Virus SSDPDISCOVV no levanta el regedit ni msconfig (SOLVED)

[aicg]

Hola como estan:



Tengo un problema en mi pc no levanta el regedit ni el msconfig he corrido EliStartPage v16.92 :

Este es el resultado:



Thu Sep 11 14:45:40 2008

EliStartPage v16.92 (c)2008 S.G.H. / Satinfo S.L. (Actualizado el 10 de Septiembre del 2008)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

Sospechosa Clave "HKLM\...\Image File Execution Options\ackwin32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ADVXDWIN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\alertsvc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ALOGSERV"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\amon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AMON9X"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\anti - trojan.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AntiArp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\antivir"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ANTS"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\apvxdwin.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\arvmon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ATCON"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ATUPDATER"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ATWATCH"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\autodown.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AutoGuarder.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AutoTrace"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avconsol.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ave32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVGCC32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avgctrl.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AvgServ"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVGSERV9"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVGW"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avkpop"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AvkServ"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avkserv.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avkservice"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avkwctl9"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Avnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avp32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpcc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpdos32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpm.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpmon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avptc32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avpupd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Avrep32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avsched32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avsynmgr.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avwin95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVWINNT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\avwupd32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVXMONITOR9X"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVXMONITORNT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVXQUAR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\AVXW"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\blackd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\blackice.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\BullGuard"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\CCAPP.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfgWiz"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfiadmin.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfiaudit.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfind.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfinet.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cfinet32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\claw95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Claw95cf.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\claw95ct.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cleaner.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\cleaner3.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\clrav.com"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\CMGRDIAN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\CONNECTIONMONITOR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\CPDClnt"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\CTRL"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\defalert"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\defscangui"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\DEFWATCH"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\DOORS"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\dv95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\dv95_o.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\dvp95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Dvp95_0.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ecengine.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\EFINET32.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\EFPEADM"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\esafe.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\espwatch.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ETRUSTCIPE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\EVPN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\EXPERT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\f - agnt95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\f - prot.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\f - prot95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\f - stopw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fameh32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fch32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fih32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\filemon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\findt2005.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\findviru.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fnrb32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fp - win.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fprot.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\FPROT95.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\frw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsaa"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsav32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsgk32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsm32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsma32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\fsmb32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\gbmenu"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\GBPOLL"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\GENERICS"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\GUARD"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\iamapp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\iamserv.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\IAMSTATS"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\IBMASN.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ibmavsp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icload95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icloadnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icmon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icmoon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icssuppnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\icsupp95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Icsuppnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\iface.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\iomon98.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\IsHelp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ISRV95"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\jed.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Jedi.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\killhidepid.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\kpf.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\kvfw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\LDPROMENU"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\LDSCAN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\lockdown2000.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\lockdownadvanced.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\lookout.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\luall.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\lucomserver.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\LUSPT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\mcafee"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCAGENT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCMNHDLR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCTOOL"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCUPDATE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCVSRTE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MCVSSHLD"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MGHTML"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MINILOG"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Monitor.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\moolive.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MPFSERVICE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\mpftray.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\msconfig.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\MWATCH"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\n32scan.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\N32scanw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navapsvc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navapw32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NAVENGNAVEX15"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navlu32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navrunr.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navsched.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navw32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\navwnt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ndd32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NeoWatchLog"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\netutils"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nisserv.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nisum.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nmain.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\normist.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\notstart.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\npscheck"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\npssvc"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nsched32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Nspclean.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ntrtscan"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NTVDM"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NTXconfig"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nupgrade.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\nvc95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NVSVC32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NWService"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\NWTOOL16"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\offguard.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\outpost.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\PADMIN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\padmin.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pav.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pavcl.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pavmail.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pavproxy"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Pavsched.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Pavw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pcciomon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pccmain.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pccwin97"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pccwin98.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pcfwallicon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pcntmon"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pcscan"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\per.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\perd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\persfw.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pertsk.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\perupd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pervac.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pervacd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pfwagent.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pfwcon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\POP3TRAP"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\POPROXY"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\PORTMONITOR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pqremove.com"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\PROCESSMONITOR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\procexp"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\PROGRAMAUDITOR"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pview95"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\pview95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\rapapp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\rav7.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\rav7win.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\RavCopy.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\RavStore.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ravt08.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\REALMON"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\regedit.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\regedt32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\regmon.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\rescue.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\rfwolusr.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\RKUnHooker.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\RTVSCN95"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\RULAUNCH"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\safeweb.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\sbserv"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\scan95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\scanpm.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\scrscan.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\serv95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\sfc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\smartassistant.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\smc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\sphinx.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SPYXX"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SREngPS.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SS3EDIT"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\sweep95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SweepNet"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SWNETSUP"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SymProxySvc"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\SYMTRAY"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\syscheck.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Syscheck2.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\TAUMON"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\tbscan.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\tca.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\TCM"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\TDS - 3"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\tds2 - 98.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\tds2 - nt.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\TFAK"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\th.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\th32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\th32upd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\thav.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\thd.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\thd32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\thmail.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ToolsUp.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vbcmserv"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VbCons"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VCONTROL.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VET32.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vet95.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vet98.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vettray.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VIR - HELP"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VPC32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VPTRAY"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\Vscan40.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vsecomr.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vshwin32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\VSMAIN"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vsmon"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vsscan40.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\vsstat.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WATCHDOG"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\webscan.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\webscanx.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WEBTRAP"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\wfindv32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WGFE95"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WIMMUN32"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WrAdmin"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\WrCtrl"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ZAP.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ZAPD.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ZAPPRG.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\zapro.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ZAPS.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ZCAP.EXE"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\zlclient.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\zonealarm.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\_avp32.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\_avpcc.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\_avpm.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Sospechosa Clave "HKLM\...\Image File Execution Options\ÐÞ¸´¹¤¾ß.exe"

"Debugger"="C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE"

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



Muchas gracias de antemano.



