TEST ANTIROOTKIT (SOLUCIONADO)

Mensaje por **msc hotline sat** » 28 Nov 2007, 10:04

Como sea que estamos ante lo desconocido e invisible cuando nos topamos con un RootKit (a diario) y es nuestro temor el que estos maliciosos procesos incrementen en cantidad y en malicia en los proximos tiempos, y lo mismo que en los clientes asociados a SATINFO, tambien los foreros de zonavirus están sujetos a las modas de internet, especialmente a las maliciosas, y en esto los RootKits se llevan la palma, vamos a subir dentro de nuestras utilidades la que hacemos servir para encontrar procesos ocultos y maliciosos a partir de lo cual tirar del hilo para "encender la luz" en la oscuridad que se está cuando no se ve nada pero se tienen problemas que se sospecha son debidos a malwares escondidos o protegidos por Rootkits.

Recuerdese que los RootKits son procesos que esconden claves de registro, procesos y ficheros para que no los vea el usuario(ni el tecnico), e incluso se esconde él para rizar el rizo, y es para volverse loco !

McAfee dispone del McAfeeRootkitDetective cuyo proceso nos genera un fichero de texto "RootkitDetectiveReport.txt" en la misma carpeta desde donde se ha ejecutado, y en dicho fichero podemos ver los procesos ocultos que acostumbran a ser maliciosos y conviene enviarnos los ficheros que los generan para analizarlos y controlarlos.

Lo primeo que debe hacerse es, si de indica o se considera que se debe usar esta utilidad, es ejecutarla y postear el contenido del log que genera, en la misma carpeta desde donde se ejecuta, con el nombre de "RootkitDetectiveReport.txt", tras ello lo analizaremos y pediremos que nos envien los ficheros que procedan para analizar.

La informacion que sobre dicha utilidad ofrece McAfee esla siguiente:

McAfee escribió:Release Notes for McAfee® Rootkit Detective Version 1.1
Developed by
McAfee® Avert® Labs
Copyright © 2005-2007 McAfee, Inc. All Rights Reserved
You use of the McAfee Rootkit Detective is subject to the
Software License terms at the end of this document.

===========================================================

Thank you for using McAfee® Rootkit Detective 1.1
Software. This readme file contains important information
regarding this release. We strongly recommend that
you read the entire document before you run the tool.

IMPORTANT:
The Rootkit Detective allows you to detect and repair
rootkits that hides their processes, files and registry
entries. We strongly suggest that you take full caution
when taking a repair action against hidden files,
registry entries and processes as it may lead to serious
system stability issues depending on how the rootkit
injects its components into the execution environment.

As there is no support for automatic upgrading of
this version of the software, you need to download
the latest new release, a release candidate, or a
production release of the software manually by
downloading directly from the Website.

__________________________________________________________
WHAT'S IN THIS FILE

- Introduction
- Scope of this Release
- Features
- Installation & System Requirements
- Supported Products
- Known Issues
- Documentation
- Contact Information
- Copyright, Trademark Attributions & Patents
- Trademarks
- License Agreement and Attributions
- Patents

__________________________________________________________

INTRODUCTION
McAfee Rootkit Detective is a program designed and
developed by McAfee Avert Labs to proactively detect
and clean rootkits that are running in the system.

SCOPE OF THIS RELEASE

This McAfee Avert Rootkit Detective Release 1.1

- Is provided as a free tool with no charge

- Does not have an expiry. Nonetheless, AVERT Labs does
not recommend using this release once a new release is
available.

- Works on all supported platforms. (Refer to Installation
and System requirements)

For additional information or feedback about the Rootkit
Detective 1.1 please contact stinger@avertlabs.com

FEATURES

Following are the features of this program that are designed
to proactively detect and clean rootkits from
the system. This program is not dependent on any signatures
and can proactively detect most of the existing
and upcoming rootkits and allow the user to clean them.

1. Proactively detect the processes, files and registry that
are hiding from the system user or security applications.
2. Provides information about all running processes in the
system.
3. Provides information about various system hooks like SSDT
(System Service Descriptor Table) hooks,
user/kernel IAT/EAT(Import/Export Address Table) hooks.
4. Allows the user to clean/remove the malicious objects from
the system by renaming/deleting the hidden
files/registry.
5. Allows the user to terminate the malicious processes.
6. Users can submit samples using the submission feature present
in the tool.
7. Users can also collect the samples manually after renaming
them and submit to stinger@avertlabs.com for further analysis.

Rootkit Detective generates a log file which contains detailed information
about what the tool finds when running on the user system. The files once
renamed after reboot will have a .REN extension.
Users can search for log files on their systems and submit these files for
further analysis with their comments to stinger@avertlabs.com.
Zip the files and password protect with “infected” and mention “Rootkit
Detective” in the subject line when you send the mail.

