nueva muestra de winlogon.exe (SOLUCIONADO)

[alejandrovazuezmx]

hola les envio una muestra encontrada con elistara 21.79, virus agresivo, cierra explorer. anexo infosat.



gracias



(13-10-2010 23:44:08 (GMT))

EliStartPage v21.79 (c)2010 S.G.H. / Satinfo S.L. (Actualizado el 13 de Octubre del 2010)

--------------------------------------------------

Lista de Acciones (por Acción Directa):

Por favor, envienos una muestra del fichero

C:\Muestras\WINLOGON.EXE.Muestra EliStartPage v21.79

a "virus@satinfo.es". Gracias.

C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE --> Eliminado

Entrada Eliminada [HKCU\...\Run] "NVIDIA Media Center Library "="C:\Documents and Settings\ale\ale1\winlogon.exe"

Entrada Eliminada [HKLM\...\Run] "NVIDIA Media Center Library "="C:\Documents and Settings\LocalService\1\winlogon.exe"

Eliminada Clave "HKLM\...\Image File Execution Options\A2SERVIC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ACKWIN32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ACS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ADVXDWIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AGENTSVR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AGENTW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AHNSD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ALERTER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ALERTSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ALOGSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AMON9X.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ANTI-TROJAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ANTIGEN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ANTIVIRUS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ANTS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\APIMONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\APLICA32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\APVXDWIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ASHWEBSV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ATCON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ATGUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ATRO55EN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ATUPDATER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ATWATCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AUPDATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AUTODOWN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AUTOTRACE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AUTOUPDATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVCENTER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVCONFIG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVCONSOL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVE32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGCC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGCTRL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGEMC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGSERV9.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVGW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVKPOP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVKSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVKSERVICE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVKWCL9.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVKWCTL9.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVNOTIFY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVP32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPCC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPDOS32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPEXEC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPINST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPTC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVPUPD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVRESCUE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVSCANAVSHADOW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVSCHED32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVSYNMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVUPGSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVWEBLOADER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVWIN95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVWINNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVWSC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVWUPD32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVXMONITOR9X.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVXMONITORNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVXQUAR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AVXW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\AZONEALARM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BD_PROFESSIONAL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BIDEF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BIDSERVER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BIPCP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BIPCPEVALSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BISP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BLACKD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BLACKICE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BOOT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BOOTWARN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BORG2.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BS120.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\BULLGUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CALLMSI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCAPP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCEVTMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCLAW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCPXYSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCSETMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CCSHTDWN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CDP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFGWIZ.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFIADMIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFIAUDIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFIND.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFINET.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CFINET32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CHROME.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CHROMESETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLAMAUTO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLAW95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLAW95CF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLAW95CT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLEAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLEANER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLEANER3.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CLEANPC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CMD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CMGRDIAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CMON016.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CONNECTIONMONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CONSENT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CPD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CPDCLNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CPF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CPF9X206.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CPFNT206.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CRASHREPORTER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CSINJECT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CSINSM32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CSS1631.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CTRL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CWNB181.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\CWNTDWMO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DEFALERT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DEFSCANGUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DEFWATCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DEPUTY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DISKMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DOORS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DPF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DRVINS32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DRWATSON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DRWEB32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DUMPHIVE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DV95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DV95_O.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DVP95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\DVP95_0.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EARTHAGENT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ECENGINE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ECLS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ECMD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EDI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EFINET32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EFPEADM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EGUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EHTTPSRV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EKRN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ENT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ESAFE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ESCANH95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ESCANHNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ESCANV95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ESPWATCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ETRUSTCIPE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EVPN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EWIDO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EXANTIVIRUS-CNET.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EXIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EXPERT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\EXPLORED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\F-AGNT95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\F-PROT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\F-PROT95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\F-STOPW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FA-SETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FACT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FAMEH32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FAST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FCH32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIH32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FILEMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FINDVIRU.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIREFOX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIREWALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIREWALLCONTROLPANEL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIREWALLSETTINGS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FIX-IT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FLOWPROTECTOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FNRB32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FP-WIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FP-WIN_TRIAL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FPAVSERVER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FPROT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FPROT95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FRW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAA.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAV32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAV530STBYB.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAV530WTBYB.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAV95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSAVE32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSGK32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSLAUNCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSM32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSMA32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSMB32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FSSM32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FWENC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\FWINSTALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GBMENU.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GBPOLL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GENERICRENOSFIX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GENERICS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GIBE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GOOGLETOOLBARINSTALLER_DOWNLOAD_SIGNED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GPEDIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GUARDDOG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GUARDGUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\GUARDHLP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HACKTRACERSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HELPER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HJTINSTALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HOSTSCHK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HTLOG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\HWPE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IAMAPP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IAMSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IAMSTATS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IBMASN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IBMAVSP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICLOAD95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICLOADNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICMOON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICSSUPPNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICSUPP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICSUPP95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ICSUPPNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IEDFIX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IFACE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IFW2000.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IOMON98.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IPARMOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\IRIS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ISRV95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\JAMMER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\JED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\JEDI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KAV8.0.0.357ES.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KAVLITE40ENG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KAVPERS40ENG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KAVSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KERIO-PF-213-EN-WIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KERIO-WRL-421-EN-WIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KERIO-WRP-421-EN-WIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KILLPROCESSSETUP161.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KIS8.0.0.506LATAM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KPF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\KPFW32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LDNETMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LDPRO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LDPROMENU.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LDSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LICMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LOCALNET.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LOCKDOWN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LOCKDOWN2000.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LOOKOUT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LUALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LUAU.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LUCOMSERVER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LUINIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\LUSPT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCMNHDLR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCSHIELD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCTOOL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCUIMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCUPDATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCVSRTE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MCVSSHLD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MDLL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MFW2EN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MFWENG3.02D30.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MGAVRTCL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MGAVRTE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MGHTML.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MGUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MINILOG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MONSYS32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MONSYSNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MONWOW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MOOLIVE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MPFAGENT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MPFSERVICE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MPFTRAY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MRFLUX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSASCUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSBLAST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSCONFIG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSINFO32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MSSMMC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MU0311AD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MWATCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\MXTASK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\N32SCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\N32SCANW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAI_VS_STAT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAV32_LOADER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAV80TRY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVAP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVAPSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVAPW32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVAUTO-PROTECT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVDX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVENG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVENGNAVEX15.