hace una semana encontré con spy-bot un archivo malicioso llamado watchdog.exe. Elegí la opción solucionar problemas y lo eliminó.
Después seguí los pasos habituales para eliminar virus, deshabilité restaurar sistema, inicie en modo seguro y pase mi antivirus no encontrando nada. Aún así he utilizado antivirus online como kaspersky y tampoco me notificó presencia de virus, así como ewido, etc.
El último paso que tengo que realizar es la eliminación de entradas de registro no validas, tengo como unas 139 o así, y no se si eliminando todas podré dañar mi sistema, a continuación os pongo dichas entradas de registro:
Clave raíz Subclave Modificada Valor Referencia a ruta o archivo
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\Folders 26/11/2006 1:01:57 C:\WINDOWS\winsxs\x86_Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_8.0.50727.163_x-ww_681e29fb\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\Folders 26/11/2006 1:01:57 C:\WINDOWS\winsxs\Policies\x86_policy.8.0.Microsoft.VC80.CRT_1fc8b3b9a1e18e3b_x-ww_77c24773\
HKEY_CURRENT_USER Software\ahead\Nero - Burning Rom\Database 25/10/2005 21:13:27 LocalDbPath C:\ARCHIV~1\Ahead\NeroDb
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\ahead\Nero - Burning Rom\Database 25/10/2005 21:13:27 LocalDbPath C:\ARCHIV~1\Ahead\NeroDb
HKEY_LOCAL_MACHINE Software\Ahead\Nero - Burning Rom\Database 13/10/2006 14:23:05 LocalDbPath C:\ARCHIV~1\Ahead\NeroDb
HKEY_CURRENT_USER Software\ahead\Nero - Burning Rom\Database 25/10/2005 21:13:27 UserDbPath C:\ARCHIV~1\Ahead\UsrDb
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\ahead\Nero - Burning Rom\Database 25/10/2005 21:13:27 UserDbPath C:\ARCHIV~1\Ahead\UsrDb
HKEY_LOCAL_MACHINE Software\Ahead\Nero - Burning Rom\Database 13/10/2006 14:23:05 UserDbPath C:\ARCHIV~1\Ahead\UsrDb
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{83D4679F-B6D7-11D2-BF36-00C04FB90A03}\InprocServer32 22/02/2005 21:36:48 C:\ARCHIV~1\MESSEN~1\rtcimsp.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{53707962-6F74-2D53-2644-206D7942484F}\InprocServer32 24/09/2005 16:30:03 C:\ARCHIV~1\SPYBOT~1\SDHelper.dll
HKEY_CURRENT_USER Software\AWSoftware\EAC\Internet Options 09/11/2005 13:16:04 LocalCDDBPath C:\CDDB\
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\AWSoftware\EAC\Internet Options 09/11/2005 13:16:04 LocalCDDBPath C:\CDDB\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\3574AFE896173CC42AB8A061348B3AB9\SourceList\Net 23/02/2005 14:04:30 1 C:\DOCUME~1\David\CONFIG~1\Temp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\7FCDE114D557E4147AB4D3DC56385F98\SourceList\Net 23/02/2005 1:12:11 1 C:\DOCUME~1\David\CONFIG~1\Temp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\34D9613806647434CB599E6D6EEB56EC\SourceList\Net 22/02/2005 23:34:21 1 C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\667FCD348386A9F4C8199DD25A68FD7A\SourceList\Net 22/02/2005 23:33:02 1 C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\SourceList\Net 22/02/2005 23:33:52 1 C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\34D9613806647434CB599E6D6EEB56EC\InstallProperties 22/02/2005 23:34:21 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\667FCD348386A9F4C8199DD25A68FD7A\InstallProperties 22/02/2005 23:33:02 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\DDE7F2BCF1D91C3409CFF425AE1E271A\InstallProperties 23/02/2005 14:04:30 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{43DCF766-6838-4F9A-8C91-D92DA586DFA7} 22/02/2005 23:33:02 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{83169D43-4660-4347-BC95-E9D6E6BE65CE} 22/02/2005 23:34:21 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1} 23/02/2005 14:04:30 InstallSource C:\DOCUME~1\David\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{74ACCBAE-0E88-4F84-91DE-5F239A739C15}\2.0\HELPDIR 24/02/2005 1:44:17 C:\DOCUME~1\David\CONFIG~1\Temp\VBE
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{D1FE5783-CDD2-459E-99C4-1B18CA23215E}\1.0\HELPDIR 24/02/2005 1:44:17 C:\DOCUME~1\David\CONFIG~1\Temp\VBE
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{74ACCBAE-0E88-4F84-91DE-5F239A739C15}\2.0\0\win32 24/02/2005 1:44:17 C:\DOCUME~1\David\CONFIG~1\Temp\VBE\MSForms.exd
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{D1FE5783-CDD2-459E-99C4-1B18CA23215E}\1.0\0\win32 24/02/2005 1:44:17 C:\DOCUME~1\David\CONFIG~1\Temp\VBE\RefEdit.exd
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{F5346614-B7C4-4E94-826A-E2363155233D} 26/11/2006 2:03:37 InstallSource C:\DOCUME~1\Diego\CONFIG~1\Temp\bye9B7.tmp\Disk1\
