Trojan.Gen.2 (Symantec); OptimizerPro (fs) (not malicious) (Sunbelt)

 Piattaforma:

Windows

 Valutazione del rischio complessivo:
 Reported Infection:
 Sistema di Impatto: :
 Informazioni esposizione: :
Basso
Medio
Alto
Critico

  • Tipo di minaccia informatica:
    Adware

  • Distruttivo?:
    No

  • Crittografato?:
     

  • In the wild::
    Sì

  Panoramica e descrizione

Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.

  Dettagli tecnici

Dimensione file: 6,978,376 bytes
Tipo di file: EXE
Residente in memoria: Sì
Data di ricezione campioni iniziali: 25 giugno 2015

Instalación

Crea las carpetas siguientes:

  • %User Temp%\is-V0VTJ.tmp
  • %User Temp%\is-DBGRC.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup
  • %Program Files%\Optimizer Pro 3.51
  • %Start Menu%\Programs\Optimizer Pro v3.2
  • %User Temp%\OptimizerPro.madExcept
  • %User Profile%\Application Data\Optimizer Pro
  • %User Profile%\Optimizer Pro\Log
  • %User Profile%\Optimizer Pro\Undo
  • %User Profile%\Optimizer Pro\Backup

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).

. %User Profile% es la carpeta de perfil del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario} y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}).

)

Técnica de inicio automático

Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
Optimizer Pro = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"

Otras modificaciones del sistema

Elimina los archivos siguientes:

  • %Desktop%\Optimizer Pro.pif
  • %Desktop%\Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.url
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.pif
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.url
  • %User Temp%\OptimizerPro.madExcept\.
  • %User Temp%\OptimizerPro.madExcept\..

(Nota: %Desktop% es la carpeta Escritorio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Escritorio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Escritorio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Escritorio).

. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).

. %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).

)

Agrega las siguientes entradas de registro como parte de la rutina de instalación:

HKEY_CURRENT_USER\Software\Optimizer Pro

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d

HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d

HKEY_CURRENT_USER\SOFTWARE\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}

HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Agrega las siguientes entradas de registro:

HKEY_CURRENT_USER\Software\Optimizer Pro
SessionID = "BAA1E922-49D5-4402-9120-712F8163333D"

HKEY_CURRENT_USER\Software\Optimizer Pro
cufValue = "CUF=0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
340d3099 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
dbaf3ce3 = "/P////%%"

HKEY_CURRENT_USER\Software\Optimizer Pro
Language = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Setup Version = "5.5.3 (u)"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: App Path = "%Program Files%\Optimizer Pro 3.51"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallLocation = "%Program Files%\Optimizer Pro 3.51"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Icon Group = "Optimizer Pro v3.2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: User = "Wilbert"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Selected Tasks = "runoptpro,runoptprodaily,desktopicon"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Inno Setup: Language = "en"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayName = "Optimizer Pro v3.2"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayIcon = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
UninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe "

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
QuietUninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe /SILENT"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
DisplayVersion = "3.3.1.7"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
Publisher = "PCUtilities Software Limited"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLInfoAbout = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
HelpLink = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
URLUpdateInfo = "http://www.{BLOCKED}itiespro.com"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoModify = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
NoRepair = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
InstallDate = "20150605"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MajorVersion = "3"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1
MinorVersion = "3"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
date = "1433555913"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
date = "1433555913"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
data.1 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
data.1 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
usr.0 = "eAhQKpnikg01234567"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
usr.0 = "eAhQKpnikg01234567"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
version = "157f7"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
uuid = "4181197162"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
uuid = "4181197162"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
51d2f2ea = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
51d2f2ea = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a2e3b941 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a2e3b941 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
state = "0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a1dcff5b = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a1dcff5b = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
340d3099 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
340d3099 = "/P////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0e93c3f3 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0e93c3f3 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0c230bcb = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0c230bcb = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
27ddcf6f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
27ddcf6f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
414bc593 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
414bc593 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f0bf0bde = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f0bf0bde = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c99a5f5c = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c99a5f5c = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
72758a5d = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
72758a5d = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
e46c271e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
e46c271e = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
7f69fa1f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
7f69fa1f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
3c09c42b = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
3c09c42b = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
7367429f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
7367429f = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
d1abcdb6 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
d1abcdb6 = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c5705860 = "Vx////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c5705860 = "Vx////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
a0743acc = "N/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
a0743acc = "N/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
1520c6f1 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
1520c6f1 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
2d71d5ab = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
2d71d5ab = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
fe94ce1e = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
fe94ce1e = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
587b5709 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
587b5709 = "V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
lrts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
lrts = "0"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svn = "Optimizer Pro Crash Monitor"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svi = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svt = "5571f31b"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
370856c7 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
370856c7 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
3efeb33e = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
3efeb33e = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
a47da861 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\00000000
a47da861 = "{random characters}"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
2e22d94e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
2e22d94e = "///%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
370856c7 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
3efeb33e = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\00000000
a47da861 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0c230bcb = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0dc3ee96 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
0e93c3f3 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
1520c6f1 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
27ddcf6f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
2d71d5ab = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
2e22d94e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
340d3099 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
38583bc3 = "Ml/2/CF/M//g/CZ////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
3c09c42b = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
414bc593 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
51d2f2ea = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
587b5709 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
72758a5d = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
7367429f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
7f69fa1f = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
8b9e4cbc = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a0743acc = "N/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a1dcff5b = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
a2e3b941 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
bbf88800 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c24899a6 = "VP/g/CV/Vl/1/CF////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c5705860 = "Vx////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c6c5dd44 = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
c99a5f5c = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
d1abcdb6 = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
e46c271e = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f0bf0bde = "///%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f1f24e29 = "Vl/l/C/////%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
f6ad6fa6 = "VP/l/C//V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030\eae10f9d
fe94ce1e = "V/////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
data.1 = "{random characters}"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
date = "1433555913"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
iiid = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
lrts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
mode = "f"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
state = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svi = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svn = "Optimizer Pro Crash Monitor"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
svt = "5571f31b"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
usr.0 = "eAhQKpnikg01234567"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
usr.1 = "L9nTNM/XZTVNPRJLFH"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
uuid = "4181197162"

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030
version = "157f7"

HKEY_CURRENT_USER\Software\AppDataLow\
{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
dbaf3ce3 = "/P////%%"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\Windows
LoadAppInit_DLLs = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
a277a3f2 = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
dlpath = "%Program Files%\optimi~1.51\optpro~2.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\
_a277a3f2
svpath = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
Cache = "1416756302525131992"

HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
n = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
n = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
InstallDate = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
AppStart = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
DisplayName = "Optimizer Pro"

HKEY_CURRENT_USER\Software\Optimizer Pro
Version = "3.2"

HKEY_CURRENT_USER\Software\Optimizer Pro
Reminder = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
SpeedGuard = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
AppStart = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
LastVersionChecking = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
LogDir = "%User Profile%\Optimizer Pro\Log"

HKEY_CURRENT_USER\Software\Optimizer Pro
UndoDir = "%User Profile%\Optimizer Pro\Undo"

HKEY_CURRENT_USER\Software\Optimizer Pro
ItemsToScan = "1111111111"

HKEY_CURRENT_USER\Software\Optimizer Pro
UseExceptionList = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
ShowRebootMessage = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartScan = "1"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartExec = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_SmartMode = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_Enable = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
s_Time = "{random values}"

HKEY_CURRENT_USER\Software\Optimizer Pro
UpgradeID = "BZDV_PCSM_ML_PCUP_OPTIMIZERPRO_RED"

HKEY_CURRENT_USER\Software\Optimizer Pro
ProblemsFixed = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
ItemsCleaned = "0"

HKEY_CURRENT_USER\Software\Optimizer Pro
ResidualFilesCleaned = "0"

Elimina las siguientes claves de registro:

