OTL

OTL LOGFILE CREATED ON: 14/10/2010 02:33:44 A.M. - RUN 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Administrador\Mis documentos\Descargas
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00002C0A | Country: Argentina | Language: ESS | Date Format: dd/MM/yyyy

895,00 Mb Total Physical Memory | 270,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 68,00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 97,65 Gb Total Space | 85,15 Gb Free Space | 87,19% Space Free | Partition Type: NTFS
Drive D: | 55,72 Gb Total Space | 55,60 Gb Free Space | 99,78% Space Free | Partition Type: NTFS

Computer Name: COLOSSUS | User Name: Administrador | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Processes (SafeList) ==========[/color]

PRC - C:\Documents and Settings\Administrador\Mis documentos\Descargas\OTL.exe (OldTimer Tools)
PRC - C:\Archivos de programa\PC Tools Security\pctsGui.exe (PC Tools)
PRC - C:\Archivos de programa\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\Archivos de programa\PC Tools Security\pctsSvc.exe (PC Tools)
PRC - C:\Archivos de programa\PC Tools Security\TFEngine\TFService.exe (PC Tools)
PRC - C:\Archivos de programa\PC Tools Security\pctsAuxs.exe (PC Tools)
PRC - C:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\Archivos de programa\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)


[color=#E56717]========== Modules (SafeList) ==========[/color]

MOD - C:\Documents and Settings\Administrador\Mis documentos\Descargas\OTL.exe (OldTimer Tools)
MOD - C:\Archivos de programa\PC Tools Security\TFEngine\TFWAH.dll (PC Tools)
MOD - C:\Archivos de programa\PC Tools Security\PCTGMhk.dll (PC Tools)
MOD - C:\WINDOWS\system32\msscript.ocx (Microsoft Corporation)


[color=#E56717]========== Win32 Services (SafeList) ==========[/color]

SRV - (HidServ) -- C:\WINDOWS\System32\hidserv.dll File not found
SRV - (gusvc) -- C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe File not found
SRV - (TuneUp.Defrag) -- C:\Archivos de programa\TuneUp Utilities 2010\TuneUpDefragService.exe (TuneUp Software)
SRV - (UPHClean) -- C:\Archivos de programa\UPHClean\uphclean.exe (Windows (R) Codename Longhorn DDK provider)
SRV - (sdCoreService) -- C:\Archivos de programa\PC Tools Security\pctsSvc.exe (PC Tools)
SRV - (ThreatFire) -- C:\Archivos de programa\PC Tools Security\TFEngine\TFService.exe (PC Tools)
SRV - (MatSvc) -- C:\Archivos de programa\Microsoft Fix it Center\Matsvc.exe (Microsoft Corporation)
SRV - (sdAuxService) -- C:\Archivos de programa\PC Tools Security\pctsAuxs.exe (PC Tools)
SRV - (TuneUp.UtilitiesSvc) -- C:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesService32.exe (TuneUp Software)
SRV - (UxTuneUp) -- C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)


[color=#E56717]========== Driver Services (SafeList) ==========[/color]

DRV - (cpuidlep) -- C:\WINDOWS\System32\drivers\cpuidlep.sys ()
DRV - (sptd) -- C:\WINDOWS\System32\Drivers\sptd.sys ()
DRV - (IntcAzAudAddService) Service for Realtek HD Audio (WDM) -- C:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek Semiconductor Corp.)
DRV - (PCTFW-PacketFilter) -- C:\WINDOWS\system32\drivers\pctNdis-PacketFilter.sys (PC Tools)
DRV - (PCTAppEvent) -- C:\WINDOWS\system32\drivers\PCTAppEvent.sys (PC Tools)
DRV - (pctgntdi) -- C:\WINDOWS\system32\drivers\pctgntdi.sys (PC Tools)
DRV - (pctplfw) -- C:\WINDOWS\system32\drivers\pctplfw.sys (PC Tools)
DRV - (pctplsg) -- C:\WINDOWS\system32\drivers\pctplsg.sys (PC Tools)
DRV - (TfSysMon) -- C:\WINDOWS\system32\drivers\TfSysMon.sys (PC Tools)
DRV - (TfFsMon) -- C:\WINDOWS\system32\drivers\TfFsMon.sys (PC Tools)
DRV - (TfNetMon) -- C:\WINDOWS\system32\drivers\TfNetMon.sys (PC Tools)
DRV - (PCTCore) -- C:\WINDOWS\system32\drivers\PCTCore.sys (PC Tools)
DRV - (pctNdisMP) -- C:\WINDOWS\system32\drivers\pctNdis.sys (PC Tools)
DRV - (pctNdis) -- C:\WINDOWS\system32\drivers\pctNdis.sys (PC Tools)
DRV - (pctEFA) -- C:\WINDOWS\system32\drivers\pctEFA.sys (PC Tools)
DRV - (pctDS) -- C:\WINDOWS\system32\drivers\pctDS.sys (PC Tools)
DRV - (nv) -- C:\WINDOWS\system32\drivers\nv4_mini.sys (NVIDIA Corporation)
DRV - (LUsbFilt) -- C:\WINDOWS\system32\drivers\LUsbFilt.sys (Logitech, Inc.)
DRV - (LMouKE) -- C:\WINDOWS\system32\drivers\LMouKE.Sys (Logitech, Inc.)
DRV - (LMouFilt) -- C:\WINDOWS\system32\drivers\LMouFilt.Sys (Logitech, Inc.)
DRV - (LHidFilt) -- C:\WINDOWS\system32\drivers\LHidFilt.Sys (Logitech, Inc.)
DRV - (LBeepKE) -- C:\WINDOWS\system32\drivers\LBeepKE.sys (Logitech, Inc.)
DRV - (L8042mou) -- C:\WINDOWS\system32\drivers\L8042mou.Sys (Logitech, Inc.)
DRV - (L8042Kbd) -- C:\WINDOWS\system32\drivers\L8042Kbd.sys (Logitech, Inc.)
DRV - (Monfilt) -- C:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology Ltd.)
DRV - (Ambfilt) -- C:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (TuneUpUtilitiesDrv) -- C:\Archivos de programa\TuneUp Utilities 2010\TuneUpUtilitiesDriver32.sys (TuneUp Software)
DRV - (nvnetbus) -- C:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation)
DRV - (NVENETFD) -- C:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation)
DRV - (nvgts) -- C:\WINDOWS\system32\DRIVERS\nvgts.sys (NVIDIA Corporation)
DRV - (HDAudBus) -- C:\WINDOWS\system32\drivers\hdaudbus.sys (Windows (R) Server 2003 DDK provider)
DRV - (NVATABUS) -- C:\WINDOWS\System32\drivers\NVATABUS.sys (NVIDIA Corporation)
DRV - (AmdK8) -- C:\WINDOWS\system32\drivers\AmdK8.sys (Advanced Micro Devices)
DRV - (PQNTDrv) -- C:\WINDOWS\System32\drivers\PQNTDRV.sys (PowerQuest Corporation)


[color=#E56717]========== Standard Registry (SafeList) ==========[/color]


[color=#E56717]========== Internet Explorer ==========[/color]

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = about:blank
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, =

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultName = Google
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SearchMigratedDefaultURL = http://www.google.com/search?q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7&rlz=1I7AMSA
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,StartPage = about:blank
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search, =
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search,Default_Search_URL = http://www.google.com/ie
IE - HKCU\Software\Microsoft\Internet Explorer\SearchURL\g, = http://www.google.com/search?q=%s
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]

FF - prefs.js..browser.startup.homepage: "http://www.smokey-services.eu/forums/index.php/topic,27494.0.html"
FF - prefs.js..extensions.enabledItems: {73a6fe31-595d-460b-a920-fcc0f8843232}:2.0.3.3
FF - prefs.js..extensions.enabledItems: {37fa1426-b82d-11db-8314-0800200c9a66}:2.6
FF - prefs.js..extensions.enabledItems: {0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}:2.0.5
FF - prefs.js..extensions.enabledItems: {d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}:1.2.2
FF - prefs.js..extensions.enabledItems: {4BBDD651-70CF-4821-84F8-2B918CF89CA3}:6.3.3.2


FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2010/10/14 01:18:45 | 000,000,000 | ---D | M]
FF - HKLM\software\mozilla\Mozilla Firefox 3.6.10\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins [2010/10/14 01:18:37 | 000,000,000 | ---D | M]

[2010/10/12 19:42:36 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Extensions
[2010/10/14 00:49:21 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions
[2010/10/13 03:11:23 | 000,000,000 | ---D | M] (Resurrect Pages) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{0c8fbd76-bdeb-4c52-9b24-d587ce7b9dc3}
[2010/10/12 22:07:05 | 000,000,000 | ---D | M] (WebMail Notifier) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{37fa1426-b82d-11db-8314-0800200c9a66}
[2010/10/13 08:46:06 | 000,000,000 | ---D | M] (Flashblock) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{3d7eb24f-2740-49df-8937-200b1cc08f8a}
[2010/10/13 00:43:09 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{4776510a-a1f4-41f3-a3c8-35b474ecef23}
[2010/10/13 19:13:47 | 000,000,000 | ---D | M] (FEBE) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{4BBDD651-70CF-4821-84F8-2B918CF89CA3}
[2010/10/13 20:12:36 | 000,000,000 | ---D | M] (NoScript) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}
[2010/10/13 20:12:36 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}-trash
[2010/10/13 07:22:19 | 000,000,000 | ---D | M] (iMacros for Firefox) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{81BF1D23-5F17-408D-AC6B-BD6DF7CAF670}
[2010/10/13 19:56:12 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{cb84136f-9c44-433a-9048-c5cd9df1dc16}-trash
[2010/10/13 08:46:06 | 000,000,000 | ---D | M] (Adblock Plus) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}
[2010/10/13 07:22:21 | 000,000,000 | ---D | M] (Greasemonkey) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\extensions\{e4a8a97b-f2ed-450b-b12d-ee082ba24781}
[2010/10/13 19:25:22 | 000,002,689 | ---- | M] () -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\vy4sflgx.default\searchplugins\search-defender.xml
[2010/10/14 01:18:38 | 000,000,000 | ---D | M] -- C:\Archivos de programa\Mozilla Firefox\extensions
[2010/10/13 00:35:32 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
[2010/10/12 19:51:13 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
[2010/10/12 19:51:05 | 000,423,656 | ---- | M] (Oracle) -- C:\Archivos de programa\Mozilla Firefox\plugins\npdeployJava1.dll
[2010/09/14 18:13:13 | 000,003,996 | ---- | M] () -- C:\Archivos de programa\Mozilla Firefox\searchplugins\drae.xml
[2010/09/14 18:13:13 | 000,000,751 | ---- | M] () -- C:\Archivos de programa\Mozilla Firefox\searchplugins\eBay-es.xml
[2010/09/14 18:13:13 | 000,001,178 | ---- | M] () -- C:\Archivos de programa\Mozilla Firefox\searchplugins\wikipedia-es.xml
[2010/09/14 18:13:13 | 000,001,102 | ---- | M] () -- C:\Archivos de programa\Mozilla Firefox\searchplugins\yahoo-es.xml

O1 HOSTS File: ([2010/10/13 07:24:53 | 000,000,967 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Spybot-S&D IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Archivos de programa\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O4 - HKLM..\Run: [ISTray] C:\Archivos de programa\PC Tools Security\pctsGui.exe (PC Tools)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.DLL (NVIDIA Corporation)
O4 - HKCU..\Run: [DAEMON Tools Lite] C:\Archivos de programa\DAEMON Tools Lite\daemon.exe (DT Soft Ltd)
O4 - HKCU..\Run: [MzCpuAccelerator] C:\Program Files\Mz_CpuAcc\MzCpuAccelerator.exe (Mz Ultimate Tools)
O4 - Startup: C:\Documents and Settings\Administrador\Menú Inicio\Programas\Inicio\ERUNT AutoBackup.lnk = C:\Archivos de programa\ERUNT\AUTOBACK.EXE ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Infodelivery present
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Archivos de programa\Archivos comunes\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Archivos de programa\Archivos comunes\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Archivos de programa\Archivos comunes\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Archivos de programa\Archivos comunes\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1287018971843 (WUWebControl Class)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab (Java Plug-in 1.6.0_03)
O16 - DPF: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_20-windows-i586.cab (Java Plug-in 1.6.0_20)
O16 - DPF: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_21-windows-i586.cab (Java Plug-in 1.6.0_21)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/10/12 16:17:51 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - C:\WINDOWS\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: UxTuneUp - C:\WINDOWS\system32\uxtuneup.dll (TuneUp Software)
NetSvcs: WmdmPmSp - File not found

MsConfig - Services: "idsvc"
MsConfig - Services: "WMPNetworkSvc"
MsConfig - Services: "BITS"
MsConfig - Services: "srservice"
MsConfig - Services: "CiSvc"
MsConfig - Services: "JavaQuickStarterService"
MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 2
MsConfig - State: "startup" - 0
Unable to start service SrService!

[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/color]

