BKDR_BL.3F1D5D6C
Windows 2000, Windows XP, Windows Server 2003
Threat Type:
Backdoor
Destructiveness:
No
Encrypted:
In the wild::
Yes
OVERVIEW
Elimina archivos para impedir la ejecución correcta de programas y aplicaciones.
TECHNICAL DETAILS
Instalación
Crea las carpetas siguientes:
- %User Temp%\is-5LABN.tmp
- %User Temp%\is-V7U2S.tmp
- %User Temp%\is-V7U2S.tmp\_isetup
- %Program Files%\SafeIP
- %Program Files%\SafeIP\flags
- %Start Menu%\Programs\SafeIP
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).)Técnica de inicio automático
Agrega las siguientes entradas de registro para permitir su ejecución automática cada vez que se inicia el sistema:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Run
b81ad8ae9d0103ee44c3b8a3e445b627 = "%User Temp%\iexplorer.exe .."
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Run
b81ad8ae9d0103ee44c3b8a3e445b627 = "%User Temp%\iexplorer.exe .."
Otras modificaciones del sistema
Elimina los archivos siguientes:
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\security.config.cch.300.95015
- %Windows%\Microsoft.NET\Framework\v2.0.50727\config\enterprisesec.config.cch.300.95015
- %User Profile%\v2.0.50727.42\security.config.cch.300.95031
- %Desktop%\SafeIP.pif
- %Desktop%\SafeIP.url
- %User Profile%\Quick Launch\SafeIP.pif
- %User Profile%\Quick Launch\SafeIP.url
- %Start Menu%\Programs\SafeIP\SafeIP.pif
- %Start Menu%\Programs\SafeIP\SafeIP.url
- %Start Menu%\Programs\SafeIP\SafeIP Website.pif
- %Start Menu%\Programs\SafeIP\SafeIP Website.url
- %Start Menu%\Programs\SafeIP\User Guide.pif
- %Start Menu%\Programs\SafeIP\User Guide.url
- %Start Menu%\Programs\SafeIP\Uninstall SafeIP.pif
- %Start Menu%\Programs\SafeIP\Uninstall SafeIP.url
- %User Temp%\is-V7U2S.tmp\SafeIPIns.exe
(Nota: %Windows% es la carpeta de Windows, que suele estar en C:\Windows o C:\WINNT).
. %User Profile% es la carpeta de perfil del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario} y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}).. %Desktop% es la carpeta Escritorio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Escritorio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Escritorio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Escritorio).. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).. %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).)Agrega las siguientes entradas de registro como parte de la rutina de instalación:
HKEY_CURRENT_USER\Software\WinRAR SFX
HKEY_CURRENT_USER\Software\b81ad8ae9d0103ee44c3b8a3e445b627
HKEY_CURRENT_USER\SOFTWARE\SafeIP
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\SafeIPS.exe
HKEY_CLASSES_ROOT\Wow6432Node\AppID\
SafeIPS.exe
HKEY_LOCAL_MACHINE\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
HKEY_CLASSES_ROOT\TransparentLabel.Control.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TransparentLabel.Control.1\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TransparentLabel.Control.1\Insertable
HKEY_CLASSES_ROOT\TransparentLabel.Control
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TransparentLabel.Control\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TransparentLabel.Control\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\InprocServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\Control
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\Insertable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\ToolboxBitmap32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\MiscStatus
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\MiscStatus\
1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\Version
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0\
FLAGS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0\
0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0\
0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0\
HELPDIR
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Control\SafeBoot\Network\
SafeIPS
HKEY_CLASSES_ROOT\PCProxy.DataController.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataController.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataController
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataController\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataController\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.DataTable.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTable.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataTable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTable\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTable\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.DataTableHolder.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableHolder.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataTableHolder
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableHolder\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableHolder\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.LSPLogic.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.LSPLogic.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.LSPLogic
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.LSPLogic\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.LSPLogic\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.DataTableFields.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableFields.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataTableFields
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableFields\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataTableFields\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.DataContainer.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataContainer.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataContainer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataContainer\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataContainer\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.ProxyChecks.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ProxyChecks.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.ProxyChecks
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ProxyChecks\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ProxyChecks\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.DataStatistics.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataStatistics.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.DataStatistics
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataStatistics\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.DataStatistics\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}\TypeLib
HKEY_CLASSES_ROOT\PCProxy.ReadOnlyManager.1
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ReadOnlyManager.1\CLSID
HKEY_CLASSES_ROOT\PCProxy.ReadOnlyManager
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ReadOnlyManager\CLSID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
PCProxy.ReadOnlyManager\CurVer
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}\ProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}\VersionIndependentProgID
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}\Programmable
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}\LocalServer32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0\
FLAGS
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0\
0
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0\
0\win32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0\
HELPDIR
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{23C5311E-016D-4999-BCB1-499898429D6C}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{23C5311E-016D-4999-BCB1-499898429D6C}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{23C5311E-016D-4999-BCB1-499898429D6C}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}\TypeLib
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}\ProxyStubClsid
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}\ProxyStubClsid32
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}\TypeLib
Agrega las siguientes entradas de registro:
HKEY_CURRENT_USER\Software\WinRAR SFX
C%%Windows = "%Windows%"
HKEY_CURRENT_USER\Software\b81ad8ae9d0103ee44c3b8a3e445b627
US = "@"
HKEY_CURRENT_USER\Environment
SEE_MASK_NOZONECHECKS = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: Setup Version = "5.5.3 (u)"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: App Path = "%Program Files%\SafeIP"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
InstallLocation = "%Program Files%\SafeIP"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: Icon Group = "SafeIP"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: User = "Wilbert"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: Selected Tasks = "desktopshortcut,quicklaunchicon"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Inno Setup: Language = "en"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
DisplayName = "SafeIP"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
DisplayIcon = "%Program Files%\SafeIP\SafeIP.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
UninstallString = "%Program Files%\SafeIP\unins000.exe "
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
QuietUninstallString = "%Program Files%\SafeIP\unins000.exe /SILENT"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Publisher = "SafeIP"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
URLInfoAbout = "http://www.{BLOCKED}feip.com"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
NoModify = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
NoRepair = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
InstallDate = "20140219"
HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\
Services\SharedAccess\Parameters\
FirewallPolicy\StandardProfile\AuthorizedApplications\
List
%User Temp%\iexplorer.exe = "%User Temp%\iexplorer.exe:*:Enabled:iexplorer.exe"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\InprocServer32
ThreadingModel = "Apartment"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}\TypeLib
Version = "1.0"
HKEY_CURRENT_USER\Software\SafeIP
Balloon = "1"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\SafeIPS.exe
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
InstallingUser = "YwB3AHMAMAA4AGUAeAAwADMAXAB3AGkAbABiAGUAcgB0AAAA"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
LocalService = "SafeIPS"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
ServiceParameters = "-Service"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
KomodiaParameters1 = "0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{23C5311E-016D-4999-BCB1-499898429D6C}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}\TypeLib
Version = "1.0"
HKEY_LOCAL_MACHINE\SOFTWARE\Classes\
Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}\TypeLib
Version = "1.0"
Modifica las siguientes entradas de registro:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\
RFC1156Agent\CurrentVersion\Parameters
TrapPollTimeMilliSecs = "3a98"
(Note: The default value data of the said registry entry is 3a98.)
