ADW_GATOR.A
Windows
Tipo de malware
Adware
Destructivo?
No
Cifrado
In the Wild:
Sí
Resumen y descripción
Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.
Detalles técnicos
Instalación
Crea las carpetas siguientes:
- %User Temp%\~vis0000
- %Program Files%\DivX
- %Program Files%\DivX\DivX Pro Codec
- %Start Menu%\Programs\DivX
- %Start Menu%\Programs\DivX\DivX Pro Codec
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha
- %Program Files%\DivX\DivX Player 2.0 Alpha
- %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
- %User Temp%\fsg_tmp
- %User Temp%\fsg_tmp\accum
- %User Temp%\fsg_tmp\accum\Trickler
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).)Técnica de inicio automático
Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
Trickler = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe "
Otras modificaciones del sistema
Elimina los archivos siguientes:
- %User Temp%\~vis0000\miscdata.xyz
- %Program Files%\DivX\xxxxxxxx.yyy
- %Start Menu%\Programs\VIScf46.TMP
- %Start Menu%\Programs\VIScf56.TMP
- %Start Menu%\Programs\VIScfb3.TMP
- %Start Menu%\Programs\VIScfc3.TMP
- %Start Menu%\Programs\VISd002.TMP
- %Start Menu%\Programs\VISdf53.TMP
- %Start Menu%\Programs\VISe00f.TMP
- %Start Menu%\Programs\VISe05d.TMP
- %Start Menu%\Programs\VISe176.TMP
- %Start Menu%\Programs\VISe31c.TMP
- %Start Menu%\Programs\VISe33b.TMP
- %Start Menu%\Programs\VISe3b8.TMP
- %Start Menu%\Programs\VISe4d2.TMP
- %Start Menu%\Programs\VISe61a.TMP
- %Start Menu%\Programs\VISe639.TMP
- %Start Menu%\Programs\VISe6b6.TMP
- %Start Menu%\Programs\VISe762.TMP
- %Start Menu%\Programs\VISe87b.TMP
- %Start Menu%\Programs\VISe917.TMP
- %Start Menu%\Programs\VISe927.TMP
- %Start Menu%\Programs\VISe9e3.TMP
- %Start Menu%\Programs\VISeb79.TMP
- %Start Menu%\Programs\VISeb98.TMP
- %Start Menu%\Programs\VISec54.TMP
- %Start Menu%\Programs\VISed1f.TMP
- %Start Menu%\Programs\VISee67.TMP
- %Start Menu%\Programs\VISee86.TMP
- %Start Menu%\Programs\VISef03.TMP
- %Start Menu%\Programs\VISefbf.TMP
- %Start Menu%\Programs\VISf0f7.TMP
- %Start Menu%\Programs\VISf116.TMP
- %Start Menu%\Programs\VISf1a3.TMP
- %Start Menu%\Programs\VISf28d.TMP
- %Start Menu%\Programs\VISf58b.TMP
- %Start Menu%\Programs\VISf5d9.TMP
- %Start Menu%\Programs\VISf5e9.TMP
- %Start Menu%\Programs\VISf695.TMP
- %Start Menu%\Programs\VISf7ec.TMP
- %Start Menu%\Programs\VIS20a2.TMP
- %Start Menu%\Programs\VIS214e.TMP
- %Start Menu%\Programs\VIS2258.TMP
- %Start Menu%\Programs\VIS29f9.TMP
- %Start Menu%\Programs\VIS2e9c.TMP
- %User Temp%\~vis0000\default.bmp
- %User Temp%\~vis0000\divxpro_gain.jpg
- %User Temp%\~vis0000\dsetup.dll
- %User Temp%\~vis0000\English.vlg
- %User Temp%\~vis0000\GAIN Banner.bmp
- %User Temp%\~vis0000\jpeg.dll
- %User Temp%\~vis0000\r0000000.000
- %User Temp%\~vis0000\r0000000.001
- %User Temp%\~vis0000\r0000000.002
- %User Temp%\~vis0000\r0000000.003
- %User Temp%\~vis0000\r0000000.004
- %User Temp%\~vis0000\r0000000.005
- %User Temp%\~vis0000\r0000000.006
- %User Temp%\~vis0000\r0000000.007
- %User Temp%\~vis0000\r0000000.008
- %User Temp%\~vis0000\r0000000.009
- %User Temp%\~vis0000\r0000000.010
- %User Temp%\~vis0000\r0000000.011
- %User Temp%\~vis0000\r0000000.012
- %User Temp%\~vis0000\r0000000.013
- %User Temp%\~vis0000\r0000000.014
- %User Temp%\~vis0000\r0000000.015
- %User Temp%\~vis0000\r0000000.016
- %User Temp%\~vis0000\r0000000.017
- %User Temp%\~vis0000\r0000000.018
- %User Temp%\~vis0000\r0000000.019
- %User Temp%\~vis0000\r0000000.020
- %User Temp%\~vis0000\r0000000.021
- %User Temp%\~vis0000\r0000000.022
- %User Temp%\~vis0000\r0000000.023
- %User Temp%\~vis0000\r0000000.024
- %User Temp%\~vis0000\r0000000.025
- %User Temp%\~vis0000\r0000000.026