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVEX15.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVLU32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVRUNR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVSCHED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVSTUB.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVW32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NAVWNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NC2000.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NCINST4.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ND98SPST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NDD32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NDNTSPST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NEOMONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NEOWATCHLOG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETARMOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETCFG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETINFO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETSCANPRO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETSCAPE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETSPYHUNTER-1.2.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETSTAT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NETUTILS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NISSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NISUM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NMAIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NOD32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NORMIST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NORTON_INTERNET_SECU_3.0_407.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NOTSTART.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NPF40_TW_98_NT_ME_2K.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NPFMESSENGER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NPROTECT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NPSCHECK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NPSSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NSCHED32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NTDETECT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NTRTSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NTXCONFIG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NUPDATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NUPGRADE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NVAPSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NVARCH16.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NVC95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NVLAUNCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NVSVC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NWINST4.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NWSERVICE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\NWTOOL16.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OFFGUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OGRC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OPERA.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OPERA_964_INT_SETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OSTRONET.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OUTPOST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OUTPOSTINSTALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\OUTPOSTPROINSTALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PADMIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PANIXK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PATHPING.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PAVCL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PAVPROXY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PAVSCHED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PAVW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCC2002S902.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCC2K_76_1436.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCCLIENT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCGUIDE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCIOMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCMAIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCNTMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCPFW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCWIN97.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCCWIN98.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCDSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCFWALLICON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCIP10117_0.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PCSCANPDSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PENIS32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PERISCOPE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PERSFW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PERSWF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PF2.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PFWADMIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PING.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PINGSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PLATIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\POP3TRAP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\POPROXY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\POPSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PORTDETECTIVE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PORTMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PORTMONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PPINUPDT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PPTBC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PPVSTOP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PRCKILLER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROCESS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROCESSMONITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROCEXP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROCEXPLORERV1.0.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROCMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROGRAMAUDITOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROPORT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PROTECTX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PSPF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PURGE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PVIEW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\PVIEW95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\QCONSOLE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\QSERVER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RAPAPP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RAV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RAV7.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RAV7WIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RAV8WIN32ENG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\REALMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\REGEDIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\REGEDT32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\REGMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RESCUE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RESCUE32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RESTART.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ROUTE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ROUTEMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RRGUARD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RSHELL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RSTRUI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RTVSCN95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\RULAUNCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SAFARI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SAFEWEB.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SBSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCAN32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCAN95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCANPM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCHED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCHEDAPP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCRSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SCVHOSL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SDCLT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SERV95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SETUPVAMEEVAL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SETUP_FLOWPROTECTOR_US.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SGSSFW32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SHAREDACCESS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SHELLSPYINSTALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SHN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SMC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SMITFRAUDFIX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SOFI.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SPF.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SPHINX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SPIDER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SPYSWEEPER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SPYXX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SRCHSTS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SRWATCH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SS3EDIT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ST2.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SUPFTRL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SUPPORTER5.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWEEP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWEEP95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWEEPNET.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWEEPSRV.SYS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWNETSUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWSC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SWXCACLS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SYMPROXYSVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SYMTRAY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SYSDOC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\SYSHELP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TASKKILL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TASKLIST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TASKMGR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TASKMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TAUMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TAUSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TBSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TCA.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TCM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TCPSVS32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TDS-3.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TDS2-98.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TDS2-NT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TDS2.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TFAK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TFAK5.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TFTPD.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TGBOB.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TITANIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TITANINXP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TMLISTEN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TMNTSRV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TRACERPT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TRACERT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TRJSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TRJSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\TROJANTRAP3.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UCCLSID.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UI0DETECT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UNDOBOOT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UNZIP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UPDATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\UPDATER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\USERACCOUNTCONTROLSETTINGS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VACFIX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VBCMSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VBCONS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VBUST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VBWIN9X.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VBWINNTW.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VCCMSERV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VCLEANER.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VCONTROL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VCSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VET32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VET95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VET98.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VETTRAY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VFSETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VIR-HELP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VIRUSMDPERSONALFIREWALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VMSRVC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VNLAN300.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VNPC3000.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VPC32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VPC42.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VPCMAP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VPFW30S.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VPTRAY.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSCAN40.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSCENU6.02D30.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSCHED.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSECOMR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSHWIN32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSISETUP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSMAIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSMON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSSCAN40.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSSTAT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSWIN9XE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSWINNTSE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VSWINPERSE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\VVSTAT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\W32DSM89.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\W9X.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WATCHDOG.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WEBSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WEBSCANX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WEBTRAP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WERFAULT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WFINDV32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WGFE95.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WHOSWATCHINGME.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WIMMUN32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINGATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINHLPP32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINK.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINMGM32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINPPR32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINRECON.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINROUTE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINSERVICES.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WINSFCM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WMIAS.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WMIAV.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WNT.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WRADMIN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WRCTRL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WS2FIX.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WSBGATE.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\WYVERNWORKSFIREWALL.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\XPF202EN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\XSCAN.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZAPRO.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZAPSETUP3001.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZATUTOR.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZATUTORZAUINST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZAUINST.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZLH.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZONALARM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZONALM2601.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\ZONEALARM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\_AVP.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\_AVP32.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\_AVPCC.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\_AVPM.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Eliminada Clave "HKLM\...\Image File Execution Options\_FINDVIRU.EXE"