[2010/10/14 02:00:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2010/10/14 01:59:53 | 000,000,000 | ---D | C] -- C:\Archivos de programa\ERUNT
[2010/10/14 01:04:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\CometNetwork
[2010/10/14 01:04:44 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\CometNetwork
[2010/10/14 01:03:43 | 000,000,000 | ---D | C] -- C:\Archivos de programa\CometBird
[2010/10/14 00:36:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\NtmsData
[2010/10/14 00:28:20 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrador\Recent
[2010/10/14 00:22:30 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Glary Utilities
[2010/10/14 00:08:31 | 001,706,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\gdiplus.dll
[2010/10/14 00:08:31 | 000,544,768 | ---- | C] (Stardock Corporation) -- C:\WINDOWS\System32\wbocx.ocx
[2010/10/14 00:08:31 | 000,258,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\unicows.dll
[2010/10/14 00:08:31 | 000,056,496 | ---- | C] (Stardock.Net, Inc) -- C:\WINDOWS\System32\wbhelp2.dll
[2010/10/14 00:08:31 | 000,033,968 | ---- | C] (Neil Banfield) -- C:\WINDOWS\System32\anim.dll
[2010/10/14 00:08:31 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\W95INF32.DLL
[2010/10/14 00:08:31 | 000,002,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\W95INF16.DLL
[2010/10/14 00:08:30 | 000,000,000 | ---D | C] -- C:\Archivos de programa\WinUtilities
[2010/10/14 00:07:17 | 000,000,000 | ---D | C] -- C:\Archivos de programa\fitW (fine tuning of Windows)
[2010/10/14 00:05:07 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Glary Ut. Pro 2.26.0.956
[2010/10/14 00:04:52 | 000,000,000 | ---D | C] -- C:\Archivos de programa\NetScream.1.8.30.2010.Portable
[2010/10/14 00:04:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Windows Doctor 2.5.0_Portable
[2010/10/13 23:56:30 | 000,000,000 | ---D | C] -- C:\RegUnlocker Backups
[2010/10/13 23:52:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot2
[2010/10/13 23:46:01 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Mz Ultimate Tools
[2010/10/13 23:39:34 | 000,000,000 | ---D | C] -- C:\Program Files
[2010/10/13 23:30:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Comodo
[2010/10/13 23:30:08 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Comodo
[2010/10/13 23:13:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Chromium
[2010/10/13 23:13:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\SRWare Iron
[2010/10/13 22:17:23 | 000,015,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll.mui
[2010/10/13 22:11:54 | 000,000,000 | ---D | C] -- C:\Archivos de programa\UPHClean
[2010/10/13 22:08:33 | 000,000,000 | ---D | C] -- C:\Archivos de programa\MSXML 4.0
[2010/10/13 22:02:21 | 000,474,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shlwapi.dll
[2010/10/13 21:27:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\FixItCenter
[2010/10/13 21:16:12 | 000,000,000 | ---D | C] -- C:\WINDOWS\MATS
[2010/10/13 21:16:11 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Microsoft Fix it Center
[2010/10/13 21:11:37 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\windowspowershell
[2010/10/13 19:18:23 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Spam Monitor
[2010/10/13 19:00:30 | 000,656,320 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctEFA.sys
[2010/10/13 19:00:30 | 000,338,880 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctDS.sys
[2010/10/13 19:00:29 | 000,247,824 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctgntdi.sys
[2010/10/13 19:00:27 | 000,237,632 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTCore.sys
[2010/10/13 19:00:27 | 000,159,296 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\PCTAppEvent.sys
[2010/10/13 19:00:07 | 000,068,880 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfSysMon.sys
[2010/10/13 19:00:07 | 000,051,984 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfFsMon.sys
[2010/10/13 19:00:07 | 000,033,552 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\TfNetMon.sys
[2010/10/13 19:00:04 | 000,123,968 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctplfw.sys
[2010/10/13 19:00:04 | 000,087,400 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctNdis-PacketFilter.sys
[2010/10/13 19:00:04 | 000,070,536 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctplsg.sys
[2010/10/13 19:00:04 | 000,056,536 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctNdis.sys
[2010/10/13 19:00:04 | 000,031,960 | ---- | C] (PC Tools) -- C:\WINDOWS\System32\drivers\pctNdis-DNS.sys
[2010/10/13 18:59:48 | 000,000,000 | ---D | C] -- C:\Archivos de programa\PC Tools Security
[2010/10/13 18:59:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\PC Tools
[2010/10/13 18:59:48 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\PC Tools
[2010/10/13 18:07:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\URSoft
[2010/10/13 18:07:44 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Your Uninstaller 2008
[2010/10/13 07:59:38 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Media Player Classic - Home Cinema
[2010/10/13 06:55:55 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\httpext.dll
[2010/10/13 06:55:32 | 000,585,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2010/10/13 06:54:18 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieencode.dll
[2010/10/13 06:53:39 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\schannel.dll
[2010/10/13 06:51:33 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\quartz.dll
[2010/10/13 06:51:14 | 000,354,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\winhttp.dll
[2010/10/13 06:50:56 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\secur32.dll
[2010/10/13 06:50:55 | 001,042,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\kernel32.dll
[2010/10/13 06:49:46 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ulib.dll
[2010/10/13 06:49:46 | 000,133,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\exfat.sys
[2010/10/13 06:49:46 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ifsutil.dll
[2010/10/13 06:49:46 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\uexfat.dll
[2010/10/13 06:49:46 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\uexfat.dll
[2010/10/13 06:49:46 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fmifs.dll
[2010/10/13 06:49:46 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\fs_rec.sys
[2010/10/13 06:49:23 | 001,106,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml3.dll
[2010/10/13 06:48:37 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtctm.dll
[2010/10/13 06:48:37 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtcuiu.dll
[2010/10/13 06:48:37 | 000,066,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxclu.dll
[2010/10/13 06:48:36 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mtxoci.dll
[2010/10/13 06:48:36 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msdtclog.dll
[2010/10/13 06:46:49 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msadce.dll
[2010/10/13 06:46:30 | 000,331,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ipnathlp.dll
[2010/10/13 06:45:27 | 000,407,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netlogon.dll
[2010/10/13 06:45:27 | 000,177,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32time.dll
[2010/10/13 06:45:27 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wkssvc.dll
[2010/10/13 06:45:27 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msv1_0.dll
[2010/10/13 06:45:27 | 000,113,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dsuiext.dll
[2010/10/13 06:45:27 | 000,092,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\policman.dll
[2010/10/13 06:45:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntdsapi.dll
[2010/10/13 06:45:27 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\adsmsext.dll
[2010/10/13 06:45:27 | 000,054,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\w32tm.exe
[2010/10/13 06:45:26 | 000,733,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\lsasrv.dll
[2010/10/13 06:45:26 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\localspl.dll
[2010/10/13 06:45:26 | 000,202,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gptext.dll
[2010/10/13 06:44:44 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cdrom.sys
[2010/10/13 06:44:23 | 000,337,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\netapi32.dll
[2010/10/13 06:43:55 | 000,455,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2010/10/13 06:43:31 | 000,333,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\srv.sys
[2010/10/13 06:42:55 | 002,147,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2010/10/13 06:42:54 | 002,191,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2010/10/13 06:42:54 | 002,068,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2010/10/13 06:42:54 | 002,026,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2010/10/13 06:42:22 | 000,138,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\afd.sys
[2010/10/13 06:41:45 | 000,286,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\gdi32.dll
[2010/10/13 06:41:02 | 001,847,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32k.sys
[2010/10/13 06:40:15 | 000,000,000 | ---D | C] -- C:\WINDOWS\ie7updates
[2010/10/13 06:39:05 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\win32spl.dll
[2010/10/13 06:39:05 | 000,074,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msw3prt.dll
[2010/10/13 06:38:48 | 000,074,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mscms.dll
[2010/10/13 06:38:28 | 000,512,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\jscript.dll
[2010/10/13 06:38:28 | 000,430,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\vbscript.dll
[2010/10/13 06:38:28 | 000,180,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scrobj.dll
[2010/10/13 06:38:28 | 000,172,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\scrrun.dll
[2010/10/13 06:38:28 | 000,155,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wscript.exe
[2010/10/13 06:38:28 | 000,135,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\cscript.exe
[2010/10/13 06:38:28 | 000,090,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wshext.dll
[2010/10/13 06:38:08 | 000,272,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\bthport.sys
[2010/10/13 06:37:50 | 000,691,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\inetcomm.dll
[2010/10/13 06:37:31 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\es.dll
[2010/10/13 06:37:10 | 000,203,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\rmcast.sys
[2010/10/13 06:32:35 | 008,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\shell32.dll
[2010/10/13 06:15:45 | 000,000,000 | ---D | C] -- C:\Archivos de programa\GSpot
[2010/10/13 06:10:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Mis vídeos
[2010/10/13 06:10:39 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Mis fotos
[2010/10/13 06:01:46 | 001,445,888 | ---- | C] (Option^Explicit Software Solutions) -- C:\Documents and Settings\Administrador\Mis documentos\WinsockxpFix.exe
[2010/10/13 06:01:42 | 000,102,457 | ---- | C] (Sysinternals) -- C:\Documents and Settings\Administrador\Mis documentos\pagedfrg.exe
[2010/10/13 06:01:42 | 000,022,016 | ---- | C] (Gibson Research Corp.) -- C:\Documents and Settings\Administrador\Mis documentos\ShootTheMessenger.exe
[2010/10/13 05:58:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Bajados Internet
[2010/10/13 05:46:45 | 000,000,000 | ---D | C] -- C:\WINDOWS\XSxS
[2010/10/13 05:14:25 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2010/10/13 05:07:43 | 001,307,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6.dll
[2010/10/13 05:07:43 | 000,103,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\dpcdll.dll
[2010/10/13 05:07:43 | 000,090,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msxml6r.dll
[2010/10/13 05:07:43 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Messenger
[2010/10/13 05:07:42 | 000,046,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\irbus.sys
[2010/10/13 05:07:42 | 000,010,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\smtpapi.dll
[2010/10/13 05:07:42 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwnh.dll
[2010/10/13 05:07:42 | 000,009,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsdupd.exe
[2010/10/13 05:07:40 | 001,888,992 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3duag.dll
[2010/10/13 05:07:40 | 000,870,784 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ati3d1ag.dll
[2010/10/13 05:07:40 | 000,516,768 | ---- | C] (ATI Technologies Inc. ) -- C:\WINDOWS\System32\ativvaxx.dll
[2010/10/13 05:07:40 | 000,377,984 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvaa.dll
[2010/10/13 05:07:40 | 000,233,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\azroles.dll
[2010/10/13 05:07:40 | 000,229,376 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2cqag.dll
[2010/10/13 05:07:40 | 000,201,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ati2dvag.dll
[2010/10/13 05:07:40 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\aaclient.dll
[2010/10/13 05:07:40 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\blastcln.exe
[2010/10/13 05:07:40 | 000,059,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3cfg.dll
[2010/10/13 05:07:40 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3msm.dll
[2010/10/13 05:07:40 | 000,048,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dhcpqec.dll
[2010/10/13 05:07:40 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3gpclnt.dll
[2010/10/13 05:07:40 | 000,039,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dimsroam.dll
[2010/10/13 05:07:40 | 000,032,768 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativtmxx.dll
[2010/10/13 05:07:40 | 000,026,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3api.dll
[2010/10/13 05:07:40 | 000,023,040 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativmvxx.ax
[2010/10/13 05:07:40 | 000,009,728 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\ativdaxx.ax
[2010/10/13 05:07:40 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3dlg.dll
[2010/10/13 05:07:40 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx4.dll
[2010/10/13 05:07:39 | 000,651,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dot3ui.dll
[2010/10/13 05:07:39 | 000,184,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapp3hst.dll
[2010/10/13 05:07:39 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapphost.dll
[2010/10/13 05:07:39 | 000,126,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappcfg.dll
[2010/10/13 05:07:39 | 000,094,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappgnui.dll
[2010/10/13 05:07:39 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapqec.dll
[2010/10/13 05:07:39 | 000,040,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eappprxy.dll
[2010/10/13 05:07:39 | 000,032,285 | ---- | C] (Conexant Systems, Inc.) -- C:\WINDOWS\System32\hsfcisp2.dll
[2010/10/13 05:07:39 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\eapolqec.dll
[2010/10/13 05:07:38 | 000,397,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcex.dll
[2010/10/13 05:07:38 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\microsoft.managementconsole.dll
[2010/10/13 05:07:38 | 000,155,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mssha.dll
[2010/10/13 05:07:38 | 000,106,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcfxcommon.dll
[2010/10/13 05:07:38 | 000,086,016 | ---- | C] (Conexant) -- C:\WINDOWS\System32\mdmxsdk.dll
[2010/10/13 05:07:38 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msshavmsg.dll
[2010/10/13 05:07:38 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\l2gpstore.dll
[2010/10/13 05:07:38 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmcperf.exe
[2010/10/13 05:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpash.dll
[2010/10/13 05:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdnepr.dll
[2010/10/13 05:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdiultn.dll
[2010/10/13 05:07:38 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbhc.dll
[2010/10/13 05:07:37 | 001,737,856 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\mtxparhd.dll
[2010/10/13 05:07:37 | 000,397,056 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\s3gnb.dll
[2010/10/13 05:07:37 | 000,313,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pgraph.dll
[2010/10/13 05:07:37 | 000,290,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rhttpaa.dll
[2010/10/13 05:07:37 | 000,286,792 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slextspk.dll
[2010/10/13 05:07:37 | 000,200,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napmontr.dll
[2010/10/13 05:07:37 | 000,188,508 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slgen.dll
[2010/10/13 05:07:37 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napstat.exe
[2010/10/13 05:07:37 | 000,153,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2p.dll
[2010/10/13 05:07:37 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qagent.dll
[2010/10/13 05:07:37 | 000,144,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\onex.dll
[2010/10/13 05:07:37 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pnetsh.dll
[2010/10/13 05:07:37 | 000,105,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\p2pgasvc.dll
[2010/10/13 05:07:37 | 000,076,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qutil.dll
[2010/10/13 05:07:37 | 000,073,832 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slcoinst.dll
[2010/10/13 05:07:37 | 000,073,796 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slserv.exe
[2010/10/13 05:07:37 | 000,062,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qcliprov.dll
[2010/10/13 05:07:37 | 000,061,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rasqec.dll
[2010/10/13 05:07:37 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\slrundll.exe
[2010/10/13 05:07:37 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\setupn.exe
[2010/10/13 05:07:37 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\napipsec.dll
[2010/10/13 05:07:36 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wlanapi.dll
[2010/10/13 05:07:36 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsgqec.dll
[2010/10/13 05:07:36 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\vidcap.ax
[2010/10/13 05:07:35 | 000,032,866 | ---- | C] (Smart Link) -- C:\WINDOWS\slrundll.exe
[2010/10/13 05:07:34 | 000,000,000 | ---D | C] -- C:\Archivos de programa\msn
[2010/10/13 05:07:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\l2schemas
[2010/10/13 05:07:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\es
[2010/10/13 05:07:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\bits
[2010/10/13 05:07:08 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wscui.cpl
[2010/10/13 05:07:08 | 000,148,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wscui.cpl
[2010/10/13 05:06:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\ServicePackFiles
[2010/10/13 05:04:57 | 000,063,663 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2010/10/13 05:04:57 | 000,056,623 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1btxx.sys
[2010/10/13 05:04:57 | 000,043,008 | ---- | C] (Advanced Micro Devices, Inc.) -- C:\WINDOWS\System32\drivers\amdagp.sys
[2010/10/13 05:04:57 | 000,030,671 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1raxx.sys
[2010/10/13 05:04:57 | 000,026,367 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1snxx.sys
[2010/10/13 05:04:57 | 000,021,343 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2010/10/13 05:04:57 | 000,012,047 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2010/10/13 05:04:57 | 000,011,615 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2010/10/13 05:04:57 | 000,004,255 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv01nt5.dll
[2010/10/13 05:04:57 | 000,003,967 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv02nt5.dll
[2010/10/13 05:04:57 | 000,003,775 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv11nt5.dll
[2010/10/13 05:04:57 | 000,003,711 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv09nt5.dll
[2010/10/13 05:04:57 | 000,003,647 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv07nt5.dll
[2010/10/13 05:04:57 | 000,003,615 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv05nt5.dll
[2010/10/13 05:04:57 | 000,003,135 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\adv08nt5.dll
[2010/10/13 05:04:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\network diagnostic
[2010/10/13 05:04:56 | 000,701,440 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtag.sys
[2010/10/13 05:04:56 | 000,327,168 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2010/10/13 05:04:56 | 000,104,960 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinrvxx.sys
[2010/10/13 05:04:56 | 000,073,216 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atintuxx.sys
[2010/10/13 05:04:56 | 000,063,488 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxsxx.sys
[2010/10/13 05:04:56 | 000,057,856 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinbtxx.sys
[2010/10/13 05:04:56 | 000,052,224 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinraxx.sys
[2010/10/13 05:04:56 | 000,036,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\bthprint.sys
[2010/10/13 05:04:56 | 000,036,463 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2010/10/13 05:04:56 | 000,034,735 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2010/10/13 05:04:56 | 000,031,744 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinxbxx.sys
[2010/10/13 05:04:56 | 000,029,455 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2010/10/13 05:04:56 | 000,028,672 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinsnxx.sys
[2010/10/13 05:04:56 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv04nt5.dll
[2010/10/13 05:04:56 | 000,021,183 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv01nt5.dll
[2010/10/13 05:04:56 | 000,017,279 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv10nt5.dll
[2010/10/13 05:04:56 | 000,015,423 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2010/10/13 05:04:56 | 000,014,336 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinpdxx.sys
[2010/10/13 05:04:56 | 000,014,143 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv06nt5.dll
[2010/10/13 05:04:56 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinttxx.sys
[2010/10/13 05:04:56 | 000,013,824 | ---- | C] (ATI Technologies Inc.) -- C:\WINDOWS\System32\drivers\atinmdxx.sys
[2010/10/13 05:04:56 | 000,011,359 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\atv02nt5.dll
[2010/10/13 05:04:55 | 001,309,184 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlstrm.sys
[2010/10/13 05:04:55 | 000,452,736 | ---- | C] (Matrox Graphics Inc.) -- C:\WINDOWS\System32\drivers\mtxparhm.sys
[2010/10/13 05:04:55 | 000,180,360 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2010/10/13 05:04:55 | 000,166,912 | ---- | C] (S3 Graphics, Inc.) -- C:\WINDOWS\System32\drivers\s3gnbm.sys
[2010/10/13 05:04:55 | 000,126,686 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2010/10/13 05:04:55 | 000,030,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\rndismpx.sys
[2010/10/13 05:04:55 | 000,013,776 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\recagent.sys
[2010/10/13 05:04:55 | 000,012,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\mutohpen.sys
[2010/10/13 05:04:54 | 000,404,990 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slntamr.sys
[2010/10/13 05:04:54 | 000,129,535 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnt7554.sys
[2010/10/13 05:04:54 | 000,095,424 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slnthal.sys
[2010/10/13 05:04:54 | 000,040,960 | ---- | C] (Silicon Integrated Systems Corporation) -- C:\WINDOWS\System32\drivers\sisagp.sys
[2010/10/13 05:04:54 | 000,025,471 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv10nt.sys
[2010/10/13 05:04:54 | 000,022,271 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\watv06nt.sys
[2010/10/13 05:04:54 | 000,013,240 | ---- | C] (Smart Link) -- C:\WINDOWS\System32\drivers\slwdmsup.sys
[2010/10/13 05:04:54 | 000,011,935 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv11nt.sys
[2010/10/13 05:04:54 | 000,011,871 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv09nt.sys
[2010/10/13 05:04:54 | 000,011,807 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv07nt.sys
[2010/10/13 05:04:54 | 000,011,325 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\vchnt5.dll
[2010/10/13 05:04:54 | 000,011,295 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\wadv08nt.sys