- %User Temp%\~vis0000\rebootnt.exe
- %User Temp%\~vis0000\rollback.log
- %User Temp%\~vis0000\vise32ex.dll
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).)Agrega las siguientes entradas de registro como parte de la rutina de instalación:
HKEY_CURRENT_USER\Software\DivXNetworks
HKEY_CURRENT_USER\Software\DivXNetworks\
DivX4Windows
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\MediaResources\icm
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\
Control\MediaResources\icm\
vidc.DIVX
HKEY_LOCAL_MACHINE\Software\DivXNetworks
HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX
HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX\Enhancement
HKEY_CLASSES_ROOT\AVIFILE\Extensions\
MP4
HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}
HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}\
AVIFile
HKEY_LOCAL_MACHINE\Software\DivXNetworks\
DivX Player 2.0
HKEY_CURRENT_USER\Software\DivXNetworks\
DivX Player 2.0
HKEY_CLASSES_ROOT\.divx
HKEY_CLASSES_ROOT\divxfile
HKEY_CLASSES_ROOT\divxfile\DefaultIcon
HKEY_CLASSES_ROOT\divxfile\shell
HKEY_CLASSES_ROOT\divxfile\shell\
open
HKEY_CLASSES_ROOT\divxfile\shell\
open\command
HKEY_CLASSES_ROOT\.div
HKEY_CLASSES_ROOT\divfile
HKEY_CLASSES_ROOT\divfile\DefaultIcon
HKEY_CLASSES_ROOT\divfile\shell
HKEY_CLASSES_ROOT\divfile\shell\
open
HKEY_CLASSES_ROOT\divfile\shell\
open\command
HKEY_CLASSES_ROOT\.dps
HKEY_CLASSES_ROOT\dpsfile
HKEY_CLASSES_ROOT\dpsfile\DefaultIcon
HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\
Instance\{78766964-0000-0010-8000-00AA00389B71}
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec
HKEY_CLASSES_ROOT\CLSID\{78766964-0000-0010-8000-00AA00389B71}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32
HKEY_CLASSES_ROOT\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\
Instance\CLSID_DivXDeux
HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\
Instance\CLSID_DivXDeux
HKEY_LOCAL_MACHINE\Software\CLASSES\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler
HKEY_LOCAL_MACHINE\software\Gator.com\
Gator\dyn
HKEY_LOCAL_MACHINE\software\Gator.com\
Gator\stat
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\SilentSetup\
dl
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\SilentSetup\
chk
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\Bundle\
dl
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\Bundle\
chk
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\OemResDll\
dl
HKEY_LOCAL_MACHINE\software\Gator.com\
Trickler\Files\OemResDll\
chk
Agrega las siguientes entradas de registro:
HKEY_CURRENT_USER\Software\DivXNetworks\
DivX4Windows
Postprocessing = "14"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows NT\CurrentVersion\drivers.desc
DivX.dll = "DivX 5.0 Pro Codec"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\MediaResources\icm\
vidc.DIVX
Description = "DivX 5.0 Codec"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\MediaResources\icm\
vidc.DIVX
Driver = "DivX.dll"
HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX
uninstdir = "%Program Files%\DivX"
HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
InstallDir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
SkinsDir = "%Program Files%\DivX\DivX Player 2.0 Alpha\Skins"
HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\
DivX Player 2.0
applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
HKEY_CURRENT_USER\Software\DivXNetworks\
DivX Player 2.0
applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32
ThreadingModel = "Both"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32
ThreadingModel = "Both"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32
ThreadingModel = "Both"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32
