PLATFORM:

Windows

 OVER ALL RISK RATING:
 REPORTED INFECTION:
 Beeinträchtigung der Systemleistung ::
 INFORMATION EXPOSURE:
Low
Medium
High
Critical

  • Threat Type:
    Adware

  • Destructiveness:
    No

  • Encrypted:
     

  • In the wild::
    Yes

  OVERVIEW

Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.

  TECHNICAL DETAILS

File size: 3,400,544 bytes
File type: EXE
Memory resident: Yes
INITIAL SAMPLES RECEIVED DATE: 30 de апреля de 2016

Instalación

Crea las carpetas siguientes:

  • %User Temp%\~vis0000
  • %Program Files%\DivX
  • %Program Files%\DivX\DivX Pro Codec
  • %Start Menu%\Programs\DivX
  • %Start Menu%\Programs\DivX\DivX Pro Codec
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha
  • %Program Files%\DivX\DivX Player 2.0 Alpha
  • %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
  • %User Temp%\fsg_tmp
  • %User Temp%\fsg_tmp\accum
  • %User Temp%\fsg_tmp\accum\Trickler

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).

)

Técnica de inicio automático

Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Trickler = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe "

Otras modificaciones del sistema

Elimina los archivos siguientes:

  • %User Temp%\~vis0000\miscdata.xyz
  • %Program Files%\DivX\xxxxxxxx.yyy
  • %Start Menu%\Programs\VIScf46.TMP
  • %Start Menu%\Programs\VIScf56.TMP
  • %Start Menu%\Programs\VIScfb3.TMP
  • %Start Menu%\Programs\VIScfc3.TMP
  • %Start Menu%\Programs\VISd002.TMP
  • %Start Menu%\Programs\VISdf53.TMP
  • %Start Menu%\Programs\VISe00f.TMP
  • %Start Menu%\Programs\VISe05d.TMP
  • %Start Menu%\Programs\VISe176.TMP
  • %Start Menu%\Programs\VISe31c.TMP
  • %Start Menu%\Programs\VISe33b.TMP
  • %Start Menu%\Programs\VISe3b8.TMP
  • %Start Menu%\Programs\VISe4d2.TMP
  • %Start Menu%\Programs\VISe61a.TMP
  • %Start Menu%\Programs\VISe639.TMP
  • %Start Menu%\Programs\VISe6b6.TMP
  • %Start Menu%\Programs\VISe762.TMP
  • %Start Menu%\Programs\VISe87b.TMP
  • %Start Menu%\Programs\VISe917.TMP
  • %Start Menu%\Programs\VISe927.TMP
  • %Start Menu%\Programs\VISe9e3.TMP
  • %Start Menu%\Programs\VISeb79.TMP
  • %Start Menu%\Programs\VISeb98.TMP
  • %Start Menu%\Programs\VISec54.TMP
  • %Start Menu%\Programs\VISed1f.TMP
  • %Start Menu%\Programs\VISee67.TMP
  • %Start Menu%\Programs\VISee86.TMP
  • %Start Menu%\Programs\VISef03.TMP
  • %Start Menu%\Programs\VISefbf.TMP
  • %Start Menu%\Programs\VISf0f7.TMP
  • %Start Menu%\Programs\VISf116.TMP
  • %Start Menu%\Programs\VISf1a3.TMP
  • %Start Menu%\Programs\VISf28d.TMP
  • %Start Menu%\Programs\VISf58b.TMP
  • %Start Menu%\Programs\VISf5d9.TMP
  • %Start Menu%\Programs\VISf5e9.TMP
  • %Start Menu%\Programs\VISf695.TMP
  • %Start Menu%\Programs\VISf7ec.TMP
  • %Start Menu%\Programs\VIS20a2.TMP
  • %Start Menu%\Programs\VIS214e.TMP
  • %Start Menu%\Programs\VIS2258.TMP
  • %Start Menu%\Programs\VIS29f9.TMP
  • %Start Menu%\Programs\VIS2e9c.TMP
  • %User Temp%\~vis0000\default.bmp
  • %User Temp%\~vis0000\divxpro_gain.jpg
  • %User Temp%\~vis0000\dsetup.dll
  • %User Temp%\~vis0000\English.vlg
  • %User Temp%\~vis0000\GAIN Banner.bmp
  • %User Temp%\~vis0000\jpeg.dll
  • %User Temp%\~vis0000\r0000000.000
  • %User Temp%\~vis0000\r0000000.001
  • %User Temp%\~vis0000\r0000000.002
  • %User Temp%\~vis0000\r0000000.003
  • %User Temp%\~vis0000\r0000000.004
  • %User Temp%\~vis0000\r0000000.005
  • %User Temp%\~vis0000\r0000000.006
  • %User Temp%\~vis0000\r0000000.007
  • %User Temp%\~vis0000\r0000000.008
  • %User Temp%\~vis0000\r0000000.009
  • %User Temp%\~vis0000\r0000000.010
  • %User Temp%\~vis0000\r0000000.011
  • %User Temp%\~vis0000\r0000000.012
  • %User Temp%\~vis0000\r0000000.013
  • %User Temp%\~vis0000\r0000000.014
  • %User Temp%\~vis0000\r0000000.015
  • %User Temp%\~vis0000\r0000000.016
  • %User Temp%\~vis0000\r0000000.017
  • %User Temp%\~vis0000\r0000000.018
  • %User Temp%\~vis0000\r0000000.019
  • %User Temp%\~vis0000\r0000000.020
  • %User Temp%\~vis0000\r0000000.021
  • %User Temp%\~vis0000\r0000000.022
  • %User Temp%\~vis0000\r0000000.023
  • %User Temp%\~vis0000\r0000000.024
  • %User Temp%\~vis0000\r0000000.025
  • %User Temp%\~vis0000\r0000000.026
  • %User Temp%\~vis0000\rebootnt.exe
  • %User Temp%\~vis0000\rollback.log
  • %User Temp%\~vis0000\vise32ex.dll