Elimina las siguientes claves de registro:
HKEY_CURRENT_USER\Software\Microsoft\
Windows\CurrentVersion\Uninstall\
SAFEIP_is1
Rutina de infiltración
Infiltra los archivos siguientes:
- __tmp_rar_sfx_access_check_89656
- setup.exe
- SafeIP.exe
- %User Temp%\is-5LABN.tmp\SafeIP.tmp
- %User Temp%\is-V7U2S.tmp\_isetup\_shfoldr.dll
- %Program Files%\SafeIP\unins000.dat
- %Program Files%\SafeIP\is-45KKK.tmp
- %Program Files%\SafeIP\flags\is-60AEJ.tmp
- %Program Files%\SafeIP\flags\is-NDOMM.tmp
- %Program Files%\SafeIP\flags\is-37DUC.tmp
- %Program Files%\SafeIP\flags\is-6V610.tmp
- %Program Files%\SafeIP\flags\is-JFBRD.tmp
- %Program Files%\SafeIP\flags\is-1KK1L.tmp
- %Program Files%\SafeIP\flags\is-7USC5.tmp
- %Program Files%\SafeIP\flags\is-3LAP0.tmp
- %Program Files%\SafeIP\flags\is-RLIIC.tmp
- %Program Files%\SafeIP\flags\is-480FK.tmp
- %Program Files%\SafeIP\flags\is-B0GP1.tmp
- %Program Files%\SafeIP\flags\is-E7VSC.tmp
- %Program Files%\SafeIP\flags\is-RA7IB.tmp
- %Program Files%\SafeIP\flags\is-2J2QC.tmp
- %Program Files%\SafeIP\flags\is-NLR5O.tmp
- %Program Files%\SafeIP\flags\is-RVDET.tmp
- %Program Files%\SafeIP\flags\is-4IBE0.tmp
- %Program Files%\SafeIP\flags\is-MPLVK.tmp
- %Program Files%\SafeIP\flags\is-57Q71.tmp
- %Program Files%\SafeIP\flags\is-0L4OB.tmp
- %Program Files%\SafeIP\flags\is-FDCC3.tmp
- %Program Files%\SafeIP\flags\is-PNP15.tmp
- %Program Files%\SafeIP\flags\is-CS15L.tmp
- %Program Files%\SafeIP\flags\is-25U4D.tmp
- %Program Files%\SafeIP\flags\is-PES7D.tmp
- %Program Files%\SafeIP\flags\is-O1T4M.tmp
- %Program Files%\SafeIP\flags\is-0MTUB.tmp
- %Program Files%\SafeIP\flags\is-HSN2R.tmp
- %Program Files%\SafeIP\flags\is-2L6EL.tmp
- %Program Files%\SafeIP\flags\is-NMJJV.tmp
- %Program Files%\SafeIP\flags\is-LIV1R.tmp
- %Program Files%\SafeIP\is-36G7E.tmp
- %Program Files%\SafeIP\is-SD64K.tmp
- %Program Files%\SafeIP\is-PGRSQ.tmp
- %Program Files%\SafeIP\is-OSPKU.tmp
- %Program Files%\SafeIP\is-UVB9T.tmp
- %Program Files%\SafeIP\is-8IS01.tmp
- %Program Files%\SafeIP\is-ABHGS.tmp
- %Program Files%\SafeIP\is-K4FGC.tmp
- %Program Files%\SafeIP\is-R8961.tmp
- %Program Files%\SafeIP\is-DV4BL.tmp
- %Program Files%\SafeIP\is-V5Q60.tmp
- %Program Files%\SafeIP\is-7JL0S.tmp
- %Program Files%\SafeIP\is-6M7RI.tmp
- %Program Files%\SafeIP\is-FID67.tmp
- %Program Files%\SafeIP\is-VOJLR.tmp
- %Program Files%\SafeIP\is-DON77.tmp
- %Program Files%\SafeIP\is-VA0E7.tmp
- %Program Files%\SafeIP\is-SCC2G.tmp
- %User Temp%\is-V7U2S.tmp\is-BD1U8.tmp
- %Desktop%\SafeIP.lnk
- %User Profile%\Quick Launch\SafeIP.lnk
- %Start Menu%\Programs\SafeIP\SafeIP.lnk
- %Start Menu%\Programs\SafeIP\SafeIP Website.lnk
- %Start Menu%\Programs\SafeIP\User Guide.lnk
- %Start Menu%\Programs\SafeIP\Uninstall SafeIP.lnk
- %User Temp%\iexplorer.exe.tmp
- %User Temp%\SpOrder.dll
- %User Temp%\iexplorer.exe
- %User Startup%\b81ad8ae9d0103ee44c3b8a3e445b627.exe
- %System%\SafeIPs.dll
(Nota: %User Temp% es la carpeta Temp del usuario activo, que en el caso de Windows 2000, XP y Server 2003 suele estar en C:\Documents and Settings\{nombre de usuario}\Local Settings\Temp).