[2010/10/13 05:04:54 | 000,005,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\smbali.sys
[2010/10/13 05:04:54 | 000,003,901 | ---- | C] (Intel(R) Corporation) -- C:\WINDOWS\System32\drivers\siint5.dll
[2010/10/13 05:01:34 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstall$
[2010/10/13 04:39:52 | 000,000,000 | ---D | C] -- C:\Archivos de programa\xerox
[2010/10/13 04:39:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\xircom
[2010/10/13 04:39:50 | 000,000,000 | ---D | C] -- C:\Archivos de programa\microsoft frontpage
[2010/10/13 04:17:45 | 000,609,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\COMCTL32.OCX
[2010/10/13 04:15:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Auslogics
[2010/10/13 04:14:58 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Auslogics
[2010/10/13 04:11:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\pss
[2010/10/13 03:28:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Datos de programa\Notepad++
[2010/10/13 03:23:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Google
[2010/10/13 02:45:49 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Downloads
[2010/10/13 02:45:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\uTorrent
[2010/10/13 01:12:06 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Mis archivos recibidos
[2010/10/13 00:40:31 | 000,000,000 | -H-D | C] -- C:\Archivos de programa\Uninstall Information
[2010/10/13 00:40:20 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\foobar2000
[2010/10/13 00:39:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Gretech
[2010/10/13 00:39:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\GomEncoder
[2010/10/13 00:39:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\GRETECH
[2010/10/13 00:39:02 | 000,000,000 | ---D | C] -- C:\Archivos de programa\foobar2000
[2010/10/13 00:36:42 | 000,000,000 | ---D | C] -- C:\Archivos de programa\GRETECH
[2010/10/13 00:35:30 | 000,153,376 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javaws.exe
[2010/10/13 00:35:30 | 000,145,184 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javaw.exe
[2010/10/13 00:35:30 | 000,145,184 | ---- | C] (Oracle) -- C:\WINDOWS\System32\java.exe
[2010/10/13 00:27:42 | 000,000,000 | ---D | C] -- C:\WINDOWS\Sun
[2010/10/13 00:01:15 | 000,000,000 | ---D | C] -- C:\Archivos de programa\MessengerPlus! 3
[2010/10/12 23:43:58 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -- C:\WINDOWS\vncutil.exe
[2010/10/12 23:43:56 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- C:\WINDOWS\RtkAudioService.exe
[2010/10/12 23:43:56 | 000,054,888 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RtkCoInstXP.dll
[2010/10/12 23:43:55 | 001,395,800 | ---- | C] (Creative Technology Ltd.) -- C:\WINDOWS\System32\drivers\Monfilt.sys
[2010/10/12 23:43:53 | 001,691,480 | ---- | C] (Creative) -- C:\WINDOWS\System32\drivers\Ambfilt.sys
[2010/10/12 23:43:52 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Realtek
[2010/10/12 23:43:50 | 001,251,944 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlExUpd.dll
[2010/10/12 23:28:34 | 000,701,440 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\cohelper.dll
[2010/10/12 23:28:31 | 000,485,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvunrm.exe
[2010/10/12 22:09:10 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Leadertech
[2010/10/12 22:08:42 | 000,016,400 | ---- | C] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LNonPnP.sys
[2010/10/12 22:08:39 | 000,016,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsgXP_2k3.dll
[2010/10/12 22:08:16 | 000,010,448 | ---- | C] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LBeepKE.sys
[2010/10/12 22:08:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Documentos\LogiShrd
[2010/10/12 22:07:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Logishrd
[2010/10/12 22:07:22 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\LogiShrd
[2010/10/12 22:06:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Logitech
[2010/10/12 22:06:56 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Logishrd
[2010/10/12 22:06:17 | 000,000,000 | ---D | C] -- C:\Archivos de programa\MSN Messenger
[2010/10/12 20:23:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\NVIDIA Corporation
[2010/10/12 20:22:46 | 000,000,000 | ---D | C] -- C:\Archivos de programa\NVIDIA Corporation
[2010/10/12 20:22:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ReinstallBackups
[2010/10/12 20:22:05 | 000,061,440 | ---- | C] (Khronos Group) -- C:\WINDOWS\System32\OpenCL.dll
[2010/10/12 20:22:03 | 010,260,480 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcompiler.dll
[2010/10/12 20:22:03 | 004,595,712 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuda.dll
[2010/10/12 20:22:03 | 002,914,408 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvid.dll
[2010/10/12 20:22:03 | 002,506,344 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvcuvenc.dll
[2010/10/12 20:21:54 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Opera
[2010/10/12 20:21:49 | 000,000,000 | ---D | C] -- C:\NVIDIA
[2010/10/12 20:08:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\Descargas
[2010/10/12 19:51:36 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Sun
[2010/10/12 19:51:12 | 000,423,656 | ---- | C] (Oracle) -- C:\WINDOWS\System32\deployJava1.dll
[2010/10/12 19:42:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla
[2010/10/12 19:42:17 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Mozilla Firefox
[2010/10/12 19:15:31 | 000,000,000 | ---D | C] -- C:\Lyrics
[2010/10/12 18:48:37 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Opera
[2010/10/12 18:39:04 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Minilyrics
[2010/10/12 18:39:03 | 000,052,856 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\PxHlpa64.sys
[2010/10/12 18:39:03 | 000,043,528 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhelp20.sys
[2010/10/12 18:39:03 | 000,039,688 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhelper.sys
[2010/10/12 18:39:03 | 000,010,488 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\cdralw2k.64
[2010/10/12 18:39:03 | 000,010,488 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\cdr4_xp.64
[2010/10/12 18:39:03 | 000,009,464 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\cdralw2k.sys
[2010/10/12 18:39:03 | 000,009,336 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\cdr4_xp.sys
[2010/10/12 18:39:03 | 000,009,336 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\cdr4_2k.sys
[2010/10/12 18:39:02 | 001,628,920 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsfs.dll
[2010/10/12 18:39:02 | 000,187,128 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\primosdk.DLL
[2010/10/12 18:39:02 | 000,129,784 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxafs.dll
[2010/10/12 18:39:02 | 000,068,344 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxsetup.exe
[2010/10/12 18:39:02 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\PxInsA64.exe
[2010/10/12 18:39:02 | 000,064,760 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\PxCpyA64.exe
[2010/10/12 18:39:00 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\AppData
[2010/10/12 18:34:41 | 000,030,536 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\TURegOpt.exe
[2010/10/12 18:34:39 | 000,030,024 | ---- | C] (TuneUp Software) -- C:\WINDOWS\System32\uxtuneup.dll
[2010/10/12 18:34:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\TuneUp Software
[2010/10/12 18:33:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\TuneUp Software
[2010/10/12 18:33:56 | 000,000,000 | ---D | C] -- C:\Archivos de programa\TuneUp Utilities 2010
[2010/10/12 18:17:26 | 000,471,432 | ---- | C] (SpeedyFox) -- C:\Documents and Settings\Administrador\Mis documentos\speedyfox(2).exe
[2010/10/12 18:08:21 | 000,000,000 | ---D | C] -- C:\Archivos de programa\FileHippo.com
[2010/10/12 18:05:54 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Trend Micro
[2010/10/12 17:46:41 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Identities
[2010/10/12 17:46:13 | 000,135,360 | ---- | C] (Symantec Corporation) -- C:\Documents and Settings\Administrador\Mis documentos\FixBlast.exe
[2010/10/12 17:43:13 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Malwarebytes
[2010/10/12 17:42:59 | 000,038,224 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbamswissarmy.sys
[2010/10/12 17:42:58 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Malwarebytes
[2010/10/12 17:42:55 | 000,020,952 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\System32\drivers\mbam.sys
[2010/10/12 17:42:55 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Malwarebytes' Anti-Malware
[2010/10/12 17:38:48 | 006,153,352 | ---- | C] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrador\Mis documentos\mbam-infospyware-1.46.exe
[2010/10/12 17:36:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Macromedia
[2010/10/12 17:36:46 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Adobe
[2010/10/12 17:25:52 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\PCToolsFirewallPlus
[2010/10/12 17:12:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\TEMP
[2010/10/12 17:12:06 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\PC Tools
[2010/10/12 17:11:32 | 010,702,992 | ---- | C] ( ) -- C:\Documents and Settings\Administrador\Mis documentos\fwinstall.exe
[2010/10/12 17:01:38 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Mozilla
[2010/10/12 16:58:38 | 000,019,728 | ---- | C] (Sysinternals - www.sysinternals.com) -- C:\WINDOWS\System32\pgdfgsvc.exe
[2010/10/12 16:57:38 | 000,604,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\nvudisp.exe
[2010/10/12 16:57:38 | 000,000,000 | ---D | C] -- C:\WINDOWS\nview
[2010/10/12 16:57:20 | 000,604,776 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\NVUNINST.EXE
[2010/10/12 16:57:16 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\WinRAR
[2010/10/12 16:49:55 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2010/10/12 16:40:35 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Lang
[2010/10/12 16:40:30 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\DAEMON Tools
[2010/10/12 16:40:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrador\Mis documentos\Mis imágenes
[2010/10/12 16:40:23 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrador\Mis documentos\Mi música
[2010/10/12 16:40:15 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Identities
[2010/10/12 16:39:56 | 000,383,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dll
[2010/10/12 16:39:56 | 000,268,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\iertutil.dll
[2010/10/12 16:39:55 | 001,040,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll.mui
[2010/10/12 16:39:55 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieudinit.exe
[2010/10/12 16:39:54 | 002,455,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieapfltr.dat
[2010/10/12 16:39:54 | 000,459,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeeds.dll
[2010/10/12 16:39:54 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\msfeedsbs.dll
[2010/10/12 16:39:53 | 006,066,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\ieframe.dll
[2010/10/12 16:39:53 | 000,063,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\icardie.dll
[2010/10/12 16:37:32 | 001,060,864 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MFC71.dll
[2010/10/12 16:37:32 | 000,499,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCP71.dll
[2010/10/12 16:37:32 | 000,348,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSVCR71.dll
[2010/10/12 16:37:17 | 000,662,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCT2.OCX
[2010/10/12 16:37:17 | 000,427,864 | ---- | C] (Xceed Software Inc (450) 442-2626 support@xceedsoft.com www.xceedsoft.com) -- C:\WINDOWS\System32\XceedZip.dll
[2010/10/12 16:37:15 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Driver-Soft
[2010/10/12 16:37:08 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.sys
[2010/10/12 16:37:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Vso
[2010/10/12 16:37:08 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Mis documentos\PcSetup
[2010/10/12 16:37:07 | 000,273,408 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\Pncrt.dll
[2010/10/12 16:37:07 | 000,217,127 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\drv43260.dll
[2010/10/12 16:37:07 | 000,208,935 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\drv33260.dll
[2010/10/12 16:37:07 | 000,176,165 | ---- | C] (RealNetworks, Inc.) -- C:\WINDOWS\System32\drv23260.dll
[2010/10/12 16:37:05 | 000,000,000 | ---D | C] -- C:\Archivos de programa\vso
[2010/10/12 16:37:02 | 000,000,000 | ---D | C] -- C:\Archivos de programa\WinRAR
[2010/10/12 16:36:54 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Winamp
[2010/10/12 16:36:39 | 000,000,000 | ---D | C] -- C:\Archivos de programa\VideoLAN
[2010/10/12 16:36:36 | 000,000,000 | ---D | C] -- C:\Archivos de programa\uTorrent
[2010/10/12 16:36:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Unlocker
[2010/10/12 16:36:29 | 001,071,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSCOMCTL.OCX
[2010/10/12 16:36:29 | 000,118,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSSTDFMT.DLL
[2010/10/12 16:36:29 | 000,115,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\MSINET.OCX
[2010/10/12 16:36:29 | 000,000,000 | ---D | C] -- C:\Archivos de programa\SpywareBlaster
[2010/10/12 16:36:25 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Spybot - Search & Destroy
[2010/10/12 16:36:25 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Spybot - Search & Destroy
[2010/10/12 16:36:21 | 000,002,560 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdralw2k.sys
[2010/10/12 16:36:21 | 000,002,432 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\drivers\cdr4_xp.sys
[2010/10/12 16:36:20 | 000,547,576 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\px.dll
[2010/10/12 16:36:20 | 000,510,712 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxdrv.dll
[2010/10/12 16:36:20 | 000,379,640 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxwave.dll
[2010/10/12 16:36:20 | 000,187,128 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxmas.dll
[2010/10/12 16:36:20 | 000,072,440 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\pxhpinst.exe
[2010/10/12 16:36:20 | 000,039,672 | ---- | C] (Sonic Solutions) -- C:\WINDOWS\System32\vxblock.dll
[2010/10/12 16:36:17 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Picasa2
[2010/10/12 16:36:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2010/10/12 16:36:03 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\es-es
[2010/10/12 16:35:16 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie7
[2010/10/12 16:35:08 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallIDNMitigationAPIs$
[2010/10/12 16:35:01 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$NtServicePackUninstallNLSDownlevelMapping$
[2010/10/12 16:34:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Notepad++
[2010/10/12 16:34:09 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Notepad++
[2010/10/12 16:34:04 | 000,000,000 | -H-D | C] -- C:\Archivos de programa\InstallShield Installation Information
[2010/10/12 16:34:01 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Symantec
[2010/10/12 16:33:56 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\InstallShield
[2010/10/12 16:33:30 | 001,757,184 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\imagX7.dll
[2010/10/12 16:33:30 | 000,802,816 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\imagXRA7.dll
[2010/10/12 16:33:30 | 000,497,296 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\imagXpr7.dll
[2010/10/12 16:33:30 | 000,368,640 | ---- | C] (Pegasus Imaging Corporation) -- C:\WINDOWS\System32\TwnLib4.dll
[2010/10/12 16:33:30 | 000,258,048 | ---- | C] (Pegasus Imaging Corp.) -- C:\WINDOWS\System32\imagXR7.dll
[2010/10/12 16:33:29 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Nero
[2010/10/12 16:33:29 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Nero
[2010/10/12 16:33:29 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Nero
[2010/10/12 16:32:09 | 000,000,000 | ---D | C] -- C:\WINDOWS\BricoPacks
[2010/10/12 16:32:00 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Foxit Software
[2010/10/12 16:31:56 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Opera
[2010/10/12 16:31:44 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Lavalys
[2010/10/12 16:31:40 | 000,000,000 | ---D | C] -- C:\Archivos de programa\eMule
[2010/10/12 16:31:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\DAEMON Tools Lite
[2010/10/12 16:31:23 | 000,000,000 | ---D | C] -- C:\Archivos de programa\CCleaner
[2010/10/12 16:31:21 | 000,000,000 | ---D | C] -- C:\Archivos de programa\AIMP2
[2010/10/12 16:31:16 | 000,000,000 | ---D | C] -- C:\Archivos de programa\IObit
[2010/10/12 16:31:13 | 000,073,728 | ---- | C] (Oracle) -- C:\WINDOWS\System32\javacpl.cpl
[2010/10/12 16:30:57 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Java
[2010/10/12 16:30:55 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Java
[2010/10/12 16:30:50 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\Sun
[2010/10/12 16:30:48 | 003,734,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_36.dll
[2010/10/12 16:30:48 | 001,374,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_36.dll
[2010/10/12 16:30:48 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_36.dll
[2010/10/12 16:30:48 | 000,267,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_10.dll
[2010/10/12 16:30:47 | 003,727,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_35.dll
[2010/10/12 16:30:47 | 001,358,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_35.dll
[2010/10/12 16:30:47 | 000,444,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_35.dll
[2010/10/12 16:30:47 | 000,267,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_9.dll
[2010/10/12 16:30:46 | 003,497,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_34.dll
[2010/10/12 16:30:46 | 001,124,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_34.dll
[2010/10/12 16:30:46 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_34.dll
[2010/10/12 16:30:46 | 000,266,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_8.dll
[2010/10/12 16:30:46 | 000,017,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\X3DAudio1_2.dll
[2010/10/12 16:30:45 | 001,123,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\D3DCompiler_33.dll
[2010/10/12 16:30:45 | 000,443,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx10_33.dll
[2010/10/12 16:30:45 | 000,261,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_7.dll
[2010/10/12 16:30:45 | 000,081,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_3.dll
[2010/10/12 16:30:44 | 003,495,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_33.dll
[2010/10/12 16:30:44 | 003,426,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_32.dll
[2010/10/12 16:30:44 | 000,255,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_6.dll
[2010/10/12 16:30:44 | 000,251,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_5.dll
[2010/10/12 16:30:44 | 000,237,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_4.dll
[2010/10/12 16:30:44 | 000,015,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_1.dll
[2010/10/12 16:30:43 | 002,414,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_31.dll
[2010/10/12 16:30:43 | 000,236,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_3.dll
[2010/10/12 16:30:43 | 000,230,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_2.dll
[2010/10/12 16:30:43 | 000,229,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_1.dll
[2010/10/12 16:30:43 | 000,062,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_2.dll
[2010/10/12 16:30:43 | 000,062,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput1_1.dll
[2010/10/12 16:30:40 | 002,388,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_30.dll
[2010/10/12 16:30:40 | 002,332,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_29.dll
[2010/10/12 16:30:40 | 002,323,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_28.dll
[2010/10/12 16:30:40 | 000,230,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xactengine2_0.dll
[2010/10/12 16:30:40 | 000,061,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xinput9_1_0.dll
[2010/10/12 16:30:40 | 000,014,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\x3daudio1_0.dll
[2010/10/12 16:30:39 | 002,337,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_25.dll
[2010/10/12 16:30:39 | 002,319,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_27.dll
[2010/10/12 16:30:39 | 002,297,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_26.dll
[2010/10/12 16:30:38 | 002,222,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\d3dx9_24.dll
[2010/10/12 16:30:27 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\DirectX
[2010/10/12 16:29:16 | 000,000,000 | ---D | C] -- C:\Archivos de programa\MSBuild
[2010/10/12 16:29:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\XPSViewer
[2010/10/12 16:29:11 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Reference Assemblies
[2010/10/12 16:29:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\en-us
[2010/10/12 16:27:39 | 000,026,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spupdsvc.exe
[2010/10/12 16:25:59 | 000,000,000 | R-SD | C] -- C:\WINDOWS\assembly
[2010/10/12 16:25:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\Microsoft.NET
[2010/10/12 16:25:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\URTTemp
[2010/10/12 16:22:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Windows Genuine Advantage
[2010/10/12 16:21:22 | 000,023,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll.mui
[2010/10/12 16:21:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\SoftwareDistribution
[2010/10/12 16:21:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrador\Mis documentos
[2010/10/12 16:21:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrador\Datos de programa\Microsoft
[2010/10/12 16:21:05 | 000,000,000 | --SD | C] -- C:\Documents and Settings\Administrador\Favoritos
[2010/10/12 16:21:05 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrador\SendTo
[2010/10/12 16:21:05 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrador\Datos de programa
[2010/10/12 16:21:05 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrador\Menú Inicio
[2010/10/12 16:21:05 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\Administrador\Cookies
[2010/10/12 16:21:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrador\Plantillas
[2010/10/12 16:21:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrador\Impresoras
[2010/10/12 16:21:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrador\Entorno de red
[2010/10/12 16:21:05 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\Administrador\Configuración local
[2010/10/12 16:21:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Microsoft
[2010/10/12 16:21:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Escritorio
[2010/10/12 16:21:04 | 000,000,000 | --SD | C] -- C:\Documents and Settings\LocalService\Datos de programa\Microsoft
[2010/10/12 16:21:04 | 000,000,000 | ---D | C] -- C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft
[2010/10/12 16:20:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\SoftwareDistribution
[2010/10/12 16:20:57 | 000,000,000 | --SD | C] -- C:\WINDOWS\System32\Microsoft
[2010/10/12 16:20:53 | 000,000,000 | --SD | C] -- C:\Documents and Settings\NetworkService\Datos de programa\Microsoft
[2010/10/12 16:20:53 | 000,000,000 | ---D | C] -- C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft
[2010/10/12 16:18:22 | 000,018,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spmsg.dll
[2010/10/12 16:18:21 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[2010/10/12 16:18:12 | 000,164,112 | ---- | C] (Ahead Software AG
im Stoeckmaedle 18
76307 Karlsbad, Germany
Fax: ++49-7248-911-888
e-mail: info@nero.com) -- C:\WINDOWS\System32\wnaspi32.dll
[2010/10/12 16:18:12 | 000,044,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups2.dll
[2010/10/12 16:17:35 | 000,112,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mapi32.dll
[2010/10/12 16:17:34 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dllcache
[2010/10/12 16:16:55 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\All Users\DRM
[2010/10/12 16:16:46 | 000,000,000 | --SD | C] -- C:\WINDOWS\Downloaded Program Files
[2010/10/12 16:16:46 | 000,000,000 | R--D | C] -- C:\WINDOWS\Offline Web Pages
[2010/10/12 16:16:40 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documentos\Mis imágenes
