
15:08: Found Spy Cookie: xiti cookie
15:08: usuario@xiti[1].txt (ID = 3717)
15:08: Found Spy Cookie: yadro cookie
15:08: usuario@yadro[1].txt (ID = 3743)
15:08: Found Spy Cookie: ysbweb cookie
15:08: usuario@ysbweb[1].txt (ID = 3756)
15:08: Found Spy Cookie: zedo cookie
15:08: usuario@zedo[2].txt (ID = 3762)
15:08: Cookie Sweep Complete, Elapsed Time: 00:00:03
15:08: Starting File Sweep
15:08: c:\archivos de programa\surfaccuracy (3 subtraces) (ID = -2147478266)
15:10: azesearch.bmp (ID = 50322)
15:11: Found Trojan Horse: trojan-backdoor-us15info
15:11: tool4[1].txt (ID = 183857)
15:11: tool5[1].txt (ID = 183857)
15:14: tool4.exe (ID = 183857)
15:14: tool5.exe (ID = 183857)
15:14: Found Adware: apropos
15:14: wingenerics.dll (ID = 50187)
15:16: Found System Monitor: potentially rootkit-masked files
15:16: 00001649_438b54c1_000b71b0 (ID = 0)
15:16: 00002e40_438b3a87_0000b71b (ID = 0)
15:16: 00002c3b_438b3ab6_0004c4b4 (ID = 0)
15:16: 00006952_438c5391_000aba95 (ID = 0)
15:16: 00001cd0_438b3a90_0006acfc (ID = 0)
15:16: 0000187e_438b3c26_00007a12 (ID = 0)
15:16: 00000f3e_438b171b_0001e848 (ID = 0)
15:16: 0000366b_438b3aa6_00022551 (ID = 0)
15:16: 00003b25_438b395e_000e8b25 (ID = 0)
15:16: 000016c5_438b3c5b_0005f5e1 (ID = 0)
15:16: 00001547_438b1722_000b34a7 (ID = 0)
15:16: 00001cd0_438b19c8_0004c4b4 (ID = 0)
15:16: 00004230_438b3aa8_0002625a (ID = 0)
15:16: 00007eb7_438b3aa8_00089544 (ID = 0)
15:16: 00004230_438b1a11_000af79e (ID = 0)
15:16: 00002c3b_438b5d21_000e8b25 (ID = 0)
15:16: 00007f96_438b5931_0008d24d (ID = 0)
15:16: 00000124_438b171b_000c65d4 (ID = 0)
15:16: 00000099_438b171b_0002625a (ID = 0)
15:16: 00000ddc_438b4b06_00003d09 (ID = 0)
15:16: 00000822_438b3ad1_00057bcf (ID = 0)
15:16: 00000bdb_4388d1fd_00000000 (ID = 0)
15:16: 00006899_438b3d43_00076417 (ID = 0)
15:16: 000060bf_438b1c9f_000baeb9 (ID = 0)
15:16: 00005f45_438b2b0a_000a037a (ID = 0)
15:16: 000019d9_438b207f_000501bd (ID = 0)
15:16: 00005991_438b3ad2_0000b71b (ID = 0)
15:16: 0000440d_438b171f_00066ff3 (ID = 0)
15:16: 00005991_438b4da1_00053ec6 (ID = 0)
15:16: 00003ef6_438b1aa8_00076417 (ID = 0)
15:16: 00004db7_4388d021_00000000 (ID = 0)
15:16: 00003cd5_438b3d7b_0003567e (ID = 0)
15:16: 0000491c_438b1720_00081b32 (ID = 0)
15:16: 00004db7_438b1721_000d59f8 (ID = 0)
15:16: 00005f90_438c53b6_000e8b25 (ID = 0)
15:16: 000012e1_438b3adb_000d1cef (ID = 0)
15:16: 000056ae_4388d210_0003d090 (ID = 0)
15:16: 000054de_438b1723_0007270e (ID = 0)
15:16: 00001e1f_438b3960_0002625a (ID = 0)
15:16: 000054de_4388d053_00007a12 (ID = 0)
15:16: 000026ca_438b3b1e_000aba95 (ID = 0)
15:16: 0000422d_438b1cc5_00090f56 (ID = 0)
15:16: 00005991_438b1ab3_00022551 (ID = 0)
15:16: 00006bfc_438b4914_00057bcf (ID = 0)
15:16: 00004080_438b3dcf_000e4e1c (ID = 0)
15:16: 000066c4_438b19e0_0001e848 (ID = 0)