. %Program Files% es la carpeta Archivos de programa predeterminada, que suele estar en C:\Archivos de programa).. %Desktop% es la carpeta Escritorio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Escritorio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Escritorio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Escritorio).. %User Profile% es la carpeta de perfil del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario} y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}).. %Start Menu% es la carpeta Menú Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar ubicada en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio y en el caso de Windows 2000, XP y Server 2003 en C:\Documents and Settings\{nombre de usuario}\Menú Inicio).. %User Startup% es la carpeta Inicio del usuario activo, que en el caso de Windows 98 y ME suele estar en C:\Windows\Profiles\{nombre de usuario}\Menú Inicio\Programas\Inicio, en el caso de Windows NT en C:\WINNT\Profiles\{nombre de usuario}\Menú Inicio\Programas\Inicio y en C:\Documents and Settings\{nombre de usuario}\Menú Inicio\Programas\Inicio).. %System% es la carpeta del sistema de Windows, que en el caso de Windows 98 y ME suele estar en C:\Windows\System, en el caso de Windows NT y 2000 en C:\WINNT\System32 y en el caso de Windows XP y Server 2003 en C:\Windows\System32).)
SOLUTION
Step 1
Los usuarios de Windows ME y XP, antes de llevar a cabo cualquier exploración, deben comprobar que tienen desactivada la opción Restaurar sistema para permitir la exploración completa del equipo.
Step 2
Reiniciar en modo seguro
Step 3
Eliminar esta clave del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_CURRENT_USER\Software
- WinRAR SFX
- In HKEY_CURRENT_USER\Software
- b81ad8ae9d0103ee44c3b8a3e445b627
- In HKEY_CURRENT_USER\SOFTWARE
- SafeIP
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
- SafeIPS.exe
- In HKEY_CLASSES_ROOT\Wow6432Node\AppID
- SafeIPS.exe
- In HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Uninstall
- SAFEIP_is1
- In HKEY_CLASSES_ROOT
- TransparentLabel.Control.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TransparentLabel.Control.1
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TransparentLabel.Control.1
- Insertable
- In HKEY_CLASSES_ROOT
- TransparentLabel.Control
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TransparentLabel.Control
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TransparentLabel.Control
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- InprocServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- Control
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- Insertable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- ToolboxBitmap32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- MiscStatus
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\MiscStatus
- 1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}
- Version
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
- {B33DCDA7-6818-4AF7-8470-98867FC74277}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}
- 1.0
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0
- FLAGS
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0
- 0
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0\0
- win32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{B33DCDA7-6818-4AF7-8470-98867FC74277}\1.0
- HELPDIR
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {D0D03945-E60C-4DF1-A45E-EED11F95A624}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID
- {9DC8FA51-B596-4f77-802C-5B295919C205}
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\SafeBoot\Network
- SafeIPS
- In HKEY_CLASSES_ROOT
- PCProxy.DataController.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataController.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataController
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataController
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataController
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.DataTable.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTable.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataTable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTable
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTable
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.DataTableHolder.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableHolder.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataTableHolder
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableHolder
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableHolder
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.LSPLogic.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.LSPLogic.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.LSPLogic
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.LSPLogic
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.LSPLogic
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.DataTableFields.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableFields.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataTableFields
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableFields
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataTableFields
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {533403E2-6E21-4615-9E28-43F4E97E977B}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.DataContainer.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataContainer.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataContainer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataContainer
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataContainer
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.ProxyChecks.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ProxyChecks.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.ProxyChecks
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ProxyChecks
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ProxyChecks
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {74137531-80F7-406F-9543-7D11385FA8C8}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.DataStatistics.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataStatistics.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.DataStatistics
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataStatistics
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.DataStatistics
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {832599B2-55BF-4437-8F3E-030CF5AEB262}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- TypeLib
- In HKEY_CLASSES_ROOT
- PCProxy.ReadOnlyManager.1
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ReadOnlyManager.1
- CLSID
- In HKEY_CLASSES_ROOT
- PCProxy.ReadOnlyManager
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ReadOnlyManager
- CLSID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\PCProxy.ReadOnlyManager
- CurVer
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID
- {F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- ProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- VersionIndependentProgID
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- Programmable
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- LocalServer32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib
- {ED721A76-8160-4DA0-A18E-7FD7C4574774}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}
- 1.0
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0
- FLAGS
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0
- 0
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0\0
- win32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\TypeLib\{ED721A76-8160-4DA0-A18E-7FD7C4574774}\1.0
- HELPDIR
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {23C5311E-016D-4999-BCB1-499898429D6C}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {2C4B6DB8-6413-403B-A038-16A352CFE8B9}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {C97AF157-6A27-4F57-9D47-E2D3E4761B77}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {22511E2E-7970-414E-BC7C-28D16C4AF54D}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {5180FE16-2E09-497B-9C8B-5A6F029ECECB}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {ED0D2C81-7DB5-4599-B7C0-1033418B5672}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {46803190-228D-470E-90FE-F5E0CEA9C4F2}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {3AE76A17-C344-4A83-81CE-65EFEE41E42D}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {C1F5E799-B218-4C32-B189-3C389BA140BB}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {8FAF962C-3EDE-405E-B1D0-62B8235C6044}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {F60C9408-3110-4C98-A139-ABE1EE1111DD}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}
- TypeLib
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface
- {4C0A69B0-CE97-42B7-86FC-08280C99C74D}
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
- ProxyStubClsid
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
- ProxyStubClsid32
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}
- TypeLib
Step 4
Eliminar este valor del Registro
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
- b81ad8ae9d0103ee44c3b8a3e445b627 = "%User Temp%\iexplorer.exe .."
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run