__________________________________________________________
INSTALLATION AND SYSTEM REQUIREMENTS

This package is a zip file and contains the following files in it.

1. Rootkit_Detective.exe - This file is the single and main executable
that detects and cleans rootkits.
2. Readme.txt - This file contains all the information about the program.

You need to extract this zip file in the system with any unzipping program
and run the main file.

Please read the Readme.txt before using this program. This tool only runs
in Administrator mode.

You should run this program by logging in as Administrator user or any user
having the Administrator rights.

The following platforms are currently supported. The OS Language supported
is English for all supported platforms.

Operating Systems supported:
- Windows XP Home Edition with SP2
- Windows XP Professional Edition with SP2
- Windows 2000 with SP4
- Windows 2000 Server
- Windows 2003 Server SP1

__________________________________________________________
SUPPORTED PRODUCTS

This tool has been tested for compatibility against the following products

1. McAfee Virus Scan Enterprise 8.0i
2. McAfee Virus Scan Online 11
3. F-Secure Internet Security Suite 2006
4. Kaspersky Internet Security 2006
5. CA eTrust Internet Security Suite
6. TrendPC-Cillin Internet Security 2006
7. AVG Anti-Virus plus Firewall 7.1
8. TrendPC-Cillin Internet Security 2006
9. Sygate Personal Firewall
10. Norton Antivirus 2006
11. McAfee Antispyware Enterprise 8.0
12. MASE Plugin for VSE8.0i
13. Zone Alarm
14. McAfee Virus scan Enterprise 8.5i
15. Microsoft Windows OneCare

In case you experience any issues with the above or any other AV or Firewall
Products please send as e-mail to the mail ID specified in the contact
information section.

__________________________________________________________
KNOWN ISSUES

1. Known detection issues
Rootkit Detective allows end users to list suspicious hooks made to the system kernel.
Those Hooks are used by Rootkits and also by legitimate security applications. In this
section we will list the device drivers from various security vendors that hook into
the system kernel and as a result of the that the tool would show them while doing the
kernel integrity scanning.

We ask the end user not to take any action against any of those device drivers as this
may lead to serious system stability issues and at the minimum would disable their
security application. In addition some security application hide some entries. Those are
listed as well.

- Detects registry entries pertaining to McAfee Entercept Products.
- Detects hooked kernel services by mfehidk.sys file pertaining to McAfee
Antispyware Enterprise (Standalone).
- Detect IAT/EAT hooks in Windows 2000 SP4 system pointing to shim.dll.
- Detects vsdatant.sys from Zone Alarm as hooked service for rootkit like
behavior.
- Detects Goback2k.sys as hooked service on system having Go Back software
installed system for rootkit like behavior.
- Detects fsndis5.sys as hooked service from F-Secure if F-Secure Internet
Security Suite 2006 is installed on the system
- Detect klif.sys as hooked service from Kaspersky if Kaspersky Internet
Security 2006 is installed on the system.
- Detect FireTDS.sys as hooked service from McAfee if McAfee Desktop
Firewall is installed on the system.
- Detect Hidsys.sys as hooked service from McAfee if McAfee Host Intrusion
Prevention is installed on the system.
- Detect Service Name ZwCreateThread when VSE product is installed on the
system.

2. Additional detection issues
In addition to the hooks listed in previous section, the tool will detect many IAT/EAT
hooks and SSDT hooks of other legitimate applications.

3. Running issue
The tool will not run on Windows 2000 platforms when Kaspersky Internet Security 2006
is installed.

NOTE: Some or all of the above issues may be addressed in the future releases.

__________________________________________________________
DOCUMENTATION

- Help Link in the tool.
A Help file, accessed from within the tool,
provides quick access to concepts,
definitions, and procedures for using the
tool.

- This README file.

_________________________________________________________
CONTACT INFORMATION

THREAT CENTER: McAfee(r) Avert(r) Labs
Home Page
http://www.mcafee.com/us/threat_center/default.asp

Avert Labs Threat Library
http://vil.nai.com/

Avert WebImmune & Submit a Sample (Logon
credentials required)
https://www.webimmune.net/default.asp

Avert DAT Notification Service
http://vil.nai.com/vil/signup_DAT_notification.aspx

Contact stinger@avertlabs.com for any queries

McAfee Avert is devoted to providing solutions based on your input.

_____________________________________________________
LEGAL INFORMATION

SOFTWARE LICENSE

BY DOWNLOADING AND INSTALLING THE MCAFEE ROOTKIT DETECTIVE (the "SOFTWARE"),
YOU AGREE TO BE BOUND BY THE TERMS AND CONDITIONS OF THIS SOFTWARE
LICENSE AGREEMENT. IF YOU DO NOT AGREE WITH THESE TERMS AND CONDITIONS,
THEN UNINSTALL THIS SOFTWARE PRODUCT AND DELETE ALL COPIES.