"Debugger"=""C:\DOCUMENTS AND SETTINGS\ALE\ALE1\WINLOGON.EXE""

Linea Eliminada del HOSTS --> 208.109.220.95 viabcp.com

Linea Eliminada del HOSTS --> 208.109.220.95 http://www.viabcp.com

Linea Eliminada del HOSTS --> 208.109.220.95 bcpzonasegura.viabcp.com

Linea Eliminada del HOSTS --> 173.236.97.27 http://www.produbanco.com

Linea Eliminada del HOSTS --> 173.236.97.27 produbanco.com

Linea Eliminada del HOSTS --> 173.236.97.27 http://www.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwwp1.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwwp2.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwwp3.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwwp4.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwww01.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwww02.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwww03.pichincha.com

Linea Eliminada del HOSTS --> 173.236.97.27 wwww04.pichincha.com

Linea Eliminada del HOSTS --> 173.201.254.6 bn.com.pe

Linea Eliminada del HOSTS --> 173.201.254.6 http://www.bn.com.pe

Linea Eliminada del HOSTS --> 173.201.254.6 zonasegura1.bn.com.pe

Linea Eliminada del HOSTS --> 173.201.254.6 http://www.zonasegura1.bn.com.pe

Linea Eliminada del HOSTS --> 173.201.254.6 peliculasid.com

...