- b81ad8ae9d0103ee44c3b8a3e445b627 = "%User Temp%\iexplorer.exe .."
- In HKEY_CURRENT_USER\Software\WinRAR SFX
- C%%Windows = "%Windows%"
- In HKEY_CURRENT_USER\Software\b81ad8ae9d0103ee44c3b8a3e445b627
- US = "@"
- In HKEY_CURRENT_USER\Environment
- SEE_MASK_NOZONECHECKS = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: Setup Version = "5.5.3 (u)"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: App Path = "%Program Files%\SafeIP"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- InstallLocation = "%Program Files%\SafeIP"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: Icon Group = "SafeIP"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: User = "Wilbert"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: Selected Tasks = "desktopshortcut,quicklaunchicon"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Inno Setup: Language = "en"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- DisplayName = "SafeIP"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- DisplayIcon = "%Program Files%\SafeIP\SafeIP.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- UninstallString = "%Program Files%\SafeIP\unins000.exe "
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- QuietUninstallString = "%Program Files%\SafeIP\unins000.exe /SILENT"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- Publisher = "SafeIP"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- URLInfoAbout = "http://www.{BLOCKED}feip.com"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- NoModify = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- NoRepair = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SAFEIP_is1
- InstallDate = "20140219"
- In HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List
- %User Temp%\iexplorer.exe = "%User Temp%\iexplorer.exe:*:Enabled:iexplorer.exe"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{7CEF2F64-717E-4BE6-A817-8B7E2BEDF86F}\InprocServer32
- ThreadingModel = "Apartment"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{BC4411BC-3AB1-488B-8CAE-0FA6CC8E9CC8}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{D0D03945-E60C-4DF1-A45E-EED11F95A624}\TypeLib
- Version = "1.0"
- In HKEY_CURRENT_USER\Software\SafeIP
- Balloon = "1"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\SafeIPS.exe
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
- InstallingUser = "YwB3AHMAMAA4AGUAeAAwADMAXAB3AGkAbABiAGUAcgB0AAAA"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
- LocalService = "SafeIPS"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
- ServiceParameters = "-Service"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\AppID\{9DC8FA51-B596-4f77-802C-5B295919C205}
- KomodiaParameters1 = "0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6EEBC7FF-67DA-4B90-9251-C2C5696E4B48}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{3E28F712-0D6C-4EE3-AC8C-8F060F5D7C33}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{DD67706E-819E-4EBD-BF8D-6D6147CC7A49}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{B1A429DB-FB06-4645-B7C0-0CC405EAD3CD}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{533403E2-6E21-4615-9E28-43F4E97E977B}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{6CE321DA-DC11-45C6-A0FC-4E8A7D978ABC}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{74137531-80F7-406F-9543-7D11385FA8C8}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{832599B2-55BF-4437-8F3E-030CF5AEB262}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\CLSID\{F62A4AF9-58B4-4FEC-89CC-D717A547D8E8}
- AppID = "{9DC8FA51-B596-4f77-802C-5B295919C205}"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{23C5311E-016D-4999-BCB1-499898429D6C}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4E9EB4D5-C929-4005-AC62-1856B1DA5A24}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2D9DB233-DC4B-4677-946C-5FA5ABCF506B}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{2C4B6DB8-6413-403B-A038-16A352CFE8B9}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C97AF157-6A27-4F57-9D47-E2D3E4761B77}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{22511E2E-7970-414E-BC7C-28D16C4AF54D}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{5180FE16-2E09-497B-9C8B-5A6F029ECECB}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{ED0D2C81-7DB5-4599-B7C0-1033418B5672}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{46803190-228D-470E-90FE-F5E0CEA9C4F2}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{A4F6E1B3-469E-46EF-A936-FBA9D5EFD2B9}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{0FCE4F01-64EC-42F1-83E1-1E08D38605D2}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{1A2A195A-A0F9-4006-AF02-3F05EEFDE792}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{3AE76A17-C344-4A83-81CE-65EFEE41E42D}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{C1F5E799-B218-4C32-B189-3C389BA140BB}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{8FAF962C-3EDE-405E-B1D0-62B8235C6044}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{F60C9408-3110-4C98-A139-ABE1EE1111DD}\TypeLib