You, conditioned upon accepting these terms, is hereby granted a
non-exclusive, non-transferable, non-royalty bearing license to copy, and
install the Software for your internal use only. You are NOT allowed to:
(1) reverse engineer or otherwise attempt to discover the Software's source code;
(2) sell, assign, sublicense, rent, share or otherwise distribute the Software to 3rd parties; or
(3) Use, copy, print or display the McAfee logo in connection with your use of the Software.

THE SOFTWARE IS PROVIDED AS-IS, WITH NO WARRANTY WHATSOEVER, EXPRESS OR IMPLIED.
THE IMPLIED WARRANTIES OF MERCHANTABILITY, FITNESS FOR A PARTICULAR PURPOSE, AND
NON-INFRINGEMENT ARE SPECIFICALLY DISCLAIMED.

McAfee reserves the right to terminate your license at any time for any reason, or even
for no reason.

TRADEMARKS

ACTIVE FIREWALL, ACTIVE SECURITY, ACTIVESECURITY
(AND IN KATAKANA), ACTIVESHIELD, CLEAN-UP, DESIGN
(STYLIZED E), DESIGN (STYLIZED N), ENTERCEPT,
EPOLICY ORCHESTRATOR, FIRST AID, FOUNDSTONE,
GROUPSHIELD, GROUPSHIELD (AND IN KATAKANA),
INTRUSHIELD, INTRUSION PREVENTION THROUGH
INNOVATION, MCAFEE, MCAFEE (AND IN KATAKANA), MCAFEE
AND DESIGN, MCAFEE.COM, MCAFEE VIRUSSCAN, NET TOOLS,
NET TOOLS (AND IN KATAKANA), NETSCAN, NETSHIELD,
NUTS & BOLTS, OIL CHANGE, PRIMESUPPORT, SPAMKILLER,
THREATSCAN, TOTAL VIRUS DEFENSE, VIREX, VIRUS FORUM,
VIRUSCAN, VIRUSSCAN, VIRUSSCAN (AND IN KATAKANA),
WEBSCAN, WEBSHIELD, WEBSHIELD (AND IN KATAKANA) are
registered trademarks or trademarks of McAfee, Inc.
and/or its affiliates in the US and/or other
countries. The color red in connection with security
is distinctive of McAfee brand products. All other
registered and unregistered trademarks herein are
the sole property of their respective owners.