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE



(13-10-2010 23:49:24 (GMT))

EliStartPage v21.79 (c)2010 S.G.H. / Satinfo S.L. (Actualizado el 13 de Octubre del 2010)

--------------------------------------------------

Lista de Acciones (por Exploración):

Explorando "C:\"



Nº Total de Directorios: 2969

Nº Total de Ficheros: 63178

Nº de Ficheros Analizados: 11166

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0



(13-10-2010 23:50:12 (GMT))

EliTriIP v6.96 (c)2010 S.G.H. / Satinfo S.L. (Actualizado el 13 de Octubre del 2010)

---------------------------------------------

Lista de Acciones (por Acción Directa):



(13-10-2010 23:51:04 (GMT))

EliTriIP v6.96 (c)2010 S.G.H. / Satinfo S.L. (Actualizado el 13 de Octubre del 2010)

---------------------------------------------

Lista de Acciones (por Exploración):

Explorando "C:\"



Nº Total de Directorios: 2969

Nº Total de Ficheros: 63178

Nº de Ficheros Analizados: 10231

Nº de Ficheros Infectados: 0

Nº de Ficheros Limpiados: 0

[msc hotline sat]

Todo coincide con lo que hemos escrito en



http://www.zonavirus.com/noticias/2010/nueva-variante-de-autorunvbml-muy-novedosa-se-carga-incluso-en-modo-seguro-y-detiene-procesos-como-explorerexe-y-vuelta-a-empezar.asp





tiene gran cantidad de ficheros interceptados, cargando el malware, y lo de que no deja trabajar ya lo hemos visto cuando lo hemos monitorizado !!!



Descargue la version actual del ELISTARA, 21.80 y suerte !



Piense que depende de la velocidad de cada ordenador el que pueda llegar a eliminarlo, si tiene disquetera, pongale un disquete, que asi se entretendrá :) sino siempre cabe eliminarlo a mano, renombrando este winlogon.exe de la carpeta Documents and settings\user1\usuario... añadiendole .VIR a la extension del fichero, pero se ha de ser mas rápido que el virus ... antes de que detenga el proceso (podría hacerse un .BAT que lo hiciera, para ir mas rápido)



En caso extremo podemos recurrir a poner el disco duro como esclavo de otro MASTER bueno, y arrancando con el MASTER limpio, acceder a la carpeta de este WINLOGON y añadirle el .VIR, y cuando lo volvamos a poner como master, ya no se cargará y dejerá que el ELISTARA haga lo que debe, sin darle tiempo a que detenga los procesos que se hayan abierto...



Ha sido toda una experiencia el toparnos con este bicho, y si se les ocurre hacerlos todos asi, tendremos que pensar algo mas...



A ver que nos cuenta de su lucha contra este maldito .



saludos



ms, 14-10-2010

RMXDF



NOTA: Y si a la primera no puedem lance el ELISTARA varias veces, asi nosotros lo hemos conseguido en algunos ordenadores. ms.

[alejandrovazuezmx]

se ha eliminado con exito el virus, lo que hice fue, bajar el elistara 21.80 desde otro equipo no infectado. lo guarde en una usb recien formateada protegida con elipen,



arrancar a modo a prueba de fallos el ordenador infectado, e inmediatamente despues de arrancar, meti la usb copie elistara al escritorio (porque los archivos en la usb se renombraron por otros), y ejecute inmediatamente elistara,



limpio el virus, el equipo dejo de hacer cosas extrañas, solo no me permite desactivar restaurar sistema.



Kaspersky sigue sin identificar este virus.



Gracias

[msc hotline sat]

Sí, ya deciamos ayer en http://www.zonavirus.com/noticias/2010/nueva-variante-de-autorunvbml-muy-novedosa-se-carga-incluso-en-modo-seguro-y-detiene-procesos-como-explorerexe-y-vuelta-a-empezar.asp que "Vemos que CAI, ClamAV, F-PROT, Fortinet, Kaspersky y SuperAntispyware, entre otros no lo detectan, lo cual es curioso tratandose de la version 1.00, aunque como decimos, de la familia de los VB.ML este es el primero que tiene estas singulares caracteristicas"



Bueno, pues nos alegramos que con el ELISTARA 21.80 haya conseguido eliminarlo, ya indicamos que segun la rapidez de los ordenadores, en los que lo monitorizamos, alguno tuvimos que lanzarlo varias veces, hasta que lo entretuvimos con un disquete :) , es bastante resistente !