- Version = "1.0"
- In HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Interface\{4C0A69B0-CE97-42B7-86FC-08280C99C74D}\TypeLib
- Version = "1.0"
Step 5
Restaurar este valor del Registro modificado
Importante: si modifica el Registro de Windows incorrectamente, podría hacer que el sistema funcione mal de manera irreversible. Lleve a cabo este paso solo si sabe cómo hacerlo o si puede contar con ayuda de su administrador del sistema. De lo contrario, lea este artículo de Microsoft antes de modificar el Registro del equipo.
- In HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\RFC1156Agent\CurrentVersion\Parameters
- From: TrapPollTimeMilliSecs = "3a98"
To: TrapPollTimeMilliSecs = ""3a98""
- From: TrapPollTimeMilliSecs = "3a98"
Step 6
Buscar y eliminar estos archivos
- __tmp_rar_sfx_access_check_89656
- setup.exe
- SafeIP.exe
- %User Temp%\is-5LABN.tmp\SafeIP.tmp
- %User Temp%\is-V7U2S.tmp\_isetup\_shfoldr.dll
- %Program Files%\SafeIP\unins000.dat
- %Program Files%\SafeIP\is-45KKK.tmp
- %Program Files%\SafeIP\flags\is-60AEJ.tmp
- %Program Files%\SafeIP\flags\is-NDOMM.tmp
- %Program Files%\SafeIP\flags\is-37DUC.tmp
- %Program Files%\SafeIP\flags\is-6V610.tmp
- %Program Files%\SafeIP\flags\is-JFBRD.tmp
- %Program Files%\SafeIP\flags\is-1KK1L.tmp
- %Program Files%\SafeIP\flags\is-7USC5.tmp
- %Program Files%\SafeIP\flags\is-3LAP0.tmp
- %Program Files%\SafeIP\flags\is-RLIIC.tmp
- %Program Files%\SafeIP\flags\is-480FK.tmp
- %Program Files%\SafeIP\flags\is-B0GP1.tmp
- %Program Files%\SafeIP\flags\is-E7VSC.tmp
- %Program Files%\SafeIP\flags\is-RA7IB.tmp
- %Program Files%\SafeIP\flags\is-2J2QC.tmp
- %Program Files%\SafeIP\flags\is-NLR5O.tmp
- %Program Files%\SafeIP\flags\is-RVDET.tmp
- %Program Files%\SafeIP\flags\is-4IBE0.tmp
- %Program Files%\SafeIP\flags\is-MPLVK.tmp
- %Program Files%\SafeIP\flags\is-57Q71.tmp
- %Program Files%\SafeIP\flags\is-0L4OB.tmp
- %Program Files%\SafeIP\flags\is-FDCC3.tmp
- %Program Files%\SafeIP\flags\is-PNP15.tmp
- %Program Files%\SafeIP\flags\is-CS15L.tmp
- %Program Files%\SafeIP\flags\is-25U4D.tmp
- %Program Files%\SafeIP\flags\is-PES7D.tmp
- %Program Files%\SafeIP\flags\is-O1T4M.tmp
- %Program Files%\SafeIP\flags\is-0MTUB.tmp
- %Program Files%\SafeIP\flags\is-HSN2R.tmp
- %Program Files%\SafeIP\flags\is-2L6EL.tmp
- %Program Files%\SafeIP\flags\is-NMJJV.tmp
- %Program Files%\SafeIP\flags\is-LIV1R.tmp
- %Program Files%\SafeIP\is-36G7E.tmp
- %Program Files%\SafeIP\is-SD64K.tmp
- %Program Files%\SafeIP\is-PGRSQ.tmp
- %Program Files%\SafeIP\is-OSPKU.tmp
- %Program Files%\SafeIP\is-UVB9T.tmp
- %Program Files%\SafeIP\is-8IS01.tmp
- %Program Files%\SafeIP\is-ABHGS.tmp
- %Program Files%\SafeIP\is-K4FGC.tmp
- %Program Files%\SafeIP\is-R8961.tmp
- %Program Files%\SafeIP\is-DV4BL.tmp
- %Program Files%\SafeIP\is-V5Q60.tmp
- %Program Files%\SafeIP\is-7JL0S.tmp
- %Program Files%\SafeIP\is-6M7RI.tmp
- %Program Files%\SafeIP\is-FID67.tmp
- %Program Files%\SafeIP\is-VOJLR.tmp
- %Program Files%\SafeIP\is-DON77.tmp
- %Program Files%\SafeIP\is-VA0E7.tmp
- %Program Files%\SafeIP\is-SCC2G.tmp
- %User Temp%\is-V7U2S.tmp\is-BD1U8.tmp
- %Desktop%\SafeIP.lnk
- %User Profile%\Quick Launch\SafeIP.lnk
- %Start Menu%\Programs\SafeIP\SafeIP.lnk
- %Start Menu%\Programs\SafeIP\SafeIP Website.lnk
- %Start Menu%\Programs\SafeIP\User Guide.lnk
- %Start Menu%\Programs\SafeIP\Uninstall SafeIP.lnk
- %User Temp%\iexplorer.exe.tmp
- %User Temp%\SpOrder.dll
- %User Temp%\iexplorer.exe
- %User Startup%\b81ad8ae9d0103ee44c3b8a3e445b627.exe
- %System%\SafeIPs.dll
Step 7
Buscar y eliminar estas carpetas
- %User Temp%\is-5LABN.tmp
- %User Temp%\is-V7U2S.tmp
- %User Temp%\is-V7U2S.tmp\_isetup
- %Program Files%\SafeIP
- %Program Files%\SafeIP\flags
- %Start Menu%\Programs\SafeIP
Step 8
Reinicie en modo normal y explore el equipo con su producto de Trend Micro para buscar los archivos identificados como BKDR_BL.3F1D5D6C En caso de que el producto de Trend Micro ya haya limpiado, eliminado o puesto en cuarentena los archivos detectados, no serán necesarios más pasos. Puede optar simplemente por eliminar los archivos en cuarentena. Consulte esta página de Base de conocimientos para obtener más información.
Did this description help? Tell us how we did.