(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).

. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).

. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).

)

Agrega las siguientes entradas de registro como parte de la rutina de instalación:

HKEY_CURRENT_USER\Software\DivXNetworks

HKEY_CURRENT_USER\Software\DivXNetworks\
DivX4Windows

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\MediaResources\icm

HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\MediaResources\icm\
vidc.DIVX

HKEY_LOCAL_MACHINE\Software\DivXNetworks

HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX

HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX\Enhancement

HKEY_CLASSES_ROOT\AVIFILE\Extensions\
MP4

HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}

HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}\
AVIFile

HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX Player 2.0

HKEY_CURRENT_USER\Software\DivXNetworks\
DivX Player 2.0

HKEY_CLASSES_ROOT\.divx

HKEY_CLASSES_ROOT\divxfile

HKEY_CLASSES_ROOT\divxfile\DefaultIcon

HKEY_CLASSES_ROOT\divxfile\shell

HKEY_CLASSES_ROOT\divxfile\shell\
open

HKEY_CLASSES_ROOT\divxfile\shell\
open\command

HKEY_CLASSES_ROOT\.div

HKEY_CLASSES_ROOT\divfile

HKEY_CLASSES_ROOT\divfile\DefaultIcon

HKEY_CLASSES_ROOT\divfile\shell

HKEY_CLASSES_ROOT\divfile\shell\
open

HKEY_CLASSES_ROOT\divfile\shell\
open\command

HKEY_CLASSES_ROOT\.dps

HKEY_CLASSES_ROOT\dpsfile

HKEY_CLASSES_ROOT\dpsfile\DefaultIcon

HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\
Instance\{78766964-0000-0010-8000-00AA00389B71}

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec

HKEY_CLASSES_ROOT\CLSID\{78766964-0000-0010-8000-00AA00389B71}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32

HKEY_CLASSES_ROOT\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\
Instance\CLSID_DivXDeux

HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\
Instance\CLSID_DivXDeux

HKEY_LOCAL_MACHINE\Software\CLASSES\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler

HKEY_LOCAL_MACHINE\software\Gator.com\
Gator\dyn

HKEY_LOCAL_MACHINE\software\Gator.com\
Gator\stat

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\SilentSetup\
dl

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\SilentSetup\
chk

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\Bundle\
dl

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\Bundle\
chk

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\OemResDll\
dl

HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\OemResDll\
chk

Agrega las siguientes entradas de registro:

HKEY_CURRENT_USER\Software\DivXNetworks\
DivX4Windows
Postprocessing = "14"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\drivers.desc
DivX.dll = "DivX 5.0 Pro Codec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\MediaResources\icm\
vidc.DIVX
Description = "DivX 5.0 Codec"

HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\MediaResources\icm\
vidc.DIVX
Driver = "DivX.dll"

HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX
uninstdir = "%Program Files%\DivX"

HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
InstallDir = "%Program Files%\DivX\DivX Player 2.0 Alpha"

HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
SkinsDir = "%Program Files%\DivX\DivX Player 2.0 Alpha\Skins"

HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"

HKEY_CURRENT_USER\Software\DivXNetworks\
DivX Player 2.0
applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32
ThreadingModel = "Both"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32
ThreadingModel = "Both"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32
ThreadingModel = "Both"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32
ThreadingModel = "Both"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
FriendlyName = "DivX Decoder Filter"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
FilterData = "{random values}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
FriendlyName = "DivX Decoder Filter"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
FilterData = "{random values}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
FriendlyName = "DivX Decoder Filter"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
FilterData = "{random values}"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec
DisplayName = "DivX 5.0.3 Pro Bundle"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec
UninstallString = "%Windows%\unvise32.exe %Program Files%\DivX\uninstal.log"

HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\SharedDlls
%Windows%\unvise32.exe = "1"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
uets = "{random values}"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
AppPath = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
OldTrickler = "%Program Files%\divx\divx pro codec\gain_trickler.exe0"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
GEF = "4"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
FirstStartValue = "349"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Gator\dyn
PdpFirstStart = "841:NEW"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Gator\stat
Guid = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
GMG = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
FileDones = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
UrlSize = "ffffffff"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
CheckFailures = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
FileDones = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
UrlSize = "ffffffff"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
CheckFailures = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
FileDones = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
UrlSize = "ffffffff"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
CheckFailures = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
Attempts = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
Errors = "0"

HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
StartTime = "57a26f5"

Elimina las siguientes claves de registro:

HKEY_CLASSES_ROOT\divxFile

HKEY_CLASSES_ROOT\divxFile\shell\
open\command

HKEY_CLASSES_ROOT\divxFile\DefaultIcon

HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache

HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}

Rutina de infiltración

Infiltra los archivos siguientes:

  • %Start Menu%\Programs\DivX\DivX Pro Codec\DivX Help Guide.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\License.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\Readme.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\DivX.com.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\Decoder Configuration.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\License.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX.com.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\Readme.txt.lnk
  • %Desktop%\DivX Player 2.0 Alpha.lnk
  • %Start Menu%\Programs\DivX\Remove DivX 5.0.3 Pro Bundle.lnk
  • %Program Files%\DivX\uninstal.log
  • %Windows%\unvise32.exe
  • %Program Files%\divx\divx pro codec\gain_trickler_3202.exe

  SOLUTION

Minimum scan engine: 9.8

Step 1

Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.

Step 2

Reiniciar en modo seguro

[ learnMore ]

Step 3

Eliminar esta clave del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_CURRENT_USER\Software
    • DivXNetworks
  • In HKEY_CURRENT_USER\Software\DivXNetworks
    • DivX4Windows
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources
    • icm
  • In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\icm
    • vidc.DIVX
  • In HKEY_LOCAL_MACHINE\Software
    • DivXNetworks
  • In HKEY_LOCAL_MACHINE\SoftwareNetworks
    • DivX
  • In HKEY_LOCAL_MACHINE\Software\DivXNetworks\DivX
    • Enhancement
  • In HKEY_CLASSES_ROOT\AVIFILE\Extensions
    • MP4
  • In HKEY_CLASSES_ROOT\CLSID
    • {634f0d74-0dda-4344-be44-8b1c35ee3296}
  • In HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}
    • AVIFile
  • In HKEY_LOCAL_MACHINE\Software\DivXNetworks
    • DivX Player 2.0
  • In HKEY_CURRENT_USER\Software\DivXNetworks
    • DivX Player 2.0
  • In HKEY_CLASSES_ROOT
    • .divx
  • In HKEY_CLASSES_ROOT
    • divxfile
  • In HKEY_CLASSES_ROOT\divxfile
    • DefaultIcon
  • In HKEY_CLASSES_ROOT\divxfile
    • shell
  • In HKEY_CLASSES_ROOT\divxfile\shell
    • open
  • In HKEY_CLASSES_ROOT\divxfile\shell\open
    • command
  • In HKEY_CLASSES_ROOT
    • .div
  • In HKEY_CLASSES_ROOT
    • divfile
  • In HKEY_CLASSES_ROOT\divfile
    • DefaultIcon
  • In HKEY_CLASSES_ROOT\divfile
    • shell
  • In HKEY_CLASSES_ROOT\divfile\shell
    • open
  • In HKEY_CLASSES_ROOT\divfile\shell\open
    • command
  • In HKEY_CLASSES_ROOT
    • .dps
  • In HKEY_CLASSES_ROOT
    • dpsfile
  • In HKEY_CLASSES_ROOT\dpsfile
    • DefaultIcon
  • In HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance
    • {78766964-0000-0010-8000-00AA00389B71}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
    • DivX Codec
  • In HKEY_CLASSES_ROOT\CLSID
    • {78766964-0000-0010-8000-00AA00389B71}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78766964-0000-0010-8000-00AA00389B71}
    • InprocServer32
  • In HKEY_CLASSES_ROOT\CLSID
    • {310E42A0-F913-11D4-887C-006008DC5C26}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}
    • InprocServer32
  • In HKEY_CLASSES_ROOT\CLSID
    • {1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
    • InprocServer32
  • In HKEY_CLASSES_ROOT\CLSID
    • {83E66439-05D5-488C-A236-AA20E543D384}
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}
    • InprocServer32
  • In HKEY_CLASSES_ROOT\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance
    • CLSID_DivXDeux
  • In HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance
    • CLSID_DivXDeux
  • In HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID
    • {21FFB6C0-0DA1-11D5-A9D5-00500413153C}
  • In HKEY_LOCAL_MACHINE\software\Gator.com
    • Trickler
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Gator
    • dyn
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Gator
    • stat
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\SilentSetup
    • dl
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\SilentSetup
    • chk
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\Bundle
    • dl
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\Bundle
    • chk
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\OemResDll
    • dl
  • In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\OemResDll
    • chk