_____________________________________________________
3rd PARTY OPEN SOURCE SOFTWARE AND PATENT INFORMATION

LICENSE ATTRIBUTIONS

This product includes or may include:
* Software developed by the OpenSSL Project for use
in the OpenSSL Toolkit (http://www.openssl.org/).
* Cryptographic software written by Eric A. Young
and software written by Tim J. Hudson. * Some
software programs that are licensed (or sublicensed)
to the user under the GNU General Public License
(GPL) or other similar Free Software licenses which,
among other rights, permit the user to copy, modify
and redistribute certain programs, or portions
thereof, and have access to the source code. The GPL
requires that for any software covered under the
GPL, which is distributed to someone in an
executable binary format, that the source code also
be made available to those users. For any such
software covered under the GPL, the source code is
made available on this CD. If any Free Software
licenses require that McAfee provide rights to use,
copy or modify a software program that are broader
than the rights granted in this agreement, then such
rights shall take precedence over the rights and
restrictions herein. * Software originally written
by Henry Spencer, Copyright 1992, 1993, 1994, 1997
Henry Spencer. * Software originally written by
Robert Nordier, Copyright (C) 1996-7 Robert Nordier.
* Software written by Douglas W. Sauder. * Software
developed by the Apache Software Foundation
(http://www.apache.org/). A copy of the license
agreement for this software can be found at
http://www.apache.org/licenses/LICENSE-2.0.txt.
* International Components for Unicode ("ICU")
Copyright (C) 1995-2002 International Business
Machines Corporation and others. * Software
developed by CrystalClear Software, Inc., Copyright
(C) 2000 CrystalClear Software, Inc. * FEAD(R)
Optimizer(R) technology, Copyright Netopsystems AG,
Berlin, Germany. * Outside In(R) Viewer Technology
(C) 1992-2001 Stellent Chicago, Inc. and/or Outside
In(R) HTML Export, (C) 2001 Stellent Chicago, Inc.
* Software copyrighted by Thai Open Source Software
Center Ltd. and Clark Cooper, (C) 1998, 1999, 2000.
* Software copyrighted by Expat maintainers.
* Software copyrighted by The Regents of the
University of California, (C) 1996, 1989, 1998-2000.
* Software copyrighted by Gunnar Ritter. * Software
copyrighted by Sun Microsystems, Inc., 4150 Network
Circle, Santa Clara, California 95054, U.S.A., (C)
2003. * Software copyrighted by Gisle Aas. (C)
1995-2003. * Software copyrighted by Michael A.
Chase, (C) 1999-2000. * Software copyrighted by Neil
Winton, (C) 1995-1996. * Software copyrighted by RSA
Data Security, Inc., (C) 1990-1992. * Software
copyrighted by Sean M. Burke, (C) 1999, 2000.
* Software copyrighted by Martijn Koster, (C) 1995.
* Software copyrighted by Brad Appleton, (C)
1996-1999. * Software copyrighted by Michael G.
Schwern, (C) 2001. * Software copyrighted by Graham
Barr, (C) 1998. * Software copyrighted by Larry Wall
and Clark Cooper, (C) 1998-2000. * Software
copyrighted by Frodo Looijaard, (C) 1997. * Software
copyrighted by the Python Software Foundation,
Copyright (C) 2001, 2002, 2003. A copy of the
license agreement for this software can be found at
http://www.python.org. * Software copyrighted by Beman
Dawes, (C) 1994-1999, 2002. * Software written by
Andrew Lumsdaine, Lie-Quan Lee, Jeremy G. Siek (C)
1997-2000 University of Notre Dame. * Software
copyrighted by Simone Bordet & Marco Cravero, (C)
2002. * Software copyrighted by Stephen Purcell, (C)
2001. * Software developed by the Indiana University
Extreme! Lab (http://www.extreme.indiana.edu/).
* Software copyrighted by International Business
Machines Corporation and others, (C) 1995-2003.
* Software developed by the University of
California, Berkeley and its contributors.
* Software developed by Ralf S. Engelschall
<rse@engelschall.com> for use in the mod_ssl project
(http:// http://www.modssl.org/). * Software copyrighted by
Kevlin Henney, (C) 2000-2002. * Software copyrighted
by Peter Dimov and Multi Media Ltd. (C) 2001, 2002.
* Software copyrighted by David Abrahams, (C) 2001,
2002. See http://www.boost.org/libs/bind/bind.html
for documentation. * Software copyrighted by Steve
Cleary, Beman Dawes, Howard Hinnant & John Maddock,
(C) 2000. * Software copyrighted by Boost.org, (C)
1999-2002. * Software copyrighted by Nicolai M.
Josuttis, (C) 1999. * Software copyrighted by Jeremy
Siek, (C) 1999-2001. * Software copyrighted by
Daryle Walker, (C) 2001. * Software copyrighted by
Chuck Allison and Jeremy Siek, (C) 2001, 2002.
* Software copyrighted by Samuel Krempp, (C) 2001.
See http://www.boost.org for updates, documentation,
and revision history. * Software copyrighted by Doug
Gregor (gregod@cs.rpi.edu), (C) 2001, 2002.
* Software copyrighted by Cadenza New Zealand Ltd.,
(C) 2000. * Software copyrighted by Jens Maurer,
(C) 2000, 2001. * Software copyrighted by Jaakko
Järvi (jaakko.jarvi@cs.utu.fi), (C) 1999, 2000.
* Software copyrighted by Ronald Garcia, (C) 2002.
* Software copyrighted by David Abrahams, Jeremy
Siek, and Daryle Walker, (C) 1999-2001. * Software
copyrighted by Stephen Cleary (shammah@voyager.net),
(C) 2000. * Software copyrighted by Housemarque Oy
<http://www.housemarque.com>, (C) 2001. * Software
copyrighted by Paul Moore, (C) 1999. * Software
copyrighted by Dr. John Maddock, (C) 1998-2002.
* Software copyrighted by Greg Colvin and Beman
Dawes, (C) 1998, 1999. * Software copyrighted by
Peter Dimov, (C) 2001, 2002. * Software copyrighted
by Jeremy Siek and John R. Bandela, (C) 2001.
* Software copyrighted by Joerg Walter and Mathias
Koch, (C) 2000-2002. * Software copyrighted by
Carnegie Mellon University (C) 1989, 1991, 1992.
* Software copyrighted by Cambridge Broadband Ltd.,
(C) 2001-2003. * Software copyrighted by Sparta,
Inc., (C) 2003-2004. * Software copyrighted by
Cisco, Inc and Information Network Center of Beijing
University of Posts and Telecommunications, (C)
2004. * Software copyrighted by Simon Josefsson, (C)
2003. * Software copyrighted by Thomas Jacob, (C)
2003-2004. * Software copyrighted by Advanced
Software Engineering Limited, (C) 2004. * Software
copyrighted by Todd C. Miller, (C) 1998. * Software
copyrighted by The Regents of the University of
California, (C) 1990, 1993, with code derived from
software contributed to Berkeley by Chris Torek.