Veremos esto de la restauracion de sistema y si es causado por este virus, lo implementaremos en el ELISTARA 21.81 de hoy, y le informaremos



saludos



ms, 15-10-2010

[msc hotline sat]

Sí, ya está previsto que la clave que oculta la pestaña de la restauracion de sistema (DISABLERS en HKCU y HKLM), si los virus la han eliminado, se restablezca (ya lo hacía el Trojan Agent ABUE), y queda por defecto en el ELISTARA para cualquier virus, incluido este, claro.



Vuelve a lanzar el ELISTARA, que con este bicho, al ser muy resistente, igual volvió a modificarla mientras estaba a medias... Ahora que ya está eliminado, si vemos que no está, será restaurada.



Informanos del resultado, gracias



saludos



ms, 15-10-2010

[msc hotline sat]

y venos que ya lo controla Kaspersky y demás:



File name: WINLOGON.EXE.Muestra EliStartPage v21.79

Submission date: 2010-10-15 08:10:43 (UTC)

Current status: queued queued analysing finished





Result: 30/ 43 (69.8%)

VT Community



malware

Safety score: 0.0%

Compact Print results Antivirus Version Last Update Result

AhnLab-V3 2010.10.15.00 2010.10.15 Worm/Win32.AutoTsifiri

AntiVir 7.10.12.224 2010.10.15 TR/Spy.53760.147

Antiy-AVL 2.0.3.7 2010.10.15 -

Authentium 5.2.0.5 2010.10.15 -

Avast 4.8.1351.0 2010.10.15 Win32:Malware-gen

Avast5 5.0.594.0 2010.10.15 Win32:Malware-gen

AVG 9.0.0.851 2010.10.14 Generic19.BDJY

BitDefender 7.2 2010.10.15 Gen:Trojan.Heur.ZGY.7

CAT-QuickHeal 11.00 2010.10.15 Worm.Esfury

ClamAV 0.96.2.0-git 2010.10.15 -

Comodo 6398 2010.10.15 Heur.Suspicious

DrWeb 5.0.2.03300 2010.10.15 Trojan.StartPage.31715

Emsisoft 5.0.0.50 2010.10.15 Gen.Trojan!IK

eSafe 7.0.17.0 2010.10.14 Win32.GenHeur.Zgy

eTrust-Vet 36.1.7912 2010.10.14 -

F-Prot 4.6.2.117 2010.10.14 -

F-Secure 9.0.16160.0 2010.10.15 Gen:Trojan.Heur.ZGY.7

Fortinet 4.2.249.0 2010.10.14 -

GData 21 2010.10.15 Gen:Trojan.Heur.ZGY.7

Ikarus T3.1.1.90.0 2010.10.15 Gen.Trojan

Jiangmin 13.0.900 2010.10.15 -

K7AntiVirus 9.65.2751 2010.10.14 Riskware

[b]Kaspersky 7.0.0.125 2010.10.15 Worm.Win32.AutoTsifiri.bt [/b]