Step 4

Eliminar este valor del Registro

[ learnMore ]

Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.

  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
    • Trickler = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe "
  • In HKEY_CURRENT_USER\Software\DivXNetworks\DivX4Windows
    • Postprocessing = "14"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
    • DivX.dll = "DivX 5.0 Pro Codec"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\icm\vidc.DIVX
    • Description = "DivX 5.0 Codec"
  • In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\icm\vidc.DIVX
    • Driver = "DivX.dll"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX
    • uninstdir = "%Program Files%\DivX"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
    • InstallDir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
    • SkinsDir = "%Program Files%\DivX\DivX Player 2.0 Alpha\Skins"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
    • applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
  • In HKEY_CURRENT_USER\Software\DivXNetworks\DivX Player 2.0
    • applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32
    • ThreadingModel = "Both"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32
    • ThreadingModel = "Both"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32
    • ThreadingModel = "Both"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32
    • ThreadingModel = "Both"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
    • FriendlyName = "DivX Decoder Filter"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
    • CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
    • FilterData = "{random values}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
    • FriendlyName = "DivX Decoder Filter"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
    • CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
    • FilterData = "{random values}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
    • FriendlyName = "DivX Decoder Filter"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
    • CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
    • FilterData = "{random values}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivX Codec
    • DisplayName = "DivX 5.0.3 Pro Bundle"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivX Codec
    • UninstallString = "%Windows%\unvise32.exe %Program Files%\DivX\uninstal.log"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
    • %Windows%\unvise32.exe = "1"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    • uets = "{random values}"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
    • AppPath = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
    • OldTrickler = "%Program Files%\divx\divx pro codec\gain_trickler.exe0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    • GEF = "4"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
    • FirstStartValue = "349"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Gator\dyn
    • PdpFirstStart = "841:NEW"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Gator\stat
    • Guid = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
    • GMG = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
    • FileDones = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
    • UrlSize = "ffffffff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
    • CheckFailures = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
    • FileDones = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
    • UrlSize = "ffffffff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
    • CheckFailures = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
    • FileDones = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
    • UrlSize = "ffffffff"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
    • CheckFailures = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
    • Attempts = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
    • Errors = "0"
  • In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
    • StartTime = "57a26f5"

Step 5

Buscar y eliminar estos archivos

[ learnMore ]
Puede que algunos de los archivos del componente estén ocultos. Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción "Más opciones avanzadas" para que el resultado de la búsqueda incluya todos los archivos y carpetas ocultos.
  • %Start Menu%\Programs\DivX\DivX Pro Codec\DivX Help Guide.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\License.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\Readme.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\DivX.com.lnk
  • %Start Menu%\Programs\DivX\DivX Pro Codec\Decoder Configuration.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\License.txt.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX.com.lnk
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\Readme.txt.lnk
  • %Desktop%\DivX Player 2.0 Alpha.lnk
  • %Start Menu%\Programs\DivX\Remove DivX 5.0.3 Pro Bundle.lnk
  • %Program Files%\DivX\uninstal.log
  • %Windows%\unvise32.exe
  • %Program Files%\divx\divx pro codec\gain_trickler_3202.exe

Step 6

Buscar y eliminar estas carpetas

[ learnMore ]
Asegúrese de que tiene activada la casilla Buscar archivos y carpetas ocultos en la opción Más opciones avanzadas para que el resultado de la búsqueda incluya todas las carpetas ocultas.
  • %User Temp%\~vis0000
  • %Program Files%\DivX
  • %Program Files%\DivX\DivX Pro Codec
  • %Start Menu%\Programs\DivX
  • %Start Menu%\Programs\DivX\DivX Pro Codec
  • %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha
  • %Program Files%\DivX\DivX Player 2.0 Alpha
  • %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
  • %User Temp%\fsg_tmp
  • %User Temp%\fsg_tmp\accum
  • %User Temp%\fsg_tmp\accum\Trickler

Step 7

Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como ADW_GATOR.A En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.


Did this description help? Tell us how we did.