PATENTS
Protected by US Patents 6,006,035; 6,029,256;
6,035,423; 6,151,643; 6,230,288; 6,266,811;
6,269,456; 6,457,076; 6,496,875; 6,542,943;
6,594,686; 6,611,925; 6,622,150; 6,668,289;
6,697,950; 6,735,700; 6,748,534; 6,763,403;
6,763,466; 6,775,780; 6,851,058; 6,886,099;
6,898,712; 6,928,555; 6,931,540; 6,938,161;
6,944,775; 6,963,978; 6,968,461; 6,971,023;
6,973,577; 6,973,578.

DBN-004h-EN

V3.1.4

Para probar dicha utilidad puede descargarse desde el link que indicamos a continuacion:

ROOTKITDETECTIVE (ACCESO AL LINK DE DESCARGA)
http://www.zonavirus.com/descargas/mcaf ... ective.asp

Como que no he podido subir el tamaño que ocupa, en el lugar del fichero ejecutable ofrezco el TXT de información y el link de descarga de la web de mcafee.

saludos

LESAIN · Mensaje por **LESAIN** » 28 Nov 2007, 17:09

Disculpa pero no la puedo ejecutar. Sale una ventana de error.

Mensaje por **msc hotline sat** » 28 Nov 2007, 18:04

Al principio de la pagina indico link de descarga directamente de mcafee.

saludos

ms, 28.11.2007

LESAIN · Mensaje por **LESAIN** » 29 Nov 2007, 00:21

Disculpa mi ignorancia pero espero que sea esto lo que me pediste.

Saludos

Mensaje por **msc hotline sat** » 29 Nov 2007, 07:24

Sí, pero postealo con un copiar y pegar, como se indica en:

https://foros.zonavirus.com/viewtopic.php?f=1&t=17488

Agregandolo se pierde la estructura y no podemos analizarlo

saludos

ms, 29-11-2007

LESAIN · Mensaje por **LESAIN** » 29 Nov 2007, 10:23

ME PARECIA, PERDON.

McAfee(R) Rootkit Detective 1.1 scan report

On 28-11-2007 at 19:50:14

OS-Version 5.1.2600

Service Pack 2.0

====================================

Object-Type: SSDT-hook

Object-Name: ZwCreateFile

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: SSDT-hook

Object-Name: ZwEnumerateKey

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: SSDT-hook

Object-Name: ZwEnumerateValueKey

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: SSDT-hook

Object-Name: ZwQueryDirectoryFile

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: SSDT-hook

Object-Name: ZwQueryKey

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: SSDT-hook

Object-Name: ZwQuerySystemInformation

Object-Path: C:\WINDOWS\system32\drivers\srosa.sys

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Agnitum Shared\Aupdate\Downloaded Files\outpost_common_lang_en.20060512_1732.zip

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum\Update\LastDownloadStable

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Agnitum Shared\Aupdate\Downloaded Files\update_bin.20060512_1732.zip

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum\Update\LastDownloadStable

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Agnitum Shared\Aupdate\Downloaded Files\update_lang_es.20060512_1732.zip

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Agnitum\Update\LastDownloadStable