[2010/10/12 16:16:36 | 000,000,000 | -H-D | C] -- C:\Archivos de programa\WindowsUpdate
[2010/10/12 16:16:32 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Servicios en línea
[2010/10/12 16:16:09 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\atrace.dll
[2010/10/12 16:16:05 | 000,071,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\acctres.dll
[2010/10/12 16:16:05 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmevtmsg.dll
[2010/10/12 16:16:04 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Services
[2010/10/12 16:16:02 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icfgnt5.dll
[2010/10/12 16:16:02 | 000,000,000 | --SD | C] -- C:\WINDOWS\Tasks
[2010/10/12 16:16:01 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\MSSoap
[2010/10/12 16:15:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\srchasst
[2010/10/12 16:15:58 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Macromed
[2010/10/12 16:15:57 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wucltui.dll
[2010/10/12 16:15:57 | 000,327,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wucltui.dll
[2010/10/12 16:15:57 | 000,209,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuweb.dll
[2010/10/12 16:15:57 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuaueng1.dll
[2010/10/12 16:15:56 | 001,929,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaueng.dll
[2010/10/12 16:15:56 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuapi.dll
[2010/10/12 16:15:56 | 000,575,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuapi.dll
[2010/10/12 16:15:56 | 000,217,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2010/10/12 16:15:56 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wuauclt1.exe
[2010/10/12 16:15:56 | 000,053,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wuauclt.exe
[2010/10/12 16:15:56 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\wups.dll
[2010/10/12 16:15:56 | 000,035,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\wups.dll
[2010/10/12 16:15:56 | 000,018,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qmgrprxy.dll
[2010/10/12 16:15:56 | 000,008,192 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx2.dll
[2010/10/12 16:15:56 | 000,007,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\bitsprx3.dll
[2010/10/12 16:15:53 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Movie Maker
[2010/10/12 16:15:50 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrslv.dll
[2010/10/12 16:15:50 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrcdlg.dll
[2010/10/12 16:15:50 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\racpldlg.dll
[2010/10/12 16:15:50 | 000,029,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\safrdm.dll
[2010/10/12 16:15:47 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\fltmc.exe
[2010/10/12 16:15:46 | 000,241,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\srrstr.dll
[2010/10/12 16:15:46 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Restore
[2010/10/12 16:15:45 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ils.dll
[2010/10/12 16:15:45 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msconf.dll
[2010/10/12 16:15:45 | 000,034,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mnmdd.dll
[2010/10/12 16:15:45 | 000,032,768 | ---- | C] (Intel Corporation) -- C:\WINDOWS\System32\isrdbg32.dll
[2010/10/12 16:15:45 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\nmmkcert.dll
[2010/10/12 16:15:43 | 000,252,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoeacct.dll
[2010/10/12 16:15:43 | 000,105,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msoert2.dll
[2010/10/12 16:15:43 | 000,000,000 | ---D | C] -- C:\Archivos de programa\NetMeeting
[2010/10/12 16:15:42 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetres.dll
[2010/10/12 16:15:41 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Outlook Express
[2010/10/12 16:15:40 | 000,282,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\inetcfg.dll
[2010/10/12 16:15:40 | 000,086,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\isign32.dll
[2010/10/12 16:15:40 | 000,073,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwdial.dll
[2010/10/12 16:15:40 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icwphbk.dll
[2010/10/12 16:15:40 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mstinit.exe
[2010/10/12 16:15:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\System
[2010/10/12 16:15:33 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Internet Explorer
[2010/10/12 16:14:58 | 000,000,000 | ---D | C] -- C:\Archivos de programa\ComPlus Applications
[2010/10/12 16:14:52 | 000,000,000 | ---D | C] -- C:\WINDOWS\Registration
[2010/10/12 16:14:35 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Windows Media Connect 2
[2010/10/12 16:14:34 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Windows Media Player
[2010/10/12 16:14:32 | 000,005,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\write.exe
[2010/10/12 16:14:32 | 000,000,000 | ---D | C] -- C:\Archivos de programa\MSN Gaming Zone
[2010/10/12 16:14:24 | 000,232,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avtapi.dll
[2010/10/12 16:14:24 | 000,152,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndvol32.exe
[2010/10/12 16:14:24 | 000,073,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avwav.dll
[2010/10/12 16:14:24 | 000,044,544 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hticons.dll
[2010/10/12 16:14:24 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\avmeter.dll
[2010/10/12 16:14:23 | 000,035,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winchat.exe
[2010/10/12 16:14:20 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursores
[2010/10/12 16:14:19 | 000,652,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\getuname.dll
[2010/10/12 16:14:19 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\charmap.exe
[2010/10/12 16:14:18 | 000,128,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mshearts.exe
[2010/10/12 16:14:18 | 000,120,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\winmine.exe
[2010/10/12 16:14:18 | 000,057,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sol.exe
[2010/10/12 16:14:18 | 000,055,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\freecell.exe
[2010/10/12 16:14:18 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsshutdn.exe
[2010/10/12 16:14:18 | 000,016,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tskill.exe
[2010/10/12 16:14:18 | 000,010,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\reset.exe
[2010/10/12 16:14:17 | 000,033,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\regini.exe
[2010/10/12 16:14:17 | 000,023,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qwinsta.exe
[2010/10/12 16:14:17 | 000,022,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msg.exe
[2010/10/12 16:14:17 | 000,017,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qappsrv.exe
[2010/10/12 16:14:17 | 000,016,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rwinsta.exe
[2010/10/12 16:14:17 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\logoff.exe
[2010/10/12 16:14:17 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cdmodem.dll
[2010/10/12 16:14:17 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tsdiscon.exe
[2010/10/12 16:14:17 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscon.exe
[2010/10/12 16:14:17 | 000,015,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\shadow.exe
[2010/10/12 16:14:17 | 000,004,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpcfgex.dll
[2010/10/12 16:14:16 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsnap.dll
[2010/10/12 16:14:16 | 000,097,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comrepl.dll
[2010/10/12 16:14:16 | 000,059,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\stclient.dll
[2010/10/12 16:14:16 | 000,034,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxlegih.dll
[2010/10/12 16:14:16 | 000,030,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxdm.dll
[2010/10/12 16:14:16 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comaddin.dll
[2010/10/12 16:14:16 | 000,006,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dcomcnfg.exe
[2010/10/12 16:14:16 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxex.dll
[2010/10/12 16:14:11 | 000,188,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\accwiz.exe
[2010/10/12 16:14:11 | 000,132,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\sndrec32.exe
[2010/10/12 16:14:11 | 000,070,656 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\access.cpl
[2010/10/12 16:14:10 | 000,539,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\spider.exe
[2010/10/12 16:14:10 | 000,353,280 | ---- | C] (Hilgraeve, Inc.) -- C:\WINDOWS\System32\hypertrm.dll
[2010/10/12 16:14:10 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2010/10/12 16:14:10 | 000,124,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mplay32.exe
[2010/10/12 16:14:10 | 000,104,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clipbrd.exe
[2010/10/12 16:14:10 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Windows NT
[2010/10/12 16:14:09 | 000,147,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdchost.dll
[2010/10/12 16:14:09 | 000,093,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscfgwmi.dll
[2010/10/12 16:14:09 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdshost.exe
[2010/10/12 16:14:09 | 000,013,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdsaddin.exe
[2010/10/12 16:14:08 | 000,428,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcprx.dll
[2010/10/12 16:14:08 | 000,161,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtcuiu.dll
[2010/10/12 16:14:08 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mtxoci.dll
[2010/10/12 16:14:08 | 000,087,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpwsx.dll
[2010/10/12 16:14:08 | 000,062,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpclip.exe
[2010/10/12 16:14:08 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\tscupgrd.exe
[2010/10/12 16:14:08 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cfgbkend.dll
[2010/10/12 16:14:08 | 000,020,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\qprocess.exe
[2010/10/12 16:14:08 | 000,019,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\rdpsnd.dll
[2010/10/12 16:14:08 | 000,011,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\icaapi.dll
[2010/10/12 16:14:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\MsDtc
[2010/10/12 16:14:07 | 000,956,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtctm.dll
[2010/10/12 16:14:07 | 000,060,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\colbact.dll
[2010/10/12 16:14:07 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\msdtclog.dll
[2010/10/12 16:14:07 | 000,011,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\xolehlp.dll
[2010/10/12 16:14:07 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Com
[2010/10/12 16:14:06 | 001,267,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comsvcs.dll
[2010/10/12 16:14:06 | 000,625,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvut.dll
[2010/10/12 16:14:06 | 000,539,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\comuid.dll
[2010/10/12 16:14:06 | 000,226,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrv.dll
[2010/10/12 16:14:06 | 000,110,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\clbcatex.dll
[2010/10/12 16:14:06 | 000,085,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\catsrvps.dll
[2010/10/12 16:14:01 | 000,188,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\cmprops.dll
[2010/10/12 16:14:01 | 000,058,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\licwmi.dll
[2010/10/12 16:14:01 | 000,056,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\servdeps.dll
[2010/10/12 16:14:01 | 000,017,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mmfutil.dll
[2010/10/12 12:58:51 | 000,000,000 | R-SD | C] -- C:\WINDOWS\Fonts
[2010/10/12 12:58:51 | 000,000,000 | -H-D | C] -- C:\WINDOWS\inf
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\WinSxS
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wins
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Web
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\wbem
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\usmt
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\UMDF
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\twain_32
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Temp
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\system32
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\system
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\spool
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ShellExt
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\Setup
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\security
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Resources
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\repair
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ras
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Provisioning
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\PreInstall
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\PeerNet
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\pchealth
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\oobe
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\npp
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\mui
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\mui
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\msapps
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\msagent
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Media
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\java
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\inetsrv
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\IME
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\ime
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\icsxml
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\ias
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Help
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\export
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\etc
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\ehome
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Driver Cache
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\drivers\disdn
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\dhcp
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Debug
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Cursors
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Connection Wizard
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\config
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\Config
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\AppPatch
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\addins
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3com_dmi
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3082
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\3076
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\2052
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1054
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1042
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1041
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1037
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1033
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1031
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1028
[2010/10/12 12:58:51 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\1025
[2010/10/12 12:12:29 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\RTCOM
[2010/10/12 12:12:27 | 000,146,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\portcls.sys
[2010/10/12 12:12:27 | 000,129,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksproxy.ax
[2010/10/12 12:12:27 | 000,060,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\drivers\drmk.sys
[2010/10/12 12:12:27 | 000,004,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\ksuser.dll
[2010/10/12 12:10:55 | 000,077,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\usbui.dll
[2010/10/12 12:08:47 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documentos\Mi música
[2010/10/12 12:08:29 | 000,000,000 | -HSD | C] -- C:\WINDOWS\Installer
[2010/10/12 12:08:29 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\ODBC
[2010/10/12 12:08:26 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\SpeechEngines
[2010/10/12 12:08:26 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Microsoft Shared
[2010/10/12 12:08:26 | 000,000,000 | ---D | C] -- C:\Archivos de programa
[2010/10/12 12:08:26 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes
[2010/10/12 12:08:23 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuq.dll
[2010/10/12 12:08:23 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdazel.dll
[2010/10/12 12:08:22 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtuf.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycc.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbduzb.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdur.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdtat.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru1.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdru.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdmon.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkyr.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdkaz.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdbu.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdblr.dll
[2010/10/12 12:08:21 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdaze.dll
[2010/10/12 12:08:20 | 000,008,192 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhept.dll
[2010/10/12 12:08:20 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela3.dll
[2010/10/12 12:08:20 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhela2.dll
[2010/10/12 12:08:20 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdgkl.dll
[2010/10/12 12:08:20 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe319.dll
[2010/10/12 12:08:20 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe220.dll
[2010/10/12 12:08:20 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhe.dll
[2010/10/12 12:08:18 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv1.dll
[2010/10/12 12:08:18 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlv.dll
[2010/10/12 12:08:18 | 000,006,144 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdest.dll
[2010/10/12 12:08:18 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt1.dll
[2010/10/12 12:08:18 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdlt.dll
[2010/10/12 12:08:17 | 000,007,168 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdycl.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl1.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdsl.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz2.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcz1.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdcr.dll
[2010/10/12 12:08:17 | 000,006,656 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\KBDAL.DLL
[2010/10/12 12:08:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdro.dll
[2010/10/12 12:08:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdpl1.dll
[2010/10/12 12:08:17 | 000,005,632 | R--- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\kbdhu1.dll
[2010/10/12 12:08:12 | 000,176,157 | ---- | C] (Digi International, Inc.) -- C:\WINDOWS\System32\dgrpsetu.dll
[2010/10/12 12:08:12 | 000,103,936 | ---- | C] (Equinox Systems Inc.) -- C:\WINDOWS\System32\EqnClass.Dll
[2010/10/12 12:08:12 | 000,085,532 | ---- | C] (Digi International) -- C:\WINDOWS\System32\dgsetup.dll
[2010/10/12 12:08:12 | 000,024,661 | ---- | C] (Perle Systems Ltd.) -- C:\WINDOWS\System32\spxcoins.dll
[2010/10/12 12:08:12 | 000,019,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TAPI.DLL
[2010/10/12 12:08:12 | 000,013,600 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\WFWNET.DRV
[2010/10/12 12:08:12 | 000,013,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\irclass.dll
[2010/10/12 12:08:12 | 000,009,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VER.DLL
[2010/10/12 12:08:12 | 000,004,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\TIMER.DRV
[2010/10/12 12:08:12 | 000,003,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SYSTEM.DRV
[2010/10/12 12:08:12 | 000,002,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\VGA.DRV
[2010/10/12 12:08:11 | 000,127,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MSVIDEO.DLL
[2010/10/12 12:08:11 | 000,109,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVIFILE.DLL
[2010/10/12 12:08:11 | 000,083,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLECLI.DLL
[2010/10/12 12:08:11 | 000,073,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIAVI.DRV
[2010/10/12 12:08:11 | 000,070,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\AVICAP.DLL
[2010/10/12 12:08:11 | 000,033,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\COMMDLG.DLL
[2010/10/12 12:08:11 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCIWAVE.DRV
[2010/10/12 12:08:11 | 000,025,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MCISEQ.DRV
[2010/10/12 12:08:11 | 000,024,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\OLESVR.DLL
[2010/10/12 12:08:11 | 000,009,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\LZEXPAND.DLL
[2010/10/12 12:08:11 | 000,005,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SHELL.DLL
[2010/10/12 12:08:11 | 000,002,032 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MOUSE.DRV
[2010/10/12 12:08:11 | 000,002,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\KEYBOARD.DRV
[2010/10/12 12:08:11 | 000,001,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\SOUND.DRV
[2010/10/12 12:08:11 | 000,001,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMTASK.TSK
[2010/10/12 12:08:10 | 000,146,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\winspool.drv
[2010/10/12 12:08:10 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\storprop.dll
[2010/10/12 12:08:10 | 000,070,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System\MMSYSTEM.DLL
[2010/10/12 12:08:10 | 000,015,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\TASKMAN.EXE
[2010/10/12 12:08:10 | 000,008,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\batt.dll
[2010/10/12 12:08:02 | 000,000,000 | R--D | C] -- C:\Documents and Settings\All Users\Documentos
[2010/10/12 12:08:02 | 000,000,000 | -H-D | C] -- C:\Documents and Settings\All Users\Plantillas
[2010/10/12 12:08:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menú Inicio
[2010/10/12 12:08:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Favoritos
[2010/10/12 12:08:02 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Escritorio
[2010/10/12 12:07:31 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot
[2010/10/12 12:07:26 | 000,000,000 | --SD | C] -- C:\Documents and Settings\All Users\Datos de programa\Microsoft
[2010/10/12 12:07:26 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\All Users\Datos de programa
[2010/10/12 12:05:04 | 006,139,496 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\drivers\RtkHDAud.sys
[2010/10/12 12:05:03 | 009,721,960 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RTLCPL.EXE
[2010/10/12 12:05:03 | 001,833,576 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SkyTel.exe
[2010/10/12 12:05:03 | 001,489,512 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\RtlUpd.exe
[2010/10/12 12:05:03 | 000,084,584 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\SOUNDMAN.EXE
[2010/10/12 12:05:02 | 002,180,712 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\MicCal.exe
[2010/10/12 12:05:01 | 002,815,592 | ---- | C] (RealTek Semicoductor Corp.) -- C:\WINDOWS\ALCWZRD.EXE
[2010/10/12 12:04:36 | 000,891,496 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\RTSndMgr.CPL
[2010/10/12 12:04:36 | 000,285,288 | ---- | C] (Realtek Semiconductor Corp.) -- C:\WINDOWS\System32\ALSNDMGR.CPL
[2010/10/12 12:03:55 | 000,888,320 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\fdco1ins.dll
[2010/10/12 12:03:54 | 000,011,264 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\System32\bdco1ins.dll
[2010/10/12 12:03:45 | 000,036,864 | ---- | C] (Advanced Micro Devices) -- C:\WINDOWS\System32\drivers\AmdK8.sys
[2010/10/12 12:03:24 | 000,000,000 | ---D | C] -- C:\Documents and Settings
[2010/10/12 12:03:23 | 000,000,000 | -HSD | C] -- C:\System Volume Information