HKEY_CURRENT_USER Software\Elaborate Bytes\CloneCD\Settings 07/03/2005 22:48:13 ImageFileName C:\DOCUME~1\Diego\CONFIG~1\Temp\IMAGE.CCD
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Elaborate Bytes\CloneCD\Settings 07/03/2005 22:48:13 ImageFileName C:\DOCUME~1\Diego\CONFIG~1\Temp\IMAGE.CCD
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File5 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI20.1688\106-red_hot_chili_peppers-shes_only_18.mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File5 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI20.1688\106-red_hot_chili_peppers-shes_only_18.mp3
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File4 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI22.9531\202-red_hot_chili_peppers-tell_me_baby.mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File4 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI22.9531\202-red_hot_chili_peppers-tell_me_baby.mp3
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File3 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI26.0156\104-red_hot_chili_peppers-stadium_arcadium.mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File3 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI26.0156\104-red_hot_chili_peppers-stadium_arcadium.mp3
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File8 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI29.735\102-red_hot_chili_peppers-snow_(hey_oh).mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File8 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI29.735\102-red_hot_chili_peppers-snow_(hey_oh).mp3
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File7 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI64.875\103-red_hot_chili_peppers-charlie.mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File7 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI64.875\103-red_hot_chili_peppers-charlie.mp3
HKEY_CURRENT_USER Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File6 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI65.406\104-red_hot_chili_peppers-stadium_arcadium.mp3
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\MediaPlayer\Player\RecentFileList 19/11/2006 11:50:22 File6 C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$DI65.406\104-red_hot_chili_peppers-stadium_arcadium.mp3
HKEY_CURRENT_USER Software\AWSoftware\EAC 09/11/2005 13:16:48 InstallPath C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$EX04.265\
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\AWSoftware\EAC 09/11/2005 13:16:48 InstallPath C:\DOCUME~1\Diego\CONFIG~1\Temp\Rar$EX04.265\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\9EC9653600AFC964FAC55E4D9DA3FC19\SourceList\Net 05/01/2006 23:58:38 1 C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Products\AC3EECC5CE30AD11FBDB0060B5DB0C5B\SourceList\Net 15/10/2006 13:42:09 1 C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\9EC9653600AFC964FAC55E4D9DA3FC19\InstallProperties 05/01/2006 23:58:38 InstallSource C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Installer\UserData\S-1-5-18\Products\AC3EECC5CE30AD11FBDB0060B5DB0C5B\InstallProperties 15/10/2006 13:41:58 InstallSource C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{5CCEE3CA-03EC-11DA-BFBD-00065BBDC0B5} 15/10/2006 13:41:58 InstallSource C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\{63569CE9-FA00-469C-AF5C-E5D4D93ACF91} 05/01/2006 23:58:38 InstallSource C:\DOCUME~1\Fernando\CONFIG~1\Temp\IXP000.TMP\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\821752B295B088A4FAFDEB215E5F9B0A\SourceList\Net 25/02/2006 15:06:50 1 C:\DOCUME~1\Fernando\CONFIG~1\Temp\pft4E.tmp\
HKEY_LOCAL_MACHINE Software\Classes\Installer\Patches\821752B295B088A4FAFDEB215E5F9B1A\SourceList\Net 11/06/2006 0:00:32 1 C:\DOCUME~1\Fernando\CONFIG~1\Temp\pft5E.tmp\
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{873EFD18-33BC-4E25-921F-EBD42EB51126}\1.0\HELPDIR 01/03/2005 21:24:45 C:\DOCUME~1\Fernando\CONFIG~1\Temp\Rar$EX00.359
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Uninstall\HijackThis 06/01/2006 18:58:57 DisplayIcon C:\DOCUME~1\Fernando\CONFIG~1\Temp\Rar$EX00.641\HijackThis.exe
HKEY_CURRENT_USER Software\Nico Mak Computing\WinZip\WIZDIR 31/05/2005 21:39:19 WIZDIR4 c:\download
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Nico Mak Computing\WinZip\WIZDIR 31/05/2005 21:39:19 WIZDIR4 c:\download
HKEY_CURRENT_USER Software\Gabest\DVobSub\DefTextPathes 24/02/2005 22:35:38 Path1 c:\subtitles
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Gabest\DVobSub\DefTextPathes 24/02/2005 22:35:38 Path1 c:\subtitles