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.CommonIDE,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.TemplateWizardInterface,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.WizardFramework,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.wizardframework.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: msddslmp,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: msddsp,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.0.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.DebuggerVisualizers,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Configuration,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Designer.Interfaces,Version="1.0.5000.0",FileVersion="1.1.4322.573",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Design,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Package.LanguageService,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Windows.Forms,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Shell,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Shell.Design,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.configuration.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.design.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.package.languageservice.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.windows.forms.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.shell.design.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.shell.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Extensibility,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: EnvDTE,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: EnvDTE80,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.zip.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.commonide.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.ProjectAggregator,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.ManagedInterfaces,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Publish,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.publish.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.Build.Conversion,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.build.conversion.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: mscorcfg,Version="2.0.0.0",ProcessorArchitecture="x86",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: mscorcfg.resources,Version="2.0.0.0",ProcessorArchitecture="MSIL",FileVersion="2.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.CommandBars,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: ADODB,Version="7.0.3300.0",FileVersion="7.10.3077.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: MSDATASRC,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.StdFormat,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: stdole,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: VsWebSite.Interop,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.MSXML,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VSDesigner,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VSDesigner.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Editors,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.visualstudio.editors.resources,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="es"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.VSHelp,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.VSHelp80,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.HostingProcess.Utilities.Sync,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.HostingProcess.Utilities,Version="8.0.0.0",ProcessorArchitecture="MSIL",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Debugger.Interop,Version="8.0.1.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Shell.Interop.8.0,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.TextManager.Interop.8.0,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.OLE.Interop,Version="7.1.40304.0",FileVersion="7.0.4054.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.Shell.Interop,Version="7.1.40304.0",FileVersion="7.0.4054.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.VisualStudio.TextManager.Interop,Version="7.1.40304.0",FileVersion="7.0.4054.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: VSLangProj,Version="7.0.3300.0",FileVersion="7.0.9466.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: VSLangProj2,Version="7.0.5000.0",FileVersion="7.10.3077.0",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: VSLangProj80,Version="8.0.0.0",FileVersion="8.0.50727.42",PublicKeyToken="b03f5f7f11d50a3a",Culture="neutral"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.NetEnterpriseServers.ExceptionMessageBox,Version="9.0.242.0",processorArchitecture="MSIL",Culture="neutral",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.WizardFrameworkLite,Version="9.0.242.0",processorArchitecture="MSIL",Culture="neutral",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.GridControl,Version="9.0.242.0",processorArchitecture="MSIL",Culture="neutral",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Setup,Version="9.0.242.0",processorArchitecture="MSIL",Culture="neutral",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.CustomControls,Version="9.0.242.0",processorArchitecture="MSIL",Culture="neutral",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.netenterpriseservers.exceptionmessagebox.resources,Version="9.0.242.0",processorArchitecture="MSIL",Culture="es",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.wizardframeworklite.resources,Version="9.0.242.0",processorArchitecture="MSIL",Culture="es",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.setup.resources,Version="9.0.242.0",processorArchitecture="MSIL",Culture="es",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.gridcontrol.resources,Version="9.0.242.0",processorArchitecture="MSIL",Culture="es",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Smo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.SString,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.SmoEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.SqlEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.ConnectionInfo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.WmiEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.ServiceBrokerEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.BatchParser,Version="9.0.242.0",Culture="neutral",processorArchitecture="x86",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.RegSvrEnum,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.DataWarehouse.Interfaces,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.AnalysisServices,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.AnalysisServices.DeploymentEngine,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Rmo,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.smo.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.smoenum.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.sqlenum.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.connectioninfo.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.wmienum.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.servicebrokerenum.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.regsvrenum.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.rmo.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.analysisservices.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.analysisservices.deploymentengine.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.datawarehouse.interfaces.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.MgdSqlDumper,Version="9.0.242.0",Culture="neutral",processorArchitecture="x86",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: MSClusterLib,Version="1.0.0.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="1.0.0.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.SqlTDiagM,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Instapi,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.AnalysisServices.AdomdClient,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.AnalysisServices.AdomdClient.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Replication.BusinessLogicSupport,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.SqlServer.Replication,Version="9.0.242.0",Culture="neutral",processorArchitecture="x86",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.sqlserver.replication.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="2005.90.3042.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.ExceptionMessageBox,Version="9.0.242.0",Culture="neutral",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: microsoft.exceptionmessagebox.resources,Version="9.0.242.0",Culture="es",processorArchitecture="MSIL",PublicKeyToken="89845dcd8080cc91",FileVersion="9.0.1399.0"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.MSXML2R,publicKeyToken="6bd6b9abf345378f",version="4.1.0.0",type="win32",processorArchitecture="x86"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global

Status: Hidden

Object-Type: Registry-value

Object-Name: Microsoft.MSXML2,publicKeyToken="6bd6b9abf345378f",version="4.20.9818.0",type="win32",processorArchitecture="x86"

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Installer\Win32Assemblies\Global

Status: Hidden

Object-Type: Registry-key

Object-Name: DataWARE\Classes\Installer\Win32Assemblies\Global

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data

Status: Hidden

Object-Type: Registry-key

Object-Name: a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771 System Provider\*Local Machine*\Data

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771

Status: Hidden

Object-Type: Registry-key

Object-Name: 00000000-0000-0000-0000-000000000000 System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771\00000000-0000-0000-0000-000000000000

Status: Hidden

Object-Type: Registry-key

Object-Name: {6340E680-FF06-435f-8767-B79D88AEBD4D}ystem Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771\00000000-0000-0000-0000-000000000000

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771\00000000-0000-0000-0000-000000000000\{6340E680-FF06-435f-8767-B79D88AEBD4D}

Status: Hidden

Object-Type: Registry-value

Object-Name: Item Data

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771\00000000-0000-0000-0000-000000000000\{6340E680-FF06-435f-8767-B79D88AEBD4D}

Status: Hidden

Object-Type: Registry-value

Object-Name: Display String

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771\00000000-0000-0000-0000-000000000000

Status: Hidden

Object-Type: Registry-value

Object-Name: Display String

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771

Status: Hidden

Object-Type: Registry-key

Object-Name: edec4b50-3a44-4ded-86dd-85a4e65c20ea System Provider\*Local Machine*\Data\a5c5c2e4-6bee-4ef9-a0f5-f76a07cce771

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea

Status: Hidden

Object-Type: Registry-key

Object-Name: 0f88886d-d7b0-4839-9f39-5c335ef07898 System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea\0f88886d-d7b0-4839-9f39-5c335ef07898