McAfee 5.400.0.1158 2010.10.15 Generic.dx!uhc

McAfee-GW-Edition 2010.1C 2010.10.15 Heuristic.BehavesLike.Win32.Downloader.A

Microsoft 1.6201 2010.10.15 Worm:Win32/Esfury

NOD32 5532 2010.10.14 Win32/AutoRun.VB.UG

Norman 6.06.07 2010.10.14 W32/Suspicious_Gen2.DVVAG

nProtect 2010-10-15.01 2010.10.15 -

Panda 10.0.2.7 2010.10.14 W32/Brontok.LE

PCTools 7.0.3.5 2010.10.15 Email-Worm.Rontokbro!rem

Prevx 3.0 2010.10.15 Medium Risk Malware

Rising 22.69.04.03 2010.10.15 Trojan.Win32.Generic.523B02D0

Sophos 4.58.0 2010.10.15 Mal/SillyFDC-G

Sunbelt 7063 2010.10.15 -

SUPERAntiSpyware 4.40.0.1006 2010.10.15 -

Symantec 20101.2.0.161 2010.10.15 W32.Rontokbro@mm

TheHacker 6.7.0.1.057 2010.10.15 -

TrendMicro 9.120.0.1004 2010.10.15 WORM_ESFURY.AA

TrendMicro-HouseCall 9.120.0.1004 2010.10.15 WORM_ESFURY.AA

VBA32 3.12.14.1 2010.10.14 -

ViRobot 2010.9.25.4060 2010.10.15 Trojan.Win32.VB.53760.A

VirusBuster 12.68.3.0 2010.10.14 -





MD5 : 9afdd3c9ab12d8bfe45d046d150bd47c

SHA1 : 2eb3de0e37cfaaaaee976a7a69f37e16cfb9a770





File size : 53760 bytes

[alejandrovazuezmx]

muy bien muchas gracias por su valiosa ayuda



una pregunta??



como le hago para saber en este casi si kaspersky lo controla, ya vi que ustedes lo hicieron por mi, pero alguna proxima vez que suceda como le hago para hacer la operacion para comprobar que ya kaspersky controla el virus.



gracais

[msc hotline sat]

Lo subes al VirusTotal (http://www.viurstotal.com/es) y te dirá los antivirus que lo controlan y los que no, en una lista como la que he posteado yo en el post anterior.



y sino, ya sabes donde estamos...



Ahora puedes bajar ya la 21.81 (que hoy hemos subido a las 15 horas, al ser viernes y no trabajar por la tarde), y, tras probarla, nos posteas el informe resultante, y espero que ya podremos dar por solucionado el Tema.



saludos



ms, 15-10-2010

[alejandrovazuezmx]

gracias



el virus hizo de las suyas con desactivar restaurar sistema.



La pestaña si aparce, cuando le doy desactivar sistema y me pregunta si estoy seguro, le digo que si y me aparece el sigueitne error.



restaurar sistema ha encontrado un error al intentar habilitar/deshabilitar una o mas unidades, reinicie su equipo y vuelva a intentarlo.



ya reinicie y sigue igual



alguna idea??

[msc hotline sat]

Pues no es lo que acostumbran hacer los virus que lo que hacen es impidir acceder a la pestaña de restauracion, y asi consiguen que no puedas ni actuvarla ni desactivarla, pero vamos, en tu caso no es tan grave, pues no es imprescindible desactivar dicha restauraicon, mas importante es poder activarla, y solo para acceder al "System Volume Information_Restore" para borrar las copias de malwares que hubieren, es necesario desactivar dicha restauracion.



En cualquier caso, es posible que el ELISTARA las haya eliminado de allí... Dinos si te detecta algo en dicha carpeta y te dice que no puede acceder, o para qué quieres desactivar dicha restauracion de sistema.



Aparte trataremos de ver qué otra clave ha modificado al respecto el virus, si es que ha sido la causa de ello, ya que puede estar pasando por otras historias, por si acaso, mientras, lanza una "Comprobacion de Errores" de windows : MIPC -> Botón derecho sobre unidad C -> Propiedades -> Herramientas -> Comprobar Errores & Desfragmentar , no sea que la falta de acceso sea por algun error de asignacion de ficheros.



Y tras ello, reinicia, vuelve a intentarlo, y nos informas, gracias



saludos



ms, 16-10-2010

[alejandrovazuezmx]

listo pero el disco no tiene errores, todo arranco bien, pero sigo sin poder deshabilitar restaurar sistema



pero como dicen no es gran problema



gracias por su valiosa ayuda

[msc hotline sat]

Sí, igual se ha borrado algun fichero de sistema, lo cual se podría recuperar lanzando una REPARACION DE SISTEMA:


[quote="para REPARAR WINDOWS, msc"]
Sugiero proceder a REPARAR windows, arrancando con el CD de instalacion y primero seleccionar instalar, y tras detectar la particion existente, escoger REPARAR, no reinstalar para no perder las aplicaciones instaladas, y finalizar con un windowsupdate [/quote]

pero si no te es imprescindible, puedes hacerlo cuando te vaya bien...



Y ya dando por solucionado el Tema, p`rocedemos a cerrarlo



Si nos necesitas de nuevo, ya sabes donde estamos



saluydos



ms, 19-10-2010