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptimizerPro_RASAPI32

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptimizerPro_RASMANCS

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptProStart_RASAPI32

HKEY_LOCAL_MACHINE\Software\Microsoft\
Tracing\OptProStart_RASMANCS

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Explorer\
MenuOrder\Start Menu2\Programs\
Optimizer Pro

HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
Optimizer Pro_is1

HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\
48451714526259030

Rutina de infiltración

Infiltra los archivos siguientes:

  • %User Temp%\is-v0vtj.tmp\{malware file name}.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-DBGRC.tmp\OptProHelper.dll
  • %User Temp%\is-DBGRC.tmp\itdownload.dll
  • %User Temp%\is-DBGRC.tmp\OptProMon.dll
  • %Program Files%\Optimizer Pro 3.51\unins000.dat
  • %Program Files%\Optimizer Pro 3.51\is-FPUJI.tmp
  • %Program Files%\Optimizer Pro 3.51\is-I68VQ.tmp
  • %Program Files%\Optimizer Pro 3.51\is-PK0T9.tmp
  • %Program Files%\Optimizer Pro 3.51\is-GHKHR.tmp
  • %Program Files%\Optimizer Pro 3.51\is-DBAUT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EM7VD.tmp
  • %Program Files%\Optimizer Pro 3.51\is-C81U8.tmp
  • %Program Files%\Optimizer Pro 3.51\is-RDO5O.tmp
  • %Program Files%\Optimizer Pro 3.51\is-5ULDF.tmp
  • %Program Files%\Optimizer Pro 3.51\is-83LVB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-428GS.tmp
  • %Program Files%\Optimizer Pro 3.51\is-HMS1S.tmp
  • %Program Files%\Optimizer Pro 3.51\is-39NL3.tmp
  • %Program Files%\Optimizer Pro 3.51\is-Q9BCB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-TD6KT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EPI4U.tmp
  • %Program Files%\Optimizer Pro 3.51\is-B23FE.tmp
  • %Program Files%\Optimizer Pro 3.51\is-94P76.tmp
  • %Program Files%\Optimizer Pro 3.51\is-9L9E2.tmp
  • %Program Files%\Optimizer Pro 3.51\is-MFK1N.tmp
  • %Program Files%\Optimizer Pro 3.51\is-8JGQB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-V6F4J.tmp
  • %Desktop%\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.lnk
  • %Program Files%\Optimizer Pro 3.51\unins000.msg
  • %Program Files%\Optimizer Pro 3.51\OptProMon.dll

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

. %Desktop% es la carpeta Escritorio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Escritorio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Escritorio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Escritorio).

. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).

)

  Soluzioni

Motore di scansione minimo: 9.750

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Reiniciar en modo seguro

[ learnMore ]

Step 3

Eliminar esta clave del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_CURRENT_USER\Software
    • Optimizer Pro
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
    • Optimizer Pro_is1
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}
    • _a277a3f2
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}
    • _a277a3f2
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • eae10f9d
  • In HKEY_CURRENT_USER\SOFTWARE\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • 00000000
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • eae10f9d
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • {6791A2F3-FC80-475C-A002-C014AF797E9C}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • {1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
  • In HKEY_LOCAL_MACHINE\SOFTWARE
    • {3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}