[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]

[2010/10/14 01:59:59 | 000,000,802 | ---- | M] () -- C:\Documents and Settings\Administrador\Menú Inicio\Programas\Inicio\ERUNT AutoBackup.lnk
[2010/10/14 01:59:54 | 000,000,646 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\NTREGOPT.lnk
[2010/10/14 01:59:54 | 000,000,627 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\ERUNT.lnk
[2010/10/14 01:55:52 | 000,000,449 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\Descargas.lnk
[2010/10/14 01:54:11 | 000,000,630 | ---- | M] () -- C:\WINDOWS\tasks\Automatische Problemsuche.job
[2010/10/14 01:51:59 | 000,000,342 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/10/14 01:51:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2010/10/14 01:18:54 | 000,001,665 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Mozilla Firefox.lnk
[2010/10/14 01:16:40 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2010/10/14 01:10:45 | 000,000,000 | ---- | M] () -- C:\WINDOWS\nsreg.dat
[2010/10/14 01:03:53 | 000,001,627 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\CometBird.lnk
[2010/10/14 01:01:46 | 000,641,770 | ---- | M] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2010/10/14 00:34:39 | 000,097,456 | ---- | M] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2010/10/14 00:18:05 | 000,000,046 | ---- | M] () -- C:\WINDOWS\System32\_WKERNEL.FRE
[2010/10/14 00:07:10 | 000,000,132 | ---- | M] () -- C:\WINDOWS\winamp.ini
[2010/10/13 23:54:12 | 000,023,392 | ---- | M] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/13 23:54:12 | 000,016,832 | ---- | M] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/13 23:42:30 | 000,008,192 | ---- | M] () -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/13 23:39:58 | 000,004,484 | ---- | M] () -- C:\WINDOWS\System32\drivers\cpuidlep.sys
[2010/10/13 23:39:15 | 000,070,028 | ---- | M] () -- C:\WINDOWS\System32\oemlogo_bak.bmp
[2010/10/13 23:39:15 | 000,000,209 | ---- | M] () -- C:\WINDOWS\System32\oeminfo_bak.ini
[2010/10/13 23:30:22 | 000,000,720 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Comodo Dragon.lnk
[2010/10/13 23:13:49 | 000,000,656 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\SRWare Iron.lnk
[2010/10/13 18:50:07 | 000,000,210 | -HS- | M] () -- C:\boot.ini
[2010/10/13 18:43:53 | 000,001,513 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\WINAMP.LNK
[2010/10/13 18:20:35 | 000,000,000 | ---- | M] () -- C:\WINDOWS\BricoPackLock.lock
[2010/10/13 18:09:59 | 000,002,909 | ---- | M] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/10/13 08:49:27 | 000,000,711 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\emule.lnk
[2010/10/13 07:26:04 | 000,505,478 | ---- | M] () -- C:\WINDOWS\System32\perfh00A.dat
[2010/10/13 07:26:04 | 000,441,760 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2010/10/13 07:26:04 | 000,090,876 | ---- | M] () -- C:\WINDOWS\System32\perfc00A.dat
[2010/10/13 07:26:04 | 000,071,444 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2010/10/13 07:24:53 | 000,000,967 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\Hosts
[2010/10/13 07:06:08 | 000,051,239 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\n706138550_954524_3510.jpg
[2010/10/13 07:03:40 | 000,066,973 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\35275_1451387317076_1005052650_1249766_7194469_n.jpg
[2010/10/13 05:16:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2010/10/13 05:04:43 | 000,251,168 | RHS- | M] () -- C:\ntldr
[2010/10/13 03:30:53 | 000,000,769 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Notepad++.lnk
[2010/10/13 01:04:28 | 000,026,781 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\5851_1202434179542_1189220038_30625071_3039883_n.jpg
[2010/10/13 01:00:20 | 000,249,939 | R--- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20101013-010621.backup
[2010/10/13 00:40:32 | 000,000,967 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.20101013-010020.backup
[2010/10/13 00:00:15 | 000,000,759 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\Aero MSN.lnk
[2010/10/12 23:34:59 | 000,232,968 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010/10/12 23:34:59 | 000,000,001 | ---- | M] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010/10/12 23:34:57 | 000,232,968 | ---- | M] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010/10/12 22:08:42 | 000,016,400 | ---- | M] (Logitech, Inc.) -- C:\WINDOWS\System32\drivers\LNonPnP.sys
[2010/10/12 22:08:42 | 000,000,000 | -H-- | M] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010/10/12 20:22:53 | 000,000,000 | ---- | M] () -- C:\WINDOWS\System32\nvdrswr.lk
[2010/10/12 20:21:48 | 000,000,627 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Opera.lnk
[2010/10/12 19:51:04 | 000,153,376 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javaws.exe
[2010/10/12 19:51:04 | 000,145,184 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javaw.exe
[2010/10/12 19:51:04 | 000,145,184 | ---- | M] (Oracle) -- C:\WINDOWS\System32\java.exe
[2010/10/12 19:51:04 | 000,073,728 | ---- | M] (Oracle) -- C:\WINDOWS\System32\javacpl.cpl
[2010/10/12 19:51:03 | 000,423,656 | ---- | M] (Oracle) -- C:\WINDOWS\System32\deployJava1.dll
[2010/10/12 18:17:25 | 000,471,432 | ---- | M] (SpeedyFox) -- C:\Documents and Settings\Administrador\Mis documentos\speedyfox(2).exe
[2010/10/12 18:10:54 | 000,007,718 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\cc_20101012_1810.reg
[2010/10/12 18:01:44 | 000,252,991 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\FHSetup.exe
[2010/10/12 17:58:19 | 001,402,880 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\HiJackThis.msi
[2010/10/12 17:46:13 | 000,135,360 | ---- | M] (Symantec Corporation) -- C:\Documents and Settings\Administrador\Mis documentos\FixBlast.exe
[2010/10/12 17:42:36 | 002,672,312 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\esetsmartinstaller_enu.exe
[2010/10/12 17:39:19 | 006,153,352 | ---- | M] (Malwarebytes Corporation ) -- C:\Documents and Settings\Administrador\Mis documentos\mbam-infospyware-1.46.exe
[2010/10/12 17:37:45 | 000,181,156 | ---- | M] () -- C:\Documents and Settings\Administrador\Mis documentos\nod32removal.exe
[2010/10/12 17:11:30 | 010,702,992 | ---- | M] ( ) -- C:\Documents and Settings\Administrador\Mis documentos\fwinstall.exe
[2010/10/12 16:58:38 | 000,019,728 | ---- | M] (Sysinternals - www.sysinternals.com) -- C:\WINDOWS\System32\pgdfgsvc.exe
[2010/10/12 16:53:50 | 000,000,538 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Adsl.lnk
[2010/10/12 16:40:42 | 000,940,794 | ---- | M] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010/10/12 16:40:42 | 000,146,650 | ---- | M] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010/10/12 16:37:08 | 000,087,608 | ---- | M] () -- C:\Documents and Settings\Administrador\Datos de programa\inst.exe
[2010/10/12 16:37:08 | 000,047,360 | ---- | M] (VSO Software) -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.sys
[2010/10/12 16:37:08 | 000,007,887 | ---- | M] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.cat
[2010/10/12 16:37:08 | 000,001,144 | ---- | M] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.inf
[2010/10/12 16:33:07 | 000,052,319 | ---- | M] () -- C:\WINDOWS\BricoPackUninst.cmd
[2010/10/12 16:33:07 | 000,005,997 | ---- | M] () -- C:\WINDOWS\BricoPackFoldersDelete.cmd
[2010/10/12 16:33:03 | 002,359,350 | ---- | M] () -- C:\WINDOWS\BricoPack Wallpaper.bmp
[2010/10/12 16:20:56 | 000,008,192 | ---- | M] () -- C:\WINDOWS\REGLOCS.OLD
[2010/10/12 16:19:05 | 000,001,252 | ---- | M] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/10/12 16:17:58 | 000,715,248 | ---- | M] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010/10/12 16:17:51 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2010/10/12 16:17:51 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2010/10/12 16:17:51 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2010/10/12 16:17:51 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2010/10/12 16:17:43 | 000,316,640 | ---- | M] () -- C:\WINDOWS\WMSysPr9.prx
[2010/10/12 16:17:35 | 000,004,205 | ---- | M] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/12 16:15:05 | 000,021,900 | ---- | M] () -- C:\WINDOWS\System32\emptyregdb.dat