ThreadingModel = "Both"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
FriendlyName = "DivX Decoder Filter"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
FilterData = "{random values}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
FriendlyName = "DivX Decoder Filter"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\
CLSID_DivXDeux
FilterData = "{random values}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
FriendlyName = "DivX Decoder Filter"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
CLSID_DivXDeux
FilterData = "{random values}"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec
DisplayName = "DivX 5.0.3 Pro Bundle"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
DivX Codec
UninstallString = "%Windows%\unvise32.exe %Program Files%\DivX\uninstal.log"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\SharedDlls
%Windows%\unvise32.exe = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
uets = "{random values}"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
AppPath = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
OldTrickler = "%Program Files%\divx\divx pro codec\gain_trickler.exe0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
GEF = "4"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
FirstStartValue = "349"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Gator\dyn
PdpFirstStart = "841:NEW"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Gator\stat
Guid = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
GMG = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
FileDones = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
dl
UrlSize = "ffffffff"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
CheckFailures = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\SilentSetup\
chk
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
FileDones = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
dl
UrlSize = "ffffffff"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
CheckFailures = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\Bundle\
chk
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
FileDones = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
dl
UrlSize = "ffffffff"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
CheckFailures = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
Attempts = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler\Files\OemResDll\
chk
Errors = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\
Trickler
StartTime = "57a26f5"
Elimina las siguientes claves de registro:
HKEY_CLASSES_ROOT\divxFile
HKEY_CLASSES_ROOT\divxFile\shell\
open\command
HKEY_CLASSES_ROOT\divxFile\DefaultIcon
HKEY_CURRENT_USER\Software\Microsoft\
Multimedia\ActiveMovie\Filter Cache
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\
{78766964-0000-0010-8000-00AA00389B71}
Rutina de infiltración
Infiltra los archivos siguientes:
- %Start Menu%\Programs\DivX\DivX Pro Codec\DivX Help Guide.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\License.txt.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\Readme.txt.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\DivX.com.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\Decoder Configuration.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\License.txt.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX.com.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\Readme.txt.lnk
- %Desktop%\DivX Player 2.0 Alpha.lnk
- %Start Menu%\Programs\DivX\Remove DivX 5.0.3 Pro Bundle.lnk
- %Program Files%\DivX\uninstal.log
- %Windows%\unvise32.exe
- %Program Files%\divx\divx pro codec\gain_trickler_3202.exe
Soluciones
Step 1
Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.