15:16: 0000121f_438b3adc_00053ec6 (ID = 0)
15:16: 00001649_438c53c7_000a037a (ID = 0)
15:16: 00004823_438c532f_0001e848 (ID = 0)
15:16: 0000153c_438b37c4_000dd40a (ID = 0)
15:16: 00006df1_438c53db_0001e848 (ID = 0)
15:16: 0000440d_438b4793_00016e36 (ID = 0)
15:16: 00000f3e_438b4774_00031975 (ID = 0)
15:16: 00000902_438b3b55_00076417 (ID = 0)
15:16: 0000409d_438b4da2_00040d99 (ID = 0)
15:16: 00004db7_438b4794_000e4e1c (ID = 0)
15:16: 00007f96_438b4914_000a7d8c (ID = 0)
15:16: 00003b25_438b1744_0006ea05 (ID = 0)
15:16: 00006bfc_438b1747_000ca2dd (ID = 0)
15:16: 00004ae1_438a1a0d_0004c4b4 (ID = 0)
15:16: 00005772_438b3bb7_000dd40a (ID = 0)
15:16: 00001ad4_438b1745_0000b71b (ID = 0)
15:16: 00004944_4389d92a_00098968 (ID = 0)
15:16: 000013e9_438b3db6_00076417 (ID = 0)
15:16: 00002c49_438b1db9_0001ab3f (ID = 0)
15:16: 00003d6c_438a1a0f_000ec82e (ID = 0)
15:16: 00006952_438a1a9b_0009c671 (ID = 0)
15:16: 000063cb_438b4879_0003d090 (ID = 0)
15:16: 000039b3_4388d084_000ca2dd (ID = 0)
15:16: 00003c61_438b1dba_0008583b (ID = 0)
15:16: 00007ff5_438b4915_0001312d (ID = 0)
15:16: 000018be_438a02bf_00007a12 (ID = 0)
15:16: 000041bb_4389f01f_00066ff3 (ID = 0)
15:16: 00002c3b_438b1a25_00081b32 (ID = 0)
15:16: 00005af1_438a1ed6_00076417 (ID = 0)
15:16: 00007ff5_438b5940_00000000 (ID = 0)
15:16: 00000120_4388d22d_000c65d4 (ID = 0)
15:16: 0000440d_438b5851_00057bcf (ID = 0)
15:16: 000063cb_4389d615_0002625a (ID = 0)
15:16: 00002350_4388d231_0008d24d (ID = 0)
15:16: 00000029_4389d21f_00094c5f (ID = 0)
15:16: 00001a49_438b18fe_00057bcf (ID = 0)
15:16: 000072ae_438b53aa_0006acfc (ID = 0)
15:16: 00004df2_4388d38e_0000b71b (ID = 0)
15:16: 000022ee_4388d23d_00007a12 (ID = 0)
15:16: 00006270_438b263f_000ec82e (ID = 0)
15:16: 00004b40_4388d24d_00044aa2 (ID = 0)
15:16: 00004dc8_4388d0ca_00016e36 (ID = 0)
15:16: 00006784_4388ce6a_00081b32 (ID = 0)
15:16: 00006e5d_438b3960_000487ab (ID = 0)
15:16: 00006952_438b545a_0008583b (ID = 0)
15:16: 00006df1_4389d336_000c65d4 (ID = 0)
15:16: 0000491c_438b5854_00044aa2 (ID = 0)
15:16: 00006b36_4388d252_0003567e (ID = 0)
15:16: 0000798b_438b1ac4_0000f424 (ID = 0)
15:16: 00006443_4388d0e5_00007a12 (ID = 0)
15:16: 00004823_438b513f_00029f63 (ID = 0)
15:16: 00001ad4_438b3960_0007a120 (ID = 0)
15:16: 00005af1_4389d337_0009c671 (ID = 0)
15:16: 00005cfd_4388d25f_00066ff3 (ID = 0)
15:16: 00005772_438b60f1_0005f5e1 (ID = 0)
15:16: 00004944_4388d393_000487ab (ID = 0)
15:16: 00004dc8_438b47a1_00039387 (ID = 0)
15:16: 00001a49_4388d260_00039387 (ID = 0)
15:16: 000011f4_438b1f7b_000e4e1c (ID = 0)
15:16: 00002fff_438b1dfd_000ca2dd (ID = 0)
15:16: 00003bf6_4388d266_000a7d8c (ID = 0)
15:17: 000066bb_4388d115_0009c671 (ID = 0)
15:17: 000026a6_438b47ae_0003d090 (ID = 0)
15:17: 0000401d_438b1ec6_00022551 (ID = 0)