Step 4

Eliminar este valor del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
    • Optimizer Pro = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • SessionID = "BAA1E922-49D5-4402-9120-712F8163333D"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • cufValue = "CUF=0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
    • 340d3099 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_438857e3\eae10f9d
    • dbaf3ce3 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Language = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Setup Version = "5.5.3 (u)"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: App Path = "%Program Files%\Optimizer Pro 3.51"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • InstallLocation = "%Program Files%\Optimizer Pro 3.51"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Icon Group = "Optimizer Pro v3.2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: User = "Wilbert"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Selected Tasks = "runoptpro,runoptprodaily,desktopicon"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Inno Setup: Language = "en"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayName = "Optimizer Pro v3.2"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayIcon = "%Program Files%\Optimizer Pro 3.51\OptProLauncher.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • UninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe "
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • QuietUninstallString = "%Program Files%\Optimizer Pro 3.51\unins000.exe /SILENT"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • DisplayVersion = "3.3.1.7"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • Publisher = "PCUtilities Software Limited"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • URLInfoAbout = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • HelpLink = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • URLUpdateInfo = "http://www.{BLOCKED}itiespro.com"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • NoModify = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • NoRepair = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • InstallDate = "20150605"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • MajorVersion = "3"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Optimizer Pro_is1
    • MinorVersion = "3"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • date = "1433555913"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • date = "1433555913"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.1 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • data.1 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • version = "157f7"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • uuid = "4181197162"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • uuid = "4181197162"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • state = "0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • e46c271e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • e46c271e = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7367429f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 7367429f = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • lrts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • lrts = "0"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svn = "Optimizer Pro Crash Monitor"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svi = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svt = "5571f31b"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • a47da861 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\00000000
    • a47da861 = "{random characters}"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • 370856c7 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • 3efeb33e = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\00000000
    • a47da861 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0c230bcb = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0dc3ee96 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 0e93c3f3 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 1520c6f1 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 27ddcf6f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 2d71d5ab = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 2e22d94e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 340d3099 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 38583bc3 = "Ml/2/CF/M//g/CZ////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 3c09c42b = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 414bc593 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 51d2f2ea = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 587b5709 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 72758a5d = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 7367429f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 7f69fa1f = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • 8b9e4cbc = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a0743acc = "N/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a1dcff5b = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • a2e3b941 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • bbf88800 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c24899a6 = "VP/g/CV/Vl/1/CF////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c5705860 = "Vx////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c6c5dd44 = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • c99a5f5c = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • d1abcdb6 = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • e46c271e = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f0bf0bde = "///%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f1f24e29 = "Vl/l/C/////%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • f6ad6fa6 = "VP/l/C//V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030\eae10f9d
    • fe94ce1e = "V/////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • appid.0 = "bg0RLlWVImHLJTVNPRoNmFyXhLqC/SMJhvT1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • data.0 = "yKL46KKyRbWb4SrpniyrjFQsqezQ2ocIs7qt8iyx9LGKl07iQB0/cd5pyAco6Cr/egWCEBe+x"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • data.1 = "{random characters}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • date = "1433555913"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • iiid = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • lrts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • mode = "f"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • state = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svi = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svn = "Optimizer Pro Crash Monitor"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • svt = "5571f31b"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • usr.0 = "eAhQKpnikg01234567"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • usr.1 = "L9nTNM/XZTVNPRJLFH"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • uuid = "4181197162"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\efd5f1a5-a3ff-16c1-af17-53ccb4cb3a92\48451714526259030
    • version = "157f7"
  • In HKEY_CURRENT_USER\Software\AppDataLow\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2\eae10f9d
    • dbaf3ce3 = "/P////%%"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows
    • LoadAppInit_DLLs = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    • a277a3f2 = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • dlpath = "%Program Files%\optimi~1.51\optpro~2.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{1146AC44-2F03-4431-B4FD-889BC837521F}\_a277a3f2
    • svpath = "%Program Files%\Optimizer Pro 3.51\OptProMon.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{1146AC44-2F03-4431-B4FD-889BC837521F}{a277a3f2}
    • Cache = "1416756302525131992"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{6791A2F3-FC80-475C-A002-C014AF797E9C}
    • n = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\{3A7D3E19-1B79-4E4E-BD96-5467DA2C4EF0}
    • n = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • InstallDate = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • AppStart = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • DisplayName = "Optimizer Pro"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Version = "3.2"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • Reminder = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • SpeedGuard = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • AppStart = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • LastVersionChecking = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • LogDir = "%User Profile%\Optimizer Pro\Log"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UndoDir = "%User Profile%\Optimizer Pro\Undo"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ItemsToScan = "1111111111"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UseExceptionList = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ShowRebootMessage = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartScan = "1"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartExec = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_SmartMode = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_Enable = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • s_Time = "{random values}"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • UpgradeID = "BZDV_PCSM_ML_PCUP_OPTIMIZERPRO_RED"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ProblemsFixed = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ItemsCleaned = "0"
  • In HKEY_CURRENT_USER\Software\Optimizer Pro
    • ResidualFilesCleaned = "0"