[color=#E56717]========== Files Created - No Company Name ==========[/color]

[2010/10/14 01:59:59 | 000,000,802 | ---- | C] () -- C:\Documents and Settings\Administrador\Menú Inicio\Programas\Inicio\ERUNT AutoBackup.lnk
[2010/10/14 01:59:54 | 000,000,646 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\NTREGOPT.lnk
[2010/10/14 01:59:54 | 000,000,627 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\ERUNT.lnk
[2010/10/14 01:55:52 | 000,000,449 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\Descargas.lnk
[2010/10/14 01:18:54 | 000,001,665 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Mozilla Firefox.lnk
[2010/10/14 01:10:45 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/10/14 01:03:53 | 000,001,627 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\CometBird.lnk
[2010/10/14 00:22:42 | 000,000,342 | ---- | C] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2010/10/14 00:12:37 | 000,000,046 | ---- | C] () -- C:\WINDOWS\System32\_WKERNEL.FRE
[2010/10/14 00:08:31 | 000,000,439 | ---- | C] () -- C:\WINDOWS\System32\shfolder.inf
[2010/10/13 23:39:58 | 000,004,484 | ---- | C] () -- C:\WINDOWS\System32\drivers\cpuidlep.sys
[2010/10/13 23:39:15 | 000,070,028 | ---- | C] () -- C:\WINDOWS\System32\oemlogo_bak.bmp
[2010/10/13 23:39:15 | 000,000,209 | ---- | C] () -- C:\WINDOWS\System32\oeminfo_bak.ini
[2010/10/13 23:30:22 | 000,000,720 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Comodo Dragon.lnk
[2010/10/13 23:13:49 | 000,000,656 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\SRWare Iron.lnk
[2010/10/13 19:00:30 | 000,641,770 | ---- | C] () -- C:\WINDOWS\System32\drivers\Cat.DB
[2010/10/13 18:43:53 | 000,001,513 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\WINAMP.LNK
[2010/10/13 18:43:45 | 000,000,132 | ---- | C] () -- C:\WINDOWS\winamp.ini
[2010/10/13 18:20:35 | 000,000,000 | ---- | C] () -- C:\WINDOWS\BricoPackLock.lock
[2010/10/13 07:06:08 | 000,051,239 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\n706138550_954524_3510.jpg
[2010/10/13 06:49:42 | 000,066,973 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\35275_1451387317076_1005052650_1249766_7194469_n.jpg
[2010/10/13 06:46:10 | 000,790,846 | ---- | C] () -- C:\WINDOWS\System32\dllcache\apph_sp.sdb
[2010/10/13 06:46:10 | 000,009,696 | ---- | C] () -- C:\WINDOWS\System32\dllcache\drvmain.sdb
[2010/10/13 06:19:39 | 000,000,711 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\emule.lnk
[2010/10/13 06:17:23 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2010/10/13 06:09:51 | 001,294,464 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\pedro.wma
[2010/10/13 06:09:50 | 000,055,681 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\nicole054hb7xu.jpg
[2010/10/13 06:09:50 | 000,023,986 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\prefs{default}.js
[2010/10/13 06:09:50 | 000,020,609 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\normalsilvi7yn.jpg
[2010/10/13 06:09:49 | 002,938,949 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Surf_90.wmv
[2010/10/13 06:09:48 | 008,459,604 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Chamuyen - Carla Conte.wmv
[2010/10/13 06:09:46 | 024,648,782 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Los Piojos - Ruleta.mpg
[2010/10/13 06:09:42 | 048,515,824 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Dire Straits - Money For Nothing.mpg
[2010/10/13 06:09:41 | 007,667,580 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Celia.Blanco.-.Compulsion.-espaelinks.net.mpg
[2010/10/13 06:09:37 | 038,254,756 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Attaque 77 - No Me Arrepiento De Este Amor (Quilmes Rock Festival) {G E A} Wv.mpg
[2010/10/13 06:09:34 | 036,791,881 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Acdc - You Shook Me All Night Long all the video.mpg
[2010/10/13 06:09:33 | 006,078,468 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Celia.Blanco.-.Anima.a.España-espaelinks.net.mpeg
[2010/10/13 06:09:31 | 024,206,534 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\thecure.mov
[2010/10/13 06:09:31 | 000,000,348 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\formhistory{default}.dat
[2010/10/13 06:08:49 | 366,125,056 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Seconds For Disaster Columbia__by Natgeo_www.tirandojarabe.com__(Grock)_.avi
[2010/10/13 06:08:47 | 016,779,264 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Los piojos - Yira Yira (en vivo).avi
[2010/10/13 06:07:45 | 656,502,784 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\jimena.perini.olegio.normal.resistencia.chaco.argentina.avi
[2010/10/13 06:07:35 | 135,724,274 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FMFA - Natalia Paris - Revista MAX - HD.avi
[2010/10/13 06:07:30 | 063,879,168 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FFA - Doble Vida 03.avi
[2010/10/13 06:07:28 | 020,375,552 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Celia.Blanco.-.Mamada.Ojos.Tapados.-espaelinks.net.avi
[2010/10/13 06:07:27 | 006,463,438 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Carla-Conte-Culebra B.avi
[2010/10/13 06:07:26 | 013,766,006 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Carla-Conte-Culebra.avi
[2010/10/13 06:07:23 | 020,118,546 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Carla-Conte-Azul-Culebra.avi
[2010/10/13 06:07:19 | 030,058,496 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Bersuit Vergarabat - La argentinidad al palo.avi
[2010/10/13 06:06:32 | 360,570,880 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\(((Vgroup.com.ar))) Cosquin Rock 2005 (parte 1) by JamesRyan.avi
[2010/10/13 06:06:32 | 001,702,628 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\VistaBlack1.0{0.4}.jar
[2010/10/13 06:06:32 | 000,235,640 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\bookmarks{default}.html
[2010/10/13 06:06:32 | 000,052,862 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\bookmarks.html
[2010/10/13 06:06:31 | 001,918,191 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\NASANightLaunch{0.6.20080402}.jar
[2010/10/13 06:06:31 | 000,898,089 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Noia2.0eXtreme{3.371}.jar
[2010/10/13 06:06:31 | 000,569,876 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\RedShiftV2{0.96}.jar
[2010/10/13 06:06:30 | 001,040,700 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\myFireFox{2.0.0.10}.jar
[2010/10/13 06:06:30 | 000,767,644 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\macfoxIIgraphite{2.1.4}.jar
[2010/10/13 06:06:30 | 000,745,443 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\macfoxIIgraphite{2.1.1}.jar
[2010/10/13 06:06:30 | 000,743,618 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\iFoxGraphite{2.5.1}.jar
[2010/10/13 06:06:29 | 000,769,503 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CylenceTheme2BlackDiamondEditionRC1{1.0}.jar
[2010/10/13 06:06:29 | 000,717,717 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\iFoxGraphite{2.4.2}.jar
[2010/10/13 06:06:29 | 000,596,074 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\AeroFoxBasic{1.9.6}.jar
[2010/10/13 06:06:29 | 000,573,596 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\AeroFoxBasic{1.9.01}.jar
[2010/10/13 06:06:28 | 000,003,478 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\User Agent Strings.xml
[2010/10/13 06:06:27 | 000,472,208 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Torrent-SearchToolbar{1.5.37.0}.xpi
[2010/10/13 06:06:27 | 000,342,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\TabMixPlus{0.3.6}.xpi
[2010/10/13 06:06:27 | 000,052,083 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Splash{2.0.0.1}.xpi
[2010/10/13 06:06:27 | 000,040,353 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\TabEffect{1.1}.xpi
[2010/10/13 06:06:27 | 000,039,255 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\tab_effect-1.1-fx.xpi
[2010/10/13 06:06:27 | 000,033,281 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\UserAgentSwitcher{0.6.11}.xpi
[2010/10/13 06:06:27 | 000,017,778 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\TADSEE{0.8.3}.xpi
[2010/10/13 06:06:27 | 000,010,272 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\UnhidePasswords{1.2.1}.xpi
[2010/10/13 06:06:27 | 000,010,266 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\UnhidePasswords{1.2}.xpi
[2010/10/13 06:06:26 | 000,287,712 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\lolifox-ErrorZilla{0.2}.xpi
[2010/10/13 06:06:26 | 000,209,294 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\IETab{1.5.20080310}.xpi
[2010/10/13 06:06:26 | 000,067,070 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\NightlyTesterTools{1.3}.xpi
[2010/10/13 06:06:26 | 000,060,511 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Linkification{1.3.3}.xpi
[2010/10/13 06:06:26 | 000,025,394 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ShowIP{0.8.07build0249}.xpi
[2010/10/13 06:06:26 | 000,018,291 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ResurrectPages{1.0.8}.xpi
[2010/10/13 06:06:26 | 000,006,275 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\PassiveCache{1.2}.xpi
[2010/10/13 06:06:26 | 000,005,668 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\MegauploadSX4.3{4.3}.xpi
[2010/10/13 06:06:25 | 000,996,873 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\GoogleToolbarforFirefox{3.0.20070525W}.xpi
[2010/10/13 06:06:25 | 000,824,129 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FEBE{5.3.1}.xpi
[2010/10/13 06:06:25 | 000,177,408 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\GmailManager{0.5.4}.xpi
[2010/10/13 06:06:25 | 000,137,049 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Fierr{0.4}.xpi
[2010/10/13 06:06:25 | 000,119,345 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Fasterfox{2.0.0}.xpi
[2010/10/13 06:06:25 | 000,115,802 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Greasemonkey{0.7.20080121.0}.xpi
[2010/10/13 06:06:25 | 000,010,830 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FlatBookmarkEditing{0.8.1}.xpi
[2010/10/13 06:06:24 | 000,749,213 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\DownloadStatusbar{0.9.6.1}.xpi
[2010/10/13 06:06:24 | 000,298,024 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\DiccionariodeEspaolEspaa{1.1}.xpi
[2010/10/13 06:06:24 | 000,276,281 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CuteMenus-CrystalSVG{1.9.2}.xpi
[2010/10/13 06:06:24 | 000,207,844 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\DownloadHelper{3.0.3}.xpi
[2010/10/13 06:06:24 | 000,103,797 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\BookmarkDuplicateDetector{0.6.3}.xpi
[2010/10/13 06:06:24 | 000,051,359 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\bug.gdErrorSearch{0.4.1}.xpi
[2010/10/13 06:06:24 | 000,038,443 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CacheView{1.61}.xpi
[2010/10/13 06:06:24 | 000,031,350 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CacheIt{1.0beta1}.xpi
[2010/10/13 06:06:24 | 000,025,310 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CacheViewer{0.4.7}.xpi
[2010/10/13 06:06:24 | 000,023,776 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ContextHighlight{0.3}.xpi
[2010/10/13 06:06:24 | 000,020,101 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\BugMeNot{1.6}.xpi
[2010/10/13 06:06:24 | 000,020,094 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\BugMeNot{1.8}.xpi
[2010/10/13 06:06:23 | 002,070,870 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Win32OpenSSL-v0[1].9.6m.zip
[2010/10/13 06:06:23 | 001,092,374 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\TaringaSuite13.zip
[2010/10/13 06:06:23 | 000,246,710 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\AdblockPlus{0.7.5.4}.xpi
[2010/10/13 06:06:23 | 000,004,939 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ArchiveSearch{0.9.2}.xpi
[2010/10/13 06:06:12 | 077,579,751 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\SodaStereo19octDjMirLo.zip
[2010/10/13 06:06:11 | 005,926,618 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\picasaweb-current-setup.zip
[2010/10/13 06:06:11 | 000,697,087 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\PAD AT0738.zip
[2010/10/13 06:06:11 | 000,041,558 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\pagedfrg.zip
[2010/10/13 06:06:10 | 002,634,620 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\nba live 2006 roster update 02-01-2006.zip
[2010/10/13 06:06:07 | 017,823,917 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\klmcodec380.zip
[2010/10/13 06:06:04 | 013,520,567 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Firefox_Setup_2.0.0.3_X_Edition.zip
[2010/10/13 06:06:03 | 007,082,204 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Firefox Setup 3.0 Beta 4.zip
[2010/10/13 06:06:02 | 002,478,844 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\eMule0.46c.zip
[2010/10/13 06:06:02 | 002,187,302 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ePhot18S Drivers cl18 agfa.zip
[2010/10/13 06:06:02 | 000,081,935 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Enhancer.zip
[2010/10/13 06:06:00 | 006,868,128 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Easy WebTV & Radio v1.3.0 © 2005 Digit-A Software [w-#Serial].zip
[2010/10/13 06:05:54 | 029,373,845 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\BioMessenger86Beta.zip
[2010/10/13 06:05:54 | 000,016,981 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Anti-WODE msn gusano para el movie.zip
[2010/10/13 06:05:53 | 003,028,755 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\aimp_2.11.zip
[2010/10/13 06:05:52 | 003,861,736 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Your Unistaller 2008+keygen.rar
[2010/10/13 06:05:49 | 016,191,618 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\WLM.8.5.1302.1018.AIO.rar
[2010/10/13 06:05:48 | 001,021,212 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\WinZip_Pro_11.1.7466.rar
[2010/10/13 06:05:47 | 009,437,185 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\vlc-0.8.6b-win32.rar
[2010/10/13 06:05:46 | 003,499,273 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\videotodo_ver._2.2.1.0.rar
[2010/10/13 06:05:46 | 000,212,416 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\unlocker1.8.6.rar
[2010/10/13 06:05:44 | 013,470,397 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\TuneUp.Utilities.2008.7.0.7991.Final.Incl.Keygen-REA.rar
[2010/10/13 06:05:36 | 053,060,549 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Traiprim2101l.rar
[2010/10/13 06:05:35 | 001,467,777 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Tar!nvision.rar
[2010/10/13 06:05:32 | 011,595,303 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ssp.rar
[2010/10/13 06:05:32 | 000,528,381 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\speeder.rar
[2010/10/13 06:05:30 | 000,270,736 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\rapget140.rar
[2010/10/13 06:05:04 | 157,825,094 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\R.E.M-Live-2CD-2007-LOSiNGMYRELiGiON.rar
[2010/10/13 06:04:48 | 108,919,470 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\pixies_-_best_of_pixies__wave_of_mutilation.rar
[2010/10/13 06:04:42 | 037,117,280 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\NVIDIA.rar
[2010/10/13 06:04:40 | 010,763,112 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\nfsMW_crack_rev2.rar
[2010/10/13 06:04:39 | 002,680,637 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Mujeralvolante.rar
[2010/10/13 06:04:34 | 033,285,335 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\MOdern Skins_By_JaRA_Dj.rar
[2010/10/13 06:04:34 | 000,903,268 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Microssoft Base Analizer SecurityBSASetup-EN.rar
[2010/10/13 06:04:05 | 156,853,929 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Los Estómagos - Discografía.rar
[2010/10/13 06:03:55 | 042,106,410 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\livegraf0602.rar
[2010/10/13 06:03:46 | 049,295,024 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\La_ Vela_ Puerca_._Que No Se Apague_._ 2006_ _ by Grock_._Uruguay.rar
[2010/10/13 06:03:44 | 011,439,268 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\KMPlayer-2.9.3.1429-ES.EN-P_solenbum.rar
[2010/10/13 06:03:43 | 001,101,186 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Key.rar
[2010/10/13 06:03:40 | 015,131,376 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Internet-Explorer-8beta--WindowsXP-x86.rar
[2010/10/13 06:03:40 | 000,038,562 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Inddex_3.0.1.rar
[2010/10/13 06:03:27 | 056,070,883 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Hiren's.BootCD.7.5.with.Keyboard.rar
[2010/10/13 06:03:27 | 001,014,817 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Foxit Reader.rar
[2010/10/13 06:03:20 | 022,438,248 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Firefox_Setup ULTIMA VERSION TUNEADA .rar
[2010/10/13 06:03:17 | 002,309,017 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ewido-setup POTENTE SCANNER DE VIRUS Y TROYANOS.rar
[2010/10/13 06:03:17 | 001,370,736 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\fakes.rar
[2010/10/13 06:03:11 | 020,101,203 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ESSBE_3.0.645_ES.rar
[2010/10/13 06:03:10 | 002,925,951 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Emule v0.46C Exorzist 2.0 (Leecherclient).rar
[2010/10/13 06:03:09 | 004,549,810 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\eMule v0.46b_Installer and eMule v0.46b upload limit crack by strength^MBE_ICT.rar
[2010/10/13 06:03:02 | 023,951,010 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\dotnetfx.rar
[2010/10/13 06:03:02 | 001,094,291 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Database-Searcher_by_everth21.rar
[2010/10/13 06:03:02 | 000,351,295 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\CustomEmoticons.rar
[2010/10/13 06:02:56 | 024,519,448 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\cuartetodenos-acusticola100mp3-jotase.rar
[2010/10/13 06:02:38 | 001,638,283 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\cambio ip_-_by marquitox.rar
[2010/10/13 06:02:38 | 000,318,898 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\bbcodercoment.rar
[2010/10/13 06:02:36 | 003,893,194 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\am2mp3.rar
[2010/10/13 06:02:36 | 002,038,643 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\ADSLAutoconnect - Pablo_cba.rar
[2010/10/13 06:02:36 | 000,193,877 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Acelerador Del Emule ¡Funciona! Porque Extrae Los Creditos Para Subir Hasta Los 40Kbs De Otros Cl.rar
[2010/10/13 06:01:57 | 001,889,021 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\(((Vgroup.com.ar))).Daemon Tools.v.4.10.x8-32-Bit.(Español).by.Ganimedes.rar
[2010/10/13 06:01:57 | 001,106,123 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\(((Vgroup.com.ar))) Video mp3 Extractor Pro + Serial.rar
[2010/10/13 06:01:55 | 004,419,810 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FHM.-.Las.100.mujeres.más.sexys.del.mundo.2004.by.Err.Willy.(SEDG).pdf
[2010/10/13 06:01:54 | 000,002,873 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\usernames-passwords{default}.fbu
[2010/10/13 06:01:54 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\searchPlugins{default}.fbu
[2010/10/13 06:01:52 | 006,627,708 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\Comfortably Numb.mp3
[2010/10/13 06:01:51 | 003,768,448 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\03. Vamos A Morir.mp3
[2010/10/13 06:01:51 | 002,474,112 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\02. Perro Sediento.mp3
[2010/10/13 06:01:49 | 004,321,408 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\01. Mala Fama.mp3
[2010/10/13 06:01:49 | 000,048,925 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\XPProCorp-keyChanger.exe
[2010/10/13 06:01:49 | 000,003,854 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\todos los contactos.csv
[2010/10/13 06:01:49 | 000,000,128 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\hostperm{default}.1
[2010/10/13 06:01:45 | 000,707,980 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\winamp_lite.exe
[2010/10/13 06:01:40 | 012,777,356 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\nfsmwpatch1.3.exe
[2010/10/13 06:00:55 | 057,116,470 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\condon890502.rar
[2010/10/13 06:00:28 | 136,776,826 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\(((www.eltablado.com.uy))) Catupecu Machu - Laberintos entre aristas y dialectos (2007).rar
[2010/10/13 05:04:56 | 000,129,045 | ---- | C] () -- C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2010/10/13 05:04:56 | 000,064,352 | ---- | C] () -- C:\WINDOWS\System32\drivers\ativmc20.cod
[2010/10/13 05:04:55 | 000,067,866 | ---- | C] () -- C:\WINDOWS\System32\drivers\netwlan5.img
[2010/10/13 03:30:53 | 000,000,769 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Notepad++.lnk
[2010/10/13 01:06:21 | 000,249,939 | R--- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.20101013-010621.backup
[2010/10/13 01:04:28 | 000,026,781 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\5851_1202434179542_1189220038_30625071_3039883_n.jpg
[2010/10/13 01:00:20 | 000,000,967 | ---- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.20101013-010020.backup
[2010/10/13 00:49:21 | 000,008,192 | ---- | C] () -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/10/13 00:00:15 | 000,000,759 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\Aero MSN.lnk
[2010/10/12 23:49:37 | 000,000,792 | ---- | C] () -- C:\WINDOWS\System32\drivers\etc\hosts.20101012-234937.backup
[2010/10/12 23:28:34 | 000,006,136 | ---- | C] () -- C:\WINDOWS\System32\drivers\nvphy.bin
[2010/10/12 23:28:32 | 000,007,090 | ---- | C] () -- C:\WINDOWS\System32\nvnrm.nvu
[2010/10/12 22:08:42 | 000,000,000 | -H-- | C] () -- C:\WINDOWS\System32\drivers\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2010/10/12 20:22:56 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb0.bin
[2010/10/12 20:22:53 | 000,232,968 | ---- | C] () -- C:\WINDOWS\System32\nvdrsdb1.bin
[2010/10/12 20:22:53 | 000,000,001 | ---- | C] () -- C:\WINDOWS\System32\nvdrssel.bin
[2010/10/12 20:22:53 | 000,000,000 | ---- | C] () -- C:\WINDOWS\System32\nvdrswr.lk
[2010/10/12 20:22:05 | 000,007,959 | ---- | C] () -- C:\WINDOWS\System32\nvinfo.pb
[2010/10/12 20:22:02 | 002,195,030 | ---- | C] () -- C:\WINDOWS\System32\nvdata.bin
[2010/10/12 20:21:48 | 000,000,627 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Opera.lnk
[2010/10/12 18:39:03 | 000,012,345 | ---- | C] () -- C:\WINDOWS\System32\pxhelper.vxd
[2010/10/12 18:39:03 | 000,000,123 | ---- | C] () -- C:\WINDOWS\System32\pconfig.dcf
[2010/10/12 18:39:02 | 000,001,651 | ---- | C] () -- C:\WINDOWS\System32\pxhelp20.inf
[2010/10/12 18:39:02 | 000,001,382 | ---- | C] () -- C:\WINDOWS\System32\pxhelper.inf
[2010/10/12 18:34:53 | 000,000,630 | ---- | C] () -- C:\WINDOWS\tasks\Automatische Problemsuche.job
[2010/10/12 18:10:52 | 000,007,718 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\cc_20101012_1810.reg
[2010/10/12 18:01:46 | 000,252,991 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\FHSetup.exe
[2010/10/12 17:58:10 | 001,402,880 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\HiJackThis.msi
[2010/10/12 17:42:23 | 002,672,312 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\esetsmartinstaller_enu.exe
[2010/10/12 17:37:42 | 000,181,156 | ---- | C] () -- C:\Documents and Settings\Administrador\Mis documentos\nod32removal.exe
[2010/10/12 16:57:38 | 000,025,836 | ---- | C] () -- C:\WINDOWS\System32\nvdisp.nvu
[2010/10/12 16:53:50 | 000,000,538 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Adsl.lnk
[2010/10/12 16:40:42 | 000,146,650 | ---- | C] () -- C:\WINDOWS\System32\BuzzingBee.wav
[2010/10/12 16:40:41 | 000,940,794 | ---- | C] () -- C:\WINDOWS\System32\LoopyMusic.wav
[2010/10/12 16:37:11 | 000,000,034 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.log
[2010/10/12 16:37:08 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\inst.exe
[2010/10/12 16:37:08 | 000,007,887 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.cat
[2010/10/12 16:37:08 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.inf
[2010/10/12 16:33:07 | 000,052,319 | ---- | C] () -- C:\WINDOWS\BricoPackUninst.cmd
[2010/10/12 16:33:03 | 002,359,350 | ---- | C] () -- C:\WINDOWS\BricoPack Wallpaper.bmp
[2010/10/12 16:32:38 | 000,005,997 | ---- | C] () -- C:\WINDOWS\BricoPackFoldersDelete.cmd
[2010/10/12 16:29:33 | 000,064,200 | ---- | C] () -- C:\Documents and Settings\LocalService\Configuración local\Datos de programa\FontCache3.0.0.0.dat
[2010/10/12 16:20:56 | 000,008,192 | ---- | C] () -- C:\WINDOWS\REGLOCS.OLD
[2010/10/12 16:19:01 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/10/12 16:18:12 | 000,324,608 | ---- | C] () -- C:\WINDOWS\System32\wget.exe
[2010/10/12 16:18:12 | 000,319,488 | ---- | C] () -- C:\WINDOWS\System32\win-get.exe
[2010/10/12 16:18:12 | 000,313,856 | ---- | C] () -- C:\WINDOWS\System32\rar.exe
[2010/10/12 16:18:12 | 000,070,028 | ---- | C] () -- C:\WINDOWS\System32\oemlogo.bmp
[2010/10/12 16:18:12 | 000,026,013 | ---- | C] () -- C:\WINDOWS\System32\sleep.exe
[2010/10/12 16:18:12 | 000,012,800 | ---- | C] () -- C:\WINDOWS\System32\delage32.exe
[2010/10/12 16:18:12 | 000,005,447 | ---- | C] () -- C:\WINDOWS\System32\choice.com
[2010/10/12 16:18:12 | 000,000,209 | ---- | C] () -- C:\WINDOWS\System32\oeminfo.ini
[2010/10/12 16:17:58 | 000,715,248 | ---- | C] () -- C:\WINDOWS\System32\drivers\sptd.sys
[2010/10/12 16:17:51 | 000,002,909 | ---- | C] () -- C:\WINDOWS\System32\CONFIG.NT
[2010/10/12 16:17:51 | 000,000,000 | RHS- | C] () -- C:\MSDOS.SYS
[2010/10/12 16:17:51 | 000,000,000 | RHS- | C] () -- C:\IO.SYS
[2010/10/12 16:17:51 | 000,000,000 | ---- | C] () -- C:\CONFIG.SYS
[2010/10/12 16:17:51 | 000,000,000 | ---- | C] () -- C:\AUTOEXEC.BAT
[2010/10/12 16:17:44 | 000,023,392 | ---- | C] () -- C:\WINDOWS\System32\nscompat.tlb
[2010/10/12 16:17:44 | 000,016,832 | ---- | C] () -- C:\WINDOWS\System32\amcompat.tlb
[2010/10/12 16:17:43 | 000,316,640 | ---- | C] () -- C:\WINDOWS\WMSysPr9.prx
[2010/10/12 16:15:05 | 000,021,900 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/10/12 16:14:18 | 000,003,286 | ---- | C] () -- C:\WINDOWS\System32\tslabels.h
[2010/10/12 16:14:18 | 000,001,161 | ---- | C] () -- C:\WINDOWS\System32\usrlogon.cmd
[2010/10/12 16:14:17 | 000,000,768 | ---- | C] () -- C:\WINDOWS\System32\msdtcprf.h
[2010/10/12 16:14:12 | 000,063,488 | ---- | C] () -- C:\WINDOWS\System32\wmimgmt.msc
[2010/10/12 13:01:45 | 000,000,210 | -HS- | C] () -- C:\boot.ini
[2010/10/12 13:01:42 | 000,001,252 | ---- | C] () -- C:\WINDOWS\System32\$winnt$.inf
[2010/10/12 12:08:29 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/10/12 12:08:10 | 000,001,936 | ---- | C] () -- C:\WINDOWS\System32\AUTOEXEC.NT
[2010/10/12 12:03:23 | 000,097,456 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2006/10/22 07:22:00 | 000,581,632 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/10/22 07:22:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll

[color=#E56717]========== LOP Check ==========[/color]

[2010/10/13 04:15:07 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Auslogics
[2010/10/14 01:04:44 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\CometNetwork
[2010/10/12 16:40:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\DAEMON Tools
[2010/10/13 00:40:26 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\foobar2000
[2010/10/12 22:09:10 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Leadertech
[2010/10/12 16:34:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Notepad++
[2010/10/12 18:48:37 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Opera
[2010/10/13 19:19:06 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\PCToolsFirewallPlus
[2010/10/13 19:18:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Spam Monitor
[2010/10/12 18:34:14 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\TuneUp Software
[2010/10/13 18:07:50 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\URSoft
[2010/10/13 23:34:00 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\uTorrent
[2010/10/12 16:37:11 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Vso
[2010/10/14 02:26:03 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Datos de programa\TEMP
[2010/10/12 18:34:58 | 000,000,000 | ---D | M] -- C:\Documents and Settings\All Users\Datos de programa\TuneUp Software
[2010/10/14 01:54:11 | 000,000,630 | ---- | M] () -- C:\WINDOWS\Tasks\Automatische Problemsuche.job
[2010/10/14 01:51:59 | 000,000,342 | ---- | M] () -- C:\WINDOWS\Tasks\GlaryInitialize.job

[color=#E56717]========== Purity Check ==========[/color]



[color=#E56717]========== Custom Scans ==========[/color]


[color=#A23BEC]< %SYSTEMDRIVE%\*.exe >[/color]


[color=#A23BEC]<>[/color]
[2008/01/15 16:14:12 | 016,772,253 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:AGP440.sys
[2008/04/14 08:01:54 | 020,100,698 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:AGP440.sys
[2008/04/14 08:01:54 | 020,100,698 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:AGP440.sys
[2008/04/14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\ServicePackFiles\i386\agp440.sys
[2008/04/14 00:06:40 | 000,042,368 | ---- | M] (Microsoft Corporation) MD5=08FD04AA961BDC77FB983F328334E3D7 -- C:\WINDOWS\system32\drivers\agp440.sys

[color=#A23BEC]<>[/color]
[2008/01/15 16:14:12 | 016,772,253 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp2.cab:atapi.sys
[2008/04/14 08:01:54 | 020,100,698 | ---- | M] () .cab file -- C:\WINDOWS\Driver Cache\i386\sp3.cab:atapi.sys
[2008/04/14 08:01:54 | 020,100,698 | ---- | M] () .cab file -- C:\WINDOWS\ServicePackFiles\i386\sp3.cab:atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\ServicePackFiles\i386\atapi.sys
[2008/04/14 00:10:32 | 000,096,512 | ---- | M] (Microsoft Corporation) MD5=9F3A2F5AA6875C72BF062C712CFA2674 -- C:\WINDOWS\system32\drivers\atapi.sys
[2004/08/03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\$NtServicePackUninstall$\atapi.sys
[2004/08/03 21:59:44 | 000,095,360 | ---- | M] (Microsoft Corporation) MD5=CDFE4411A69C224BD1D11B2DA92DAC51 -- C:\WINDOWS\system32\ReinstallBackups\0004\DriverFiles\i386\atapi.sys

[color=#A23BEC]<>[/color]
[2008/04/14 07:48:22 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2744C713F0217BD8FFD13E2EF731371C -- C:\WINDOWS\ServicePackFiles\i386\eventlog.dll
[2008/04/14 07:48:22 | 000,056,320 | ---- | M] (Microsoft Corporation) MD5=2744C713F0217BD8FFD13E2EF731371C -- C:\WINDOWS\system32\eventlog.dll
[2004/08/19 14:42:08 | 000,055,808 | ---- | M] (Microsoft Corporation) MD5=5696DF4EF09C375CE42FB2DDE1E68AB7 -- C:\WINDOWS\$NtServicePackUninstall$\eventlog.dll

[color=#A23BEC]<>[/color]
[2008/04/17 01:52:06 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=63B1FC244A46EFDF726EA79588A380A2 -- C:\WINDOWS\system32\dllcache\netlogon.dll
[2008/04/17 01:52:06 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=63B1FC244A46EFDF726EA79588A380A2 -- C:\WINDOWS\system32\netlogon.dll
[2004/08/19 14:42:20 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=7FD182B1B80117C353983565D60B1CAF -- C:\WINDOWS\$NtServicePackUninstall$\netlogon.dll
[2008/04/14 07:48:30 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=CD2BBB52DFAAB666B812A51B1E96F2A0 -- C:\WINDOWS\$NtUninstallKB944043-v3$\netlogon.dll
[2008/04/14 07:48:30 | 000,407,040 | ---- | M] (Microsoft Corporation) MD5=CD2BBB52DFAAB666B812A51B1E96F2A0 -- C:\WINDOWS\ServicePackFiles\i386\netlogon.dll

[color=#A23BEC]<>[/color]
[2008/01/15 16:19:59 | 000,100,736 | ---- | M] (NVIDIA Corporation) MD5=C03E15101F6D9E82CD9B0E7D715F5DE3 -- C:\WINDOWS\system32\drivers\NVATABUS.sys

[color=#A23BEC]<>[/color]
[2009/06/30 17:31:18 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=17F915C35450783A446E70693AFA749B -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sataraid\nvgts.sys
[2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sata_ide\nvgts.sys
[2009/06/30 17:31:00 | 000,164,896 | ---- | M] (NVIDIA Corporation) MD5=619D8943725402D1179941FD58574CC8 -- C:\WINDOWS\system32\drivers\nvgts.sys

[color=#A23BEC]<>[/color]
[2009/06/30 17:31:18 | 000,139,296 | ---- | M] (NVIDIA Corporation) MD5=C0B63B73BC79C48EAF53900E494F6DE9 -- C:\NVIDIA\nForce\15.45\International\IDE\WinXP\sataraid\nvrd32.sys

[color=#A23BEC]<>[/color]
[2008/04/14 07:48:36 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=B6BE3C96CD33336A551DB3F2299A8E69 -- C:\WINDOWS\ServicePackFiles\i386\scecli.dll
[2008/04/14 07:48:36 | 000,185,856 | ---- | M] (Microsoft Corporation) MD5=B6BE3C96CD33336A551DB3F2299A8E69 -- C:\WINDOWS\system32\scecli.dll
[2004/08/19 14:42:24 | 000,184,832 | ---- | M] (Microsoft Corporation) MD5=C6347748F2E9F310EA1E1915482ABFEF -- C:\WINDOWS\$NtServicePackUninstall$\scecli.dll

[color=#A23BEC]< %systemroot%\*. /mp /s >[/color]

[color=#A23BEC]< %systemroot%\system32\*.dll /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\Tasks\*.job /lockedfiles >[/color]

[color=#A23BEC]< %systemroot%\system32\drivers\*.sys /lockedfiles >[/color]
[2010/10/12 16:17:58 | 000,715,248 | ---- | M] ()[b] Unable to obtain MD5[/b] -- C:\WINDOWS\system32\drivers\sptd.sys

[color=#E56717]========== Alternate Data Streams ==========[/color]

@Alternate Data Stream - 95 bytes -> C:\Documents and Settings\All Users\Datos de programa\TEMP:5C321E34
@Alternate Data Stream - 193 bytes -> C:\Documents and Settings\All Users\Datos de programa\TEMP:DFC5A2B2
@Alternate Data Stream - 169 bytes -> C:\Documents and Settings\All Users\Datos de programa\TEMP:B3D74A13
@Alternate Data Stream - 102 bytes -> C:\Documents and Settings\All Users\Datos de programa\TEMP:430C6D84
@Alternate Data Stream - 100 bytes -> C:\Documents and Settings\All Users\Datos de programa\TEMP:C31F31E6

<>

OTL Extras logfile created on: 14/10/2010 02:33:44 a.m. - Run 1
OTL by OldTimer - Version 3.2.15.2 Folder = C:\Documents and Settings\Administrador\Mis documentos\Descargas
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 7.0.5730.11)
Locale: 00002C0A | Country: Argentina | Language: ESS | Date Format: dd/MM/yyyy

895,00 Mb Total Physical Memory | 270,00 Mb Available Physical Memory | 30,00% Memory free
2,00 Gb Paging File | 1,00 Gb Available in Paging File | 68,00% Paging File free
Paging file location(s): C:\pagefile.sys 1344 2688 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 97,65 Gb Total Space | 85,15 Gb Free Space | 87,19% Space Free | Partition Type: NTFS
Drive D: | 55,72 Gb Total Space | 55,60 Gb Free Space | 99,78% Space Free | Partition Type: NTFS

Computer Name: COLOSSUS | User Name: Administrador | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

[color=#E56717]========== Extra Registry (SafeList) ==========[/color]


[color=#E56717]========== File Associations ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.hta [@ = ] -- Reg Error: Key error. File not found
.html [@ = Opera.HTML] -- C:\Archivos de programa\Opera\Opera.exe (Opera Software)

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = FirefoxHTML] -- C:\Archivos de programa\Mozilla Firefox\firefox.exe (Mozilla Corporation)

[color=#E56717]========== Shell Spawning ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
htmlfile [edit] -- Reg Error: Key error.
http [open] -- "C:\Archivos de programa\Opera\Opera.exe" (Opera Software)
https [open] -- "C:\Archivos de programa\Opera\Opera.exe" (Opera Software)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l (Microsoft Corporation)
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Winamp.Bookmark] -- "C:\Archivos de programa\Winamp\Winamp.exe" /BOOKMARK "%1" (Nullsoft)
Directory [Winamp.Enqueue] -- "C:\Archivos de programa\Winamp\Winamp.exe" /ADD "%1" (Nullsoft)
Directory [Winamp.Play] -- "C:\Archivos de programa\Winamp\Winamp.exe" "%1" (Nullsoft)
Folder [open] -- %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

[color=#E56717]========== Security Center Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirewallDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

[color=#E56717]========== System Restore Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 4

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

[color=#E56717]========== Firewall Settings ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0
"DisableUnicastResponsesToMulticastBroadcast" = 0

[color=#E56717]========== Authorized Applications List ==========[/color]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Archivos de programa\Opera\opera.exe" = C:\Archivos de programa\Opera\opera.exe:*:Enabled:Opera Internet Browser -- (Opera Software)
"C:\Archivos de programa\uTorrent\utorrent.exe" = C:\Archivos de programa\uTorrent\utorrent.exe:*:Enabled:µTorrent -- (BitTorrent, Inc.)