Step 2
Reiniciar en modo seguro
Step 3
Eliminar esta clave del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_CURRENT_USER\Software
- DivXNetworks
- In HKEY_CURRENT_USER\Software\DivXNetworks
- DivX4Windows
- In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources
- icm
- In HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\MediaResources\icm
- vidc.DIVX
- In HKEY_LOCAL_MACHINE\Software
- DivXNetworks
- In HKEY_LOCAL_MACHINE\SoftwareNetworks
- DivX
- In HKEY_LOCAL_MACHINE\Software\DivXNetworks\DivX
- Enhancement
- In HKEY_CLASSES_ROOT\AVIFILE\Extensions
- MP4
- In HKEY_CLASSES_ROOT\CLSID
- {634f0d74-0dda-4344-be44-8b1c35ee3296}
- In HKEY_CLASSES_ROOT\CLSID\{634f0d74-0dda-4344-be44-8b1c35ee3296}
- AVIFile
- In HKEY_LOCAL_MACHINE\Software\DivXNetworks
- DivX Player 2.0
- In HKEY_CURRENT_USER\Software\DivXNetworks
- DivX Player 2.0
- In HKEY_CLASSES_ROOT
- .divx
- In HKEY_CLASSES_ROOT
- divxfile
- In HKEY_CLASSES_ROOT\divxfile
- DefaultIcon
- In HKEY_CLASSES_ROOT\divxfile
- shell
- In HKEY_CLASSES_ROOT\divxfile\shell
- open
- In HKEY_CLASSES_ROOT\divxfile\shell\open
- command
- In HKEY_CLASSES_ROOT
- .div
- In HKEY_CLASSES_ROOT
- divfile
- In HKEY_CLASSES_ROOT\divfile
- DefaultIcon
- In HKEY_CLASSES_ROOT\divfile
- shell
- In HKEY_CLASSES_ROOT\divfile\shell
- open
- In HKEY_CLASSES_ROOT\divfile\shell\open
- command
- In HKEY_CLASSES_ROOT
- .dps
- In HKEY_CLASSES_ROOT
- dpsfile
- In HKEY_CLASSES_ROOT\dpsfile
- DefaultIcon
- In HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance
- {78766964-0000-0010-8000-00AA00389B71}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall
- DivX Codec
- In HKEY_CLASSES_ROOT\CLSID
- {78766964-0000-0010-8000-00AA00389B71}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78766964-0000-0010-8000-00AA00389B71}
- InprocServer32
- In HKEY_CLASSES_ROOT\CLSID
- {310E42A0-F913-11D4-887C-006008DC5C26}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}
- InprocServer32
- In HKEY_CLASSES_ROOT\CLSID
- {1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}
- InprocServer32
- In HKEY_CLASSES_ROOT\CLSID
- {83E66439-05D5-488C-A236-AA20E543D384}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}
- InprocServer32
- In HKEY_CLASSES_ROOT\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance
- CLSID_DivXDeux
- In HKEY_CLASSES_ROOT\CLSID\{083863F1-70DE-11D0-BD40-00A0C911CE86}\Instance
- CLSID_DivXDeux
- In HKEY_LOCAL_MACHINE\Software\CLASSES\CLSID
- {21FFB6C0-0DA1-11D5-A9D5-00500413153C}
- In HKEY_LOCAL_MACHINE\software\Gator.com
- Trickler
- In HKEY_LOCAL_MACHINE\software\Gator.com\Gator
- dyn
- In HKEY_LOCAL_MACHINE\software\Gator.com\Gator
- stat
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\SilentSetup
- dl
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\SilentSetup
- chk
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\Bundle
- dl
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\Bundle
- chk
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\OemResDll
- dl
- In HKEY_LOCAL_MACHINE\software\Gator.com\Trickler\Files\OemResDll
- chk
Step 4
Eliminar este valor del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- Trickler = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe "
- In HKEY_CURRENT_USER\Software\DivXNetworks\DivX4Windows
- Postprocessing = "14"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\drivers.desc
- DivX.dll = "DivX 5.0 Pro Codec"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\icm\vidc.DIVX
- Description = "DivX 5.0 Codec"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\MediaResources\icm\vidc.DIVX
- Driver = "DivX.dll"
- In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX
- uninstdir = "%Program Files%\DivX"
- In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
- InstallDir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
- In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
- SkinsDir = "%Program Files%\DivX\DivX Player 2.0 Alpha\Skins"
- In HKEY_LOCAL_MACHINE\SOFTWARE\DivXNetworks\DivX Player 2.0
- applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
- In HKEY_CURRENT_USER\Software\DivXNetworks\DivX Player 2.0
- applicationdir = "%Program Files%\DivX\DivX Player 2.0 Alpha"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{78766964-0000-0010-8000-00AA00389B71}\InprocServer32
- ThreadingModel = "Both"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{310E42A0-F913-11D4-887C-006008DC5C26}\InprocServer32
- ThreadingModel = "Both"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{1ADD57B8-A7A9-4518-B9B5-862590FF9EB4}\InprocServer32