Step 5

Buscar y eliminar estos archivos

[ learnMore ]
Puede que algunos de los archivos del componente estén ocultos. Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción "Más opciones avanzadas" para que el resultado de la búsqueda incluya todos los archivos y carpetas ocultos.
  • %User Temp%\is-v0vtj.tmp\{malware file name}.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup\_shfoldr.dll
  • %User Temp%\is-DBGRC.tmp\OptProHelper.dll
  • %User Temp%\is-DBGRC.tmp\itdownload.dll
  • %User Temp%\is-DBGRC.tmp\OptProMon.dll
  • %Program Files%\Optimizer Pro 3.51\unins000.dat
  • %Program Files%\Optimizer Pro 3.51\is-FPUJI.tmp
  • %Program Files%\Optimizer Pro 3.51\is-I68VQ.tmp
  • %Program Files%\Optimizer Pro 3.51\is-PK0T9.tmp
  • %Program Files%\Optimizer Pro 3.51\is-GHKHR.tmp
  • %Program Files%\Optimizer Pro 3.51\is-DBAUT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EM7VD.tmp
  • %Program Files%\Optimizer Pro 3.51\is-C81U8.tmp
  • %Program Files%\Optimizer Pro 3.51\is-RDO5O.tmp
  • %Program Files%\Optimizer Pro 3.51\is-5ULDF.tmp
  • %Program Files%\Optimizer Pro 3.51\is-83LVB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-428GS.tmp
  • %Program Files%\Optimizer Pro 3.51\is-HMS1S.tmp
  • %Program Files%\Optimizer Pro 3.51\is-39NL3.tmp
  • %Program Files%\Optimizer Pro 3.51\is-Q9BCB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-TD6KT.tmp
  • %Program Files%\Optimizer Pro 3.51\is-EPI4U.tmp
  • %Program Files%\Optimizer Pro 3.51\is-B23FE.tmp
  • %Program Files%\Optimizer Pro 3.51\is-94P76.tmp
  • %Program Files%\Optimizer Pro 3.51\is-9L9E2.tmp
  • %Program Files%\Optimizer Pro 3.51\is-MFK1N.tmp
  • %Program Files%\Optimizer Pro 3.51\is-8JGQB.tmp
  • %Program Files%\Optimizer Pro 3.51\is-V6F4J.tmp
  • %Desktop%\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Help.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Optimizer Pro on the Web.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Uninstall Optimizer Pro.lnk
  • %Start Menu%\Programs\Optimizer Pro v3.2\Check updates.lnk
  • %Program Files%\Optimizer Pro 3.51\unins000.msg
  • %Program Files%\Optimizer Pro 3.51\OptProMon.dll

Step 6

Buscar y eliminar estas carpetas

[ learnMore ]
Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción Más opciones avanzadas para que el resultado de la búsqueda incluya todas las carpetas ocultas.
  • %User Temp%\is-V0VTJ.tmp
  • %User Temp%\is-DBGRC.tmp
  • %User Temp%\is-DBGRC.tmp\_isetup
  • %Program Files%\Optimizer Pro 3.51
  • %Start Menu%\Programs\Optimizer Pro v3.2
  • %User Temp%\OptimizerPro.madExcept
  • %User Profile%\Application Data\Optimizer Pro
  • %User Profile%\Optimizer Pro\Log
  • %User Profile%\Optimizer Pro\Undo
  • %User Profile%\Optimizer Pro\Backup

Step 7

Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como ADW_PCOptimizerPro En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.


Sondaggio