Status: Hidden

Object-Type: Registry-key

Object-Name: MachineKeyicrosoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea\0f88886d-d7b0-4839-9f39-5c335ef07898

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea\0f88886d-d7b0-4839-9f39-5c335ef07898\MachineKey

Status: Hidden

Object-Type: Registry-value

Object-Name: Item Data

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea\0f88886d-d7b0-4839-9f39-5c335ef07898\MachineKey

Status: Hidden

Object-Type: Registry-value

Object-Name: Display String

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea\0f88886d-d7b0-4839-9f39-5c335ef07898

Status: Hidden

Object-Type: Registry-value

Object-Name: Display String

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea

Status: Hidden

Object-Type: Registry-key

Object-Name: Data 2RE\Microsoft\Protected Storage System Provider\*Local Machine*\Data\edec4b50-3a44-4ded-86dd-85a4e65c20ea

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data 2

Status: Hidden

Object-Type: Registry-key

Object-Name: WindowsE\Microsoft\Protected Storage System Provider\*Local Machine*\Data 2

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data 2\Windows

Status: Hidden

Object-Type: Registry-value

Object-Name: Value

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Protected Storage System Provider\*Local Machine*\Data 2\Windows

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{90110C0A-6000-11D3-8CFE-0150048383C9}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\MSSoap\Binaries\Resources\1033\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Menú Inicio\Programas\Kodak\Kodak EasyShare\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Menú Inicio\Programas\Kodak\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{9D8FEE90-0377-49A9-AEFB-525BDE549BA4}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\ini\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{8E92D746-CD9F-4B90-9668-42B74C14F765}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{87843A41-7808-4F2E-B13F-25C1E67CF2FD}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpahtmm\images\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpahtmm\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpahtmm\style\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{A5B3EB8A-4071-42F0-8E8E-7A8342AA8E69}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpotmm\images\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpotmm\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpotmm\style\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{48C82F7A-F100-4DAB-A310-8E18BF2159E1}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\Tutorial\Parts\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\Tutorial\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{CA60320D-6A16-49C8-A34F-84EEF4799567}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{78F79C84-BFD5-4D79-A07D-F39A3CF428DC}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{154508C0-07C5-4659-A7A0-E49968750D21}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{F2D0C1B1-80FF-46F9-BA61-33B01A07FAFC}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpoconnect\images\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\vpoconnect\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{91517631-A9F3-4B7C-B482-43E0068FD55A}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\Program\kdlang\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\Program\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\Program\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\Program\EN\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\Install\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\IP200781796\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\InitData\Data\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\InitData\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\InitData\Data\GenFlash\1\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\InitData\Data\GenFlash\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\Data\FrSummary\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\6.1.4.37-7288971L\Data\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\KODAK\KODAK Software Updater\7288971\Program\README\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Menú Inicio\Programas\Kodak\Kodak Software Updater\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{B997C2A0-4383-41BF-B76E-9B8B7ECFB267}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak Utilities\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{0008546E-DF6E-4CC1-AFD0-2CB8E16C95A2}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\system32\color\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Kodak\kodak_dr\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Kodak\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Kodak\ifscore\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Menú Inicio\Programas\KODAK\Software para la conexión de la cámara\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{9D1CF8B6-17B3-4832-B062-2C2DD0B57B04}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Printer Dock\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{FCDB1C92-03C6-4C76-8625-371224256091}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{AE1FA02D-E6A4-4EA0-8E58-6483CAC016DD}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{D15E9DB5-6BEB-4534-901E-80C0A29BAB97}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{643EAE81-920C-4931-9F0B-4B343B225CA6}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{469730CC-78DF-4CD3-B286-562D459EA619}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{14D4ED84-6A9A-45A0-96F6-1753768C3CB5}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{A6F18A67-B771-4191-8A33-36D2E742D6D9}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{10E98E14-832C-4AF7-A4D1-6A9EF83B282E}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\kb\style\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\kb\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Kodak\Kodak EasyShare software\bin\data\kb\images\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{8BB4B58A-A402-4DE8-8FCD-287E60B88DD8}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\plug_ins\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\plug_ins\ImageViewer\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\ActiveX\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Resource\CMap\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Resource\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Resource\Font\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\plug_ins\Annotations\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\plug_ins\Multimedia\MPP\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 6.0\Reader\plug_ins\Multimedia\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\Installer\{AC76BA86-7AD7-1034-7B44-A00000000001}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Microsoft Shared\Web Server Extensions\60\BIN\3082\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Microsoft Shared\MSClientDataMgr\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Microsoft Shared\PROOF\1033\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\system32\config\systemprofile\Configuración local\Datos de programa\Microsoft\OFFICE\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Datos de programa\Microsoft\IdentityCRL\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_0de06acd\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\winsxs\x86_Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_8.0.50727.42_x-ww_6e805841\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.ATL_1fc8b3b9a1e18e3b_x-ww_5f0bbcff\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\bin\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Hewlett-Packard\Scanjet\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Hewlett-Packard\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Drivers\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Drivers\dot4\Win2000\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Hewlett-Packard\Digital Imaging\{7C8BB31C-E09E-4c7d-BBF1-45E33B467FE1}\Drivers\dot4\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Documents and Settings\All Users\Datos de programa\Microsoft\IdentityCRL\production\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\Components\es-es\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\Components\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\Components\es-mx\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\Components\es-us\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Installer\Folders