- ThreadingModel = "Both"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{83E66439-05D5-488C-A236-AA20E543D384}\InprocServer32
- ThreadingModel = "Both"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
- FriendlyName = "DivX Decoder Filter"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
- CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\{78766964-0000-0010-8000-00AA00389B71}
- FilterData = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
- FriendlyName = "DivX Decoder Filter"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
- CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{CF49D4E0-1115-11CE-B03A-0020AF0BA770}\Instance\CLSID_DivXDeux
- FilterData = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
- FriendlyName = "DivX Decoder Filter"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
- CLSID = "{78766964-0000-0010-8000-00AA00389B71}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{083863F1-70DE-11d0-BD40-00A0C911CE86}\Instance\CLSID_DivXDeux
- FilterData = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivX Codec
- DisplayName = "DivX 5.0.3 Pro Bundle"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\DivX Codec
- UninstallString = "%Windows%\unvise32.exe %Program Files%\DivX\uninstal.log"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\SharedDlls
- %Windows%\unvise32.exe = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
- uets = "{random values}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
- AppPath = "%Program Files%\divx\divx pro codec\gain_trickler_3202.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
- OldTrickler = "%Program Files%\divx\divx pro codec\gain_trickler.exe0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
- GEF = "4"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
- FirstStartValue = "349"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Gator\dyn
- PdpFirstStart = "841:NEW"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Gator\stat
- Guid = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{21FFB6C0-0DA1-11D5-A9D5-00500413153C}
- GMG = "6BDA2A38-F52D-49EC-9ABD-270F4AD39F30"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
- FileDones = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\dl
- UrlSize = "ffffffff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
- CheckFailures = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\SilentSetup\chk
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
- FileDones = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\dl
- UrlSize = "ffffffff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
- CheckFailures = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\Bundle\chk
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
- FileDones = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\dl
- UrlSize = "ffffffff"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
- CheckFailures = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
- Attempts = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler\Files\OemResDll\chk
- Errors = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Gator.com\Trickler
- StartTime = "57a26f5"
Step 5
Buscar y eliminar estos archivos
- %Start Menu%\Programs\DivX\DivX Pro Codec\DivX Help Guide.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\License.txt.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\Readme.txt.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\DivX.com.lnk
- %Start Menu%\Programs\DivX\DivX Pro Codec\Decoder Configuration.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX Player 2.0 Alpha.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\License.txt.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\DivX.com.lnk
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha\Readme.txt.lnk
- %Desktop%\DivX Player 2.0 Alpha.lnk
- %Start Menu%\Programs\DivX\Remove DivX 5.0.3 Pro Bundle.lnk
- %Program Files%\DivX\uninstal.log
- %Windows%\unvise32.exe
- %Program Files%\divx\divx pro codec\gain_trickler_3202.exe
Step 6
Buscar y eliminar estas carpetas
- %User Temp%\~vis0000
- %Program Files%\DivX
- %Program Files%\DivX\DivX Pro Codec
- %Start Menu%\Programs\DivX
- %Start Menu%\Programs\DivX\DivX Pro Codec
- %Start Menu%\Programs\DivX\DivX Player 2.0 Alpha
- %Program Files%\DivX\DivX Player 2.0 Alpha
- %Program Files%\DivX\DivX Player 2.0 Alpha\Skins
- %User Temp%\fsg_tmp
- %User Temp%\fsg_tmp\accum
- %User Temp%\fsg_tmp\accum\Trickler
Step 7
Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como ADW_GATOR.A En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.
Rellene nuestra encuesta!