Aicg

[Claudia34]

El informe esta incompleto, te falta accion por exploracion, debes pegarnos el informe completo y/o dejar que el elistara explore por completo.



Pues descárgate las siguientes herramientas de los siguientes enlaces respectivos, guárdalos en una carpeta y lánzalos en modo a prueba de fallos obviamente con la restauración del sistema desactivado para que de mejores resultados:



ELISTARA:

http://www.zonavirus.com/descargas/elistara.asp



Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el resultado del proceso.





Pásate también el Elitriip, y nos pegas el Log que te dejara en C llamado infosat.txt



http://www.zonavirus.com/descargas/elitriip.asp



Y para complementar (opcional en algunos casos):



https://foros.zonavirus.com/viewtopic.php?f=5&t=18469



Y el elibagle tambien es opcional aunque recomendado:



http://www.zonavirus.com/descargas/elibagla.asp





Y compleméntalo posteándonos el Log del HJT:





HJT: (HiJackThis)



¿Como utilizar el Hijackthis?

Lo primero que debemos hacer es descargarlo en nuestro ordenador y localizarlo en una carpeta propia C:\HijackThis\

Ejecútalo y presiona el botón "Do a system scan and save a logfile"; el programa realizará el escaneo e inmediatamente generará el Log, sólo te pedirá el nombre del archivo y su ubicación, puedes simplemente guardarlo así como está.

Se abrirá el Bloc de Notas, copia todo el contenido y pégalo como respuesta de este Tema

• Descargar Hijackthis del siguiente enlace: http://www.zonavirus.com/descargas/trendmicro-hijackthis.asp

Tras analizarlo, informaremos.

Nota: con respecto al hijackthis realiza dos escaneos uno en modo normal de Windows y el otro escaneo en modo a prueba de fallos, obviamente péganos el Log de cada uno de ellos como dice arriba en la cita anterior, el primero de los escaneos en modo normal nos sirve para saber que procesos tienes ejecutados en el inicio principalmente.

Hay que tener en cuenta que solo desactivaras la restauracion de sistema cuando quieras escanear con alguna herramienta de seguridad, cuando termines de escanear deberas volver a activar la restauracion del sistema nuevamente.



¿Como arrancar en modo a prueba de fallos?



http://www.zonavirus.com/articulos/como-arrancar-en-modo-seguro-o-a-prueba-de-fallos.asp



Opcional:





Además de eso no te vendría mal realizar un scandisk completo y una desfragmentacion este ultimo en modo a prueba de fallos.

También realiza un escaneo en modo a prueba de fallos con la restauración del sistema deshabilitado con el Spybot-Search and Destroy y con el Adware S.E. obviamente actualizados por completo, y realiza un Windows Update completo por las dudas y cuéntanos los resultados.





Y pruebate el kaspersky antivirus online que tiene un alto porcentaje de deteccion, que si bien no te elimina el bicho que te encuentre, al pegarnos el informe del escaneo aqui en el foro entonces obraremos en consecuencia.



https://www.kaspersky.es/downloads/thank-you/free-antivirus-download



Y para el tema de los autorun descargate del siguiente enlace el elipen:



http://www.zonavirus.com/descargas/elipen.asp



Saludos.

[msc hotline sat]

A ver, tienes este fichero interceptando todos los procesos:



C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE



renombra su extension a .VIR y envianoslo para analizar





[b]¿Como enviar las muestras a zonavirus? - Para ello recordar[/b]:

https://foros.zonavirus.com/viewtopic.php?f=5&t=14253



saludos



ms, 12-09-2008

[msc hotline sat]

Lo que te pedimos que envies a zonavirus@satinfo.es es el fichero C:\WINDOWSX\SYSTEM32\SSDPDISCOVV.EXE



Me dicen que has enviado el c:\infosat.txt, que ya has posteado en el foro, y este no hace falta, ademas de que solo deben enviarse a SATINFO las muestras para analizar, no los txt, log, etc: https://foros.zonavirus.com/viewtopic.php?f=1&t=17488



saludos



ms, 12-09-2008

[aicg]

Hola:



Muchas gracias con el Spybot-Search and Destroy elimine los spyware ahora ya puedo entrar el regedit y al msconfig.



Gracias de nuevo.



Aicg

[msc hotline sat]

Pues lástima que no enviaras la muestra que te pedíamos, para poder controlarla en proximas versiones de nuestras utilidades, pero si la has borrado con otras herramientas ... :?



Pues ya damos por solucionado el Tema y lo cerramos en consecuencia



saludos



ms, 13-09-2008