15:17: 000015a1_4388d422_00007a12 (ID = 0)
15:17: 00006784_438b517c_00029f63 (ID = 0)
15:17: 00006784_4389d289_00029f63 (ID = 0)
15:17: 0000428b_4388d115_000a7d8c (ID = 0)
15:17: 000072ae_438b376b_000501bd (ID = 0)
15:17: 00004080_438b1bc4_000501bd (ID = 0)
15:17: 000026a6_4388d116_00022551 (ID = 0)
15:17: 0000797d_4388d268_000baeb9 (ID = 0)
15:17: 000073da_438b1adc_0008d24d (ID = 0)
15:17: 00005d03_4388d12a_00089544 (ID = 0)
15:17: 000058b0_438b1ae5_00098968 (ID = 0)
15:17: 00001e1f_4389d5cd_000e8b25 (ID = 0)
15:17: 00005f32_438b4aef_0004c4b4 (ID = 0)
15:17: 00004ae1_4388ce6f_00007a12 (ID = 0)
15:17: 00004cad_4388d27a_0007de29 (ID = 0)
15:17: 0000701f_438b47bc_000487ab (ID = 0)
15:17: 00007983_438b1d84_0001312d (ID = 0)
15:17: 00005422_4388d429_0006acfc (ID = 0)
15:17: 00007a5a_4388d12d_0007de29 (ID = 0)
15:17: 0000314f_4388d27c_0007a120 (ID = 0)
15:17: 00001af4_438b200c_00022551 (ID = 0)
15:17: 00004509_4388d137_00022551 (ID = 0)
15:17: 000023c9_438b1c77_00081b32 (ID = 0)
15:17: index (ID = 0)
15:17: dns (ID = 0)
15:17: 00002e40_4388d39f_000c28cb (ID = 0)
15:17: 000041bb_438a0c03_000632ea (ID = 0)
15:17: 00003ef6_4388d439_0001312d (ID = 0)
15:17: 00003d6c_438c46b9_000632ea (ID = 0)
15:17: 00004b40_438b39cc_000487ab (ID = 0)
15:17: 00007ff5_4388d17f_000487ab (ID = 0)
15:17: 00004657_438b1d93_000bebc2 (ID = 0)
15:17: 00003699_438b4e22_000501bd (ID = 0)
15:17: 00002c3b_438b4d73_0007de29 (ID = 0)
15:17: 00005e14_4388d2b4_000a7d8c (ID = 0)
15:17: 000015a1_438b4d75_0008583b (ID = 0)
15:17: 00005422_438b4d76_0000b71b (ID = 0)
15:17: 00004e45_4388d187_000ca2dd (ID = 0)
15:17: 0000323b_4388d191_00081b32 (ID = 0)
15:17: 00000822_4388d43a_000ca2dd (ID = 0)
15:17: 00004e45_438b5940_0000f424 (ID = 0)
15:17: 0000260d_4388d19b_0002625a (ID = 0)
15:17: 000018be_438c6066_000ac2c2 (ID = 0)
15:17: 00001547_4389d52d_00044aa2 (ID = 0)
15:17: 000041bb_438a1ed6_000f0537 (ID = 0)
15:17: 00001366_4388d3be_000487ab (ID = 0)
15:17: 000012e1_4389da18_00000000 (ID = 0)
15:17: 00001cd0_4388d3d0_00007a12 (ID = 0)
15:17: 0000030a_4388d1a8_00053ec6 (ID = 0)
15:17: 00007dd1_438b1e36_00098968 (ID = 0)
15:17: 0000765f_438b253e_000a4083 (ID = 0)
15:17: 00005878_438b39cc_0008d24d (ID = 0)
15:17: 00000bdb_4389d710_00040d99 (ID = 0)
15:17: 00000384_438b1f1f_000c28cb (ID = 0)
15:17: 0000798b_4389da18_00003d09 (ID = 0)
15:17: 00007bb9_438b1b37_0003567e (ID = 0)
15:17: 000026e9_4389d33c_000d59f8 (ID = 0)
15:17: 000039b3_4389d535_0000b71b (ID = 0)
15:17: 00005c67_438b1ca1_00022551 (ID = 0)
15:17: 00003cd6_438b1ca1_00066ff3 (ID = 0)
15:17: 00000fbf_438b1ca2_00003d09 (ID = 0)
15:17: 00000029_43897fb3_0003567e (ID = 0)
15:17: 00003d6c_4388ce7b_0002dc6c (ID = 0)
15:17: 0000366b_4388d3e3_00098968 (ID = 0)
15:17: 00006ad6_438b1cb4_00007a12 (ID = 0)
15:17: 00007e87_4389d4a8_000b71b0 (ID = 0)
1