HKEY_CURRENT_USER Software\Nico Mak Computing\WinZip\WIZARD 31/05/2005 21:39:19 ExtractTo c:\unzipped
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Nico Mak Computing\WinZip\WIZARD 31/05/2005 21:39:19 ExtractTo c:\unzipped
HKEY_LOCAL_MACHINE Software\Microsoft\Java VM 22/02/2005 22:56:32 LibsDirectory C:\WINDOWS\java\lib
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Explorer\VolumeCaches\Active Setup Temp Folders 06/01/2006 21:23:32 Folder C:\WINDOWS\msdownld.tmp|?:\msdownld.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows NT\CurrentVersion\SeCEdit 22/02/2005 22:26:11 TemplateUsed C:\WINDOWS\SEC10E0.tmp
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_eb84b25e 22/02/2005 22:21:45 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_eb84b25e\Codebases\U_Service Pack 2 22/02/2005 22:21:45 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68 13/10/2006 21:46:26 Codebase C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.6.0.Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ef752e68\Codebases\U_KB923191 13/10/2006 21:46:26 URL C:\WINDOWS\ServicePackFiles\i386/comctl.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9 22/02/2005 22:21:45 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\Codebases\U_Service Pack 2 22/02/2005 22:21:45 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03 13/10/2006 21:46:26 Codebase C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2982_x-ww_ac3f9c03\Codebases\U_KB923191 13/10/2006 21:46:26 URL C:\WINDOWS\ServicePackFiles\i386/controls.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_bcc9a281\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.1.Microsoft.Windows.SystemCompatible_6595b64144ccf1df_5.1.2600.2000_x-ww_0e037a8a\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/default.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_468466a7\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Dxmrtp_6595b64144ccf1df_5.2.2.3_x-ww_cf59288d\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/dxmrtp.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_522f9f82\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_5ff735e2 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.1.0.Microsoft.Windows.GdiPlus_6595b64144ccf1df_1.0.2600.2180_x-ww_5ff735e2\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/gdiplus.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9 22/02/2005 22:21:45 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\Codebases\U_Service Pack 2 22/02/2005 22:21:45 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_cf5111a1 22/02/2005 22:21:45 Codebase C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.7.0.Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_cf5111a1\Codebases\U_Service Pack 2 22/02/2005 22:21:45 URL C:\WINDOWS\ServicePackFiles\i386/mswincrt.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcDll_6595b64144ccf1df_5.2.2.3_x-ww_d6bd8b95\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b 22/02/2005 22:21:45 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_policy.5.2.Microsoft.Windows.Networking.Rtcdll_6595b64144ccf1df_5.2.2.3_x-ww_5f924d7b\Codebases\U_Service Pack 2 22/02/2005 22:21:45 URL C:\WINDOWS\ServicePackFiles\i386/rtcdll.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_es_858031fb 22/02/2005 22:21:44 Codebase C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\SideBySide\Installations\x86_Microsoft.Windows.Networking.RtcRes_6595b64144ccf1df_5.2.2.3_es_858031fb\Codebases\U_Service Pack 2 22/02/2005 22:21:44 URL C:\WINDOWS\ServicePackFiles\i386/rtcres.man
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\Setup 21/11/2006 19:56:42 ServicePackCachePath c:\windows\ServicePackFiles\ServicePackCache
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\Sus 21/06/2005 17:31:50 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{387631A3-B986-4BE7-AD49-512CBC13C705}.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\WindowsUpdate\Reporting\EventCache\WU 21/06/2005 17:31:53 CurrentCacheFile C:\WINDOWS\SoftwareDistribution\EventCache\{5E174F64-A835-43B5-8A6A-777E882EE19E}.bin
HKEY_CURRENT_USER Software\Microsoft\Internet Explorer\Main 26/11/2006 21:58:18 Local Page C:\windows\system32\blank.htm
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\Internet Explorer\Main 26/11/2006 21:58:18 Local Page C:\windows\system32\blank.htm
HKEY_LOCAL_MACHINE Software\Microsoft\Internet Explorer\Main 06/01/2006 13:53:32 Local Page C:\windows\system32\blank.htm