Status: Hidden

Object-Type: Registry-value

Object-Name: C:\Archivos de programa\Windows Live Toolbar\Components\es-xl\

Object-Path: HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windo

Mensaje por **msc hotline sat** » 29 Nov 2007, 10:58

Está claro que tienes un BAGLE, controlado o no, pero detectado por esta utilidad !

ELIBAGLA:

http://www.zonavirus.com/descargas/elibagla.asp

Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el resultado del proceso

y si lo detecta y elimina , listos, y sino, envianos este fichero y pasaremos a analizarlo:

C:\WINDOWS\system32\drivers\srosa.sys

->~~[b]~~ Para ello recordar[/b]: https://foros.zonavirus.com/viewtopic.php?f=2&t=45334

saludos

ms, 29-11-2007

LESAIN · Mensaje por **LESAIN** » 29 Nov 2007, 11:35

Hola, tenias razon. Me elimino un gusano pero sigo sin poder desinstalar el norton. El fichero que me pediste no aparece. De paso te pido un consejo. Que antivirus me aconsejas?

Como sigo con todo esto? Puede ser que me genere problemas para el update de windows y office?

Muchas gracias

Mensaje por **msc hotline sat** » 29 Nov 2007, 11:51

Deciamos :

"Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el resultado del proceso"

donde está ???

es que si el fichero que ha eliminado no es el que indicabamos, ya puedes estar seguro que de estar, está, otra cosa es que el ROotKit del bagle no te lo deje ver...

posteanos el contenido del infosat.txt con un copiar y pegar, gracias

saludos

ms, 29-11-2007

saludos

LESAIN · Mensaje por **LESAIN** » 29 Nov 2007, 11:57

No lo mande, perdon. Ahi lo pego.

Thu Nov 29 07:12:39 2007

EliBagle v10.75 (c)2007 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Acción Directa):

C:\WINDOWS\SYSTEM32\WINTEMS.EXE --> Eliminado Bagle

C:\WINDOWS\SYSTEM32\BAN_LIST.TXT --> Eliminado Bagle

C:\WINDOWS\SYSTEM32\DRIVERS\HIDR.EXE --> Eliminado Bagle

C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Eliminado Bagle (rootkit)

Eliminada Carpeta "%WinDir%\exefld"

Restaurada Clave: "SafeBoot\Minimal y Network"

Thu Nov 29 07:13:10 2007

EliBagle v10.75 (c)2007 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

C:\INSTALADORES\Grisoft.AVG.Antivrus.Professional.Single.Edition.v7.1.375.Trial.+.Crack.(trial.to.full)\GRISOFT.AVG.ANTIVRUS.PROFESSIONAL.SINGLE.EDITION.V7.1.375.TRIAL.+.CRACK.(TRIAL.TO.FULL).EXE --> Eliminado Bagle

Nº Total de Directorios: 6219

Nº Total de Ficheros: 68017

Nº de Ficheros Analizados: 8720

Nº de Ficheros Infectados: 1

Nº de Ficheros Limpiados: 1

Thu Nov 29 07:18:41 2007

EliBagle v10.75 (c)2007 S.G.H. / Satinfo S.L.

----------------------------------------------

Lista de Acciones (por Exploración):

Explorando Unidad C:\

Nº Total de Directorios: 746

Nº Total de Ficheros: 11324

Nº de Ficheros Analizados: 1355

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0

Exploración Detenida por el Usuario.

Mensaje por **msc hotline sat** » 29 Nov 2007, 12:45

Pues ya ves que entre los eliminados figura el RootKit que te pediamos:

C:\WINDOWS\SYSTEM32\DRIVERS\SROSA.SYS --> Eliminado Bagle (rootkit)

Este lo oculta su misma accion de RootKit, pero con el ELIBAGLA ya lo pillamos, a diferencia de otros muchos antivirus que ni lo huelen, igual que otros que aun no conocemos y que gracias a este Testeador nos será mas fácil descubrir.

Y ya dando por solucionado el Tema, procedemos a cerrarlo

saludos

ms, 29-11-2007

TEST ANTIROOTKIT (SOLUCIONADO)

TEST ANTIROOTKIT (SOLUCIONADO)

ELIMINAR NORTO

TES ANTIROOTKIT

TEST

GUSANA

test