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{7842554E-6BED-11D2-8CDB-B05550C10000}\InprocServer32 20/11/2006 17:11:02 C:\WINDOWS\system32\btncopy.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{3E7225E1-80E5-11D2-8CDB-205850C10000}\1.0\0\win32 20/11/2006 17:11:02 C:\WINDOWS\system32\btncopy.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{6af09ec9-b429-11d4-a1fb-0090960218cb}\InprocServer32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{6af09ecb-b429-11d4-a1fb-0090960218cb}\InprocServer32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{6af09ecc-b429-11d4-a1fb-0090960218cb}\InprocServer32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{6af09ecd-b429-11d4-a1fb-0090960218cb}\InprocServer32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{6af09ed4-b429-11d4-a1fb-0090960218cb}\InprocServer32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{6AF09ECA-B429-11D4-A1FB-0090960218CB}\1.0\0\win32 20/11/2006 17:10:59 C:\WINDOWS\system32\btneighborhood.tlb
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{4B8FC018-F9B8-4EEE-BA3C-EB21B094EBCA}\InprocServer32 20/11/2006 17:11:02 C:\WINDOWS\system32\btsendto_ie.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{7A88A7E5-B17D-464D-AE02-B529E030C0EE}\1.0\0\win32 20/11/2006 17:11:02 C:\WINDOWS\system32\btsendto_ie.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{3E34554D-481E-4D50-82F3-E2CDE5F85674}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\btsendto_office.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{E0B3748E-1385-473E-9C20-75E5704AC9CE}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\btsendto_office.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{3E7FDC60-80A8-4563-A562-0DC01ECF077C}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\BtWizard.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{DD99E8F9-87BC-4F0A-AABF-5F626CC4E5BD}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\BtWizard.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{CBA29913-2C34-4365-A213-E0780260DC78}\1.0\0\win32 20/11/2006 17:11:01 C:\WINDOWS\system32\BtWizard.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{37C5D6EF-B34A-45E3-8529-B0443B8BAD3C}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\btxppanel.dll
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{65D540C1-859E-49F5-B35B-70821831F7A7}\InprocServer32 20/11/2006 17:11:01 C:\WINDOWS\system32\btxppanel.dll
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{EBC89BB4-1D17-405C-B0AF-5E367B41BED1}\1.0\0\win32 20/11/2006 17:11:01 C:\WINDOWS\system32\btxppanel.dll
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\App Paths\cmmgr32.exe 22/02/2005 22:22:26 C:\WINDOWS\System32\cmmgr32.exe
HKEY_LOCAL_MACHINE Software\Microsoft\Multimedia\MPlayer2\Groups\Video\DVR-MS 22/02/2005 23:34:45 RequiredFile C:\WINDOWS\system32\enable.dvd
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{06DD38D3-D187-11CF-A80D-00C04FD74AD8}\InprocServer32 22/02/2005 21:38:39 C:\WINDOWS\System32\plugin.ocx
HKEY_LOCAL_MACHINE Software\Classes\TypeLib\{06DD38D0-D187-11CF-A80D-00C04FD74AD8}\1.0\0\win32 22/02/2005 21:38:39 C:\WINDOWS\System32\plugin.ocx
HKEY_LOCAL_MACHINE Software\Classes\Software\RealNetworks\RealPlayer\6.0\Preferences\SystemCookiesPath 03/03/2005 19:29:22 C:\WINDOWS\system32\syscookies.txt
HKEY_LOCAL_MACHINE Software\Microsoft\Windows Media Device Manager 24/02/2005 2:37:55 Log.Filename C:\WINDOWS\system32\Wmdm.log
HKEY_LOCAL_MACHINE Software\Microsoft\IMAPI\StashInfo 22/02/2005 21:50:29 StashPath C:\WINDOWS\Temp\StashIMAPI.bin
HKEY_LOCAL_MACHINE Software\Microsoft\Windows\CurrentVersion\App Paths\WinRAR.exe 25/02/2005 22:24:49 Path D:\DATOS_RECUPERADOS\varios\Folder42380
HKEY_CURRENT_USER Software\e-merge\WinAce\2.0\Favorites 24/02/2005 23:04:02 H1 D:\DATOS_RECUPERADOS\varios\Folder42380\
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\e-merge\WinAce\2.0\Favorites 24/02/2005 23:04:02 H1 D:\DATOS_RECUPERADOS\varios\Folder42380\
HKEY_LOCAL_MACHINE Software\Classes\CLSID\{C98E2197-A7E2-430E-A701-47F360683167}\LocalServer32 25/02/2005 17:57:28 D:\DATOS_~1\!!!ADV~1\_REVIS~1\FOF8B1~2\ftpte.exe
HKEY_CURRENT_USER Software\ahead\Nero - Burning Rom\Settings 18/11/2006 14:53:08 NeroCompilation D:\PROGRAMAS\_PHOTOSHOP_8
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\ahead\Nero - Burning Rom\Settings 18/11/2006 14:53:08 NeroCompilation D:\PROGRAMAS\_PHOTOSHOP_8
HKEY_CURRENT_USER Software\Microsoft\Windows\ShellNoRoam\MUICache 26/11/2006 21:39:21 c:\c4077c12aad4559f148a15adbf\update\iesetup.exe Programa de instalación de Windows Internet Explorer 7
HKEY_USERS S-1-5-21-1645522239-1677128483-725345543-1004\Software\Microsoft\Windows\ShellNoRoam\MUICache
Las borro todas
gracias, saludos
msc hotline sat Virus Research Engineer