[color=#E56717]========== HKEY_LOCAL_MACHINE Uninstall List ==========[/color]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{21DBBDD6-93A5-4326-9A04-C9A5C9148502}" = Norton PartitionMagic
"{2624B969-7135-4EB1-B0F6-2D8C397B45F7}_is1" = Media Player Classic - Home Cinema v1.4.2499.0
"{26A24AE4-039D-4CA4-87B4-2F83216020F0}" = Java(TM) 6 Update 20
"{26A24AE4-039D-4CA4-87B4-2F83216021FF}" = Java(TM) 6 Update 21
"{2BA00471-0328-3743-93BD-FA813353A783}" = Microsoft .NET Framework 3.0 Service Pack 1
"{2FC099BD-AC9B-33EB-809C-D332E1B27C40}" = Microsoft .NET Framework 3.5
"{3248F0A8-6813-11D6-A77B-00B0D0160030}" = Java(TM) 6 Update 3
"{350C9C0A-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3EE9BCAE-E9A9-45E5-9B1C-83A4D357E05C}" = eReg
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{5CCEE3CA-03EC-11DA-BFBD-00065BBDC0B5}" = MSN Messenger 7.5
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7D15B945-2725-4443-AB3F-D900556612FE}" = User Profile Hive Cleanup Service
"{87CC8013-56D1-43E1-A0A5-AD406B4EBA95}" = Opera 10.63
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B508B3F1-A24A-32C0-B310-85786919EF28}" = Microsoft .NET Framework 2.0 Service Pack 1
"{B7588D45-AFDC-4C93-9E2E-A100F3554B64}" = Microsoft Fix it Center
"{C59CF2CE-B302-4833-AA35-E0E07D8EBC52}_is1" = SRWare Iron 6.0.475.1
"{c9920352-04e6-469d-bab8-e2b9c7c75415}.sdb" = Microsoft Automated Troubleshooting Services Shim
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{D3742F82-1C1A-4DCC-ABBD-0E7C3C0185CC}" = TuneUp Utilities
"{DF6A13C0-77DF-41FE-BD05-6D5201EB0CE7}_is1" = Auslogics Disk Defrag
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F6095AAF-6E38-4536-AFE0-FC9706575DE2}" = Winamp AudioPlayer
"{FC274982-5AAD-4C20-848D-4424A5043010}_is1" = WinUtilities 9.86 Free Edition
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Aero MSN" = Aero MSN
"AIMP2" = AIMP2
"CCleaner" = CCleaner (remove only)
"CometBird (3.6.10)" = CometBird (3.6.10)
"Comodo Dragon" = Comodo Dragon
"Driver Genius Professional Edition 2007_is1" = Driver Genius Professional Edition 2007
"eMule 0.48a Xtreme 6.1" = eMule 0.48a Xtreme 6.1
"ERUNT_is1" = ERUNT 1.1j
"EVEREST Corporate Edition_is1" = EVEREST Corporate Edition v4.20
"FileHippo.com" = FileHippo.com Update Checker
"foobar2000" = foobar2000 v1.1
"Glary Utilities_is1" = Glary Utilities Pro 2.28.0.1011
"GOM Encoder" = GOM Encoder
"GOM Player" = GOM Player
"GSpot" = GSpot Codec Information Appliance
"IDNMitigationAPIs" = Microsoft Internationalized Domain Names Mitigation APIs
"InstallShield_{21DBBDD6-93A5-4326-9A04-C9A5C9148502}" = Norton PartitionMagic 8.0
"Malwarebytes' Anti-Malware_is1" = Malwarebytes' Anti-Malware
"Microsoft .NET Framework 3.5" = Microsoft .NET Framework 3.5
"MiniLyrics" = Minilyrics(remove only)
"Mozilla Firefox (3.6.10)" = Mozilla Firefox (3.6.10)
"Mz Cpu Accelerator" = Mz Cpu Accelerator
"MzGameAccelerator_is1" = Mz Game Accelerator
"MzServicesManager_is1" = Mz Services Manager
"MzUltimateCleaner_is1" = Mz Ultimate Cleaner
"Nero8Lite_is1" = Nero 8 Lite 8.2.8.0
"NLSDownlevelMapping" = Microsoft National Language Support Downlevel APIs
"Notepad++" = Notepad++
"NVIDIA Drivers" = NVIDIA Drivers
"NVIDIA nView Desktop Manager" = NVIDIA nView Desktop Manager
"Picasa 3" = Picasa 3
"Spyware Doctor" = PC Tools Internet Security 8.0
"SpywareBlaster_is1" = SpywareBlaster 4.4
"StuffPlug-NG" = StuffPlug-NG (Messenger Plus! Plugins)
"Thoosje Windows XP Quick Optimizer" = Thoosje Windows XP Quick Optimizer
"TuneUp Utilities" = TuneUp Utilities
"Unlocker" = Unlocker 1.8.5
"VLC media player" = VideoLAN VLC media player 0.8.6d
"VSO ConvertXtoDVD_is1" = ConvertXtoDVD 2.1.18
"Wdf01009" = Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
"WIC" = Windows Imaging Component
"Winamp" = Winamp (remove only)
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = Compresor WinRAR
"XpsEPSC" = XML Paper Specification Shared Components Pack 1.0
"Your Uninstaller! 2008_is1" = Your Uninstaller! 2008 Version 6.0

[color=#E56717]========== HKEY_CURRENT_USER Uninstall List ==========[/color]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"uTorrent" = µTorrent

[color=#E56717]========== Last 10 Event Log Errors ==========[/color]

[ Application Events ]
Error - 13/10/2010 05:28:21 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:22 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:22 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:23 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:23 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:24 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:24 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 05:28:25 a.m. | Computer Name = COLOSSUS | Source = WmiAdapter | ID = 4099
Description = Error al abrir el servicio.

Error - 13/10/2010 11:35:42 p.m. | Computer Name = COLOSSUS | Source = PerfNet | ID = 2004
Description = No se puede abrir el servicio Servidor. No se devolverán datos de rendimiento
del servidor. El código de error devuelto está en los datos DWORD 0.

Error - 14/10/2010 12:52:05 a.m. | Computer Name = COLOSSUS | Source = PerfNet | ID = 2004
Description = No se puede abrir el servicio Servidor. No se devolverán datos de rendimiento
del servidor. El código de error devuelto está en los datos DWORD 0.

[ System Events ]
Error - 13/10/2010 11:21:39 p.m. | Computer Name = COLOSSUS | Source = Service Control Manager | ID = 7031
Description = El servicio .NET Runtime Optimization Service v2.0.50727_X86 terminó
inesperadamente. Lo ha hecho 1 veces. Se realizará la siguiente acción correctora
en 60000 milisegundos: Reiniciar el servicio.

Error - 13/10/2010 11:36:01 p.m. | Computer Name = COLOSSUS | Source = NETLOGON | ID = 3095
Description = Este equipo ha sido configurado como miembro de un grupo de trabajo
y no como miembro de un dominio. No es necesario ejecutar el servicio de Inicio
de sesión de red en esta configuración.

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Resolve Partial Assembly para Microsoft.Windows.Common-Controls.
Mensaje
de error referencia: El sistema no puede hallar la ruta especificada. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Generate Activation Context para C:\Archivos de programa\NetScream\NetScream.exe.
Mensaje
de error referencia: La operación se ha completado correctamente. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Resolve Partial Assembly para Microsoft.Windows.Common-Controls.
Mensaje
de error referencia: El sistema no puede hallar la ruta especificada. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Generate Activation Context para C:\Archivos de programa\NetScream\NetScream.exe.
Mensaje
de error referencia: La operación se ha completado correctamente. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Resolve Partial Assembly para Microsoft.Windows.Common-Controls.
Mensaje
de error referencia: El sistema no puede hallar la ruta especificada. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Generate Activation Context para C:\Archivos de programa\NetScream\NetScream.exe.
Mensaje
de error referencia: La operación se ha completado correctamente. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Resolve Partial Assembly para Microsoft.Windows.Common-Controls.
Mensaje
de error referencia: El sistema no puede hallar la ruta especificada. .

Error - 14/10/2010 12:15:26 a.m. | Computer Name = COLOSSUS | Source = SideBySide | ID = 16842811
Description = Error en Generate Activation Context para C:\Archivos de programa\NetScream\NetScream.exe.
Mensaje
de error referencia: La operación se ha completado correctamente. .

<>

GMER 1.0.15.15315 - HTTP://WWW.GMER.NET
Rootkit scan 2010-10-14 03:45:33
Windows 5.1.2600 Service Pack 3
Running: 2c3koq1m.exe; Driver: C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\kwrdqpog.sys


---- System - GMER 1.0.15 ----

SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwCreateKey [0xF7029CE0]
SSDT PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcess [0xF713FA96]
SSDT PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwCreateProcessEx [0xF713FD5E]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwDeleteKey [0xF7029F40]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwDeleteValueKey [0xF702A000]
SSDT spzs.sys ZwEnumerateKey [0xF72A6CA2]
SSDT spzs.sys ZwEnumerateValueKey [0xF72A7030]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwOpenKey [0xF7029B80]
SSDT spzs.sys ZwQueryKey [0xF72A7108]
SSDT spzs.sys ZwQueryValueKey [0xF72A6F88]
SSDT PCTCore.sys (PC Tools KDS Core Driver/PC Tools) ZwRenameKey [0xF716291A]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwSetValueKey [0xF702A200]
SSDT TfSysMon.sys (ThreatFire System Monitor/PC Tools) ZwTerminateProcess [0xF702C3A0]

INT 0x62 ? 84B22BF8
INT 0x63 ? 84520BF8
INT 0x73 ? 84AB6F00
INT 0x83 ? 84AB6F00

---- Kernel code sections - GMER 1.0.15 ----

? spzs.sys El sistema no puede hallar el archivo especificado. !
.text KSecDD.sys!UnsealMessage + FFFF6156 F6FFB3BA 1 Byte [A0]
.text KSecDD.sys!KSecRegisterSecurityProvider + B F6FFB9E9 1 Byte [E4]
.text KSecDD.sys!KSecRegisterSecurityProvider + 19 F6FFB9F7 1 Byte [A8]
.text KSecDD.sys!KSecRegisterSecurityProvider + 25 F6FFBA03 1 Byte [9C]
.text KSecDD.sys!KSecRegisterSecurityProvider + 46 F6FFBA24 1 Byte [A0]
.text KSecDD.sys!KSecRegisterSecurityProvider + 4F F6FFBA2D 1 Byte [9C]
.text ...
.text KSecDD.sys!SecSetPagingMode + 9 F6FFBD33 1 Byte [B0]
.text KSecDD.sys!SecSetPagingMode + 1D F6FFBD47 1 Byte [04]
.text KSecDD.sys!SecSetPagingMode + 23 F6FFBD4D 1 Byte [04]
.text KSecDD.sys!SecSetPagingMode + 36 F6FFBD60 1 Byte [04]
.text KSecDD.sys!SecSetPagingMode + 42 F6FFBD6C 1 Byte [A4]
.text ...
.text KSecDD.sys!GetSecurityUserInfo + 158 F6FFBF66 1 Byte [30]
.text KSecDD.sys!GetSecurityUserInfo + 15D F6FFBF6B 1 Byte [6D]
.text KSecDD.sys!GetSecurityUserInfo + 17B F6FFBF89 1 Byte [0C]
.text KSecDD.sys!SecMakeSPNEx + 763 F6FFC795 1 Byte [9F]
.text KSecDD.sys!SecMakeSPNEx + 76F F6FFC7A1 1 Byte [AB]
.text KSecDD.sys!SecMakeSPNEx + 796 F6FFC7C8 2 Bytes CALL F7003AA8 KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
.text KSecDD.sys!SecMakeSPNEx + 7C9 F6FFC7FB 1 Byte [74]
.text KSecDD.sys!SecMakeSPNEx + 825 F6FFC857 1 Byte [8A]
.text ...
PAGE KSecDD.sys!CredMarshalTargetInfo + 6B1 F7001ACB 1 Byte [0C]
PAGE KSecDD.sys!CredMarshalTargetInfo + 7AC F7001BC6 1 Byte [16]
PAGE KSecDD.sys!CredMarshalTargetInfo + 7BB F7001BD5 1 Byte [6A]
PAGE KSecDD.sys!CredMarshalTargetInfo + 7C0 F7001BDA 1 Byte [24]
PAGE KSecDD.sys!CredMarshalTargetInfo + 7CA F7001BE4 1 Byte [1C]
PAGE ...
PAGE KSecDD.sys!AcquireCredentialsHandleW + 3D F7001F4F 19 Bytes [DF, 89, 5D, F4, 74, 1C, FF, ...]
PAGE KSecDD.sys!AcquireCredentialsHandleW + 51 F7001F63 77 Bytes [85, C0, 7C, 0A, 8B, 73, 08, ...]
PAGE KSecDD.sys!AcquireCredentialsHandleW + BE F7001FD0 7 Bytes [F6, 83, 7D, F4, 00, 74, 08] {TEST BYTE [EBX+0x7400f47d], 0x8}
PAGE KSecDD.sys!AddCredentialsW + C F7002024 1 Byte [0C]
PAGE KSecDD.sys!AddCredentialsW + C F7002024 11 Bytes [0C, 75, 03, 8D, 4D, F0, 3B, ...]
PAGE KSecDD.sys!AddCredentialsW + 18 F7002030 3 Bytes [F8, 56, 8D]
PAGE KSecDD.sys!AddCredentialsW + 1C F7002034 114 Bytes [0C, 56, 51, FF, 75, 20, FF, ...]
PAGE KSecDD.sys!QueryCredentialsAttributesW F70020A8 13 Bytes [CC, CC, CC, CC, 8B, FF, 55, ...]
PAGE KSecDD.sys!QueryCredentialsAttributesW + E F70020B6 148 Bytes [0C, 53, 56, 8B, 75, 14, 33, ...]
PAGE KSecDD.sys!QueryCredentialsAttributesW + A3 F700214B 80 Bytes [85, F6, C7, 45, FC, 30, 00, ...]
PAGE KSecDD.sys!QueryCredentialsAttributesW + F4 F700219C 59 Bytes [76, 49, 8B, 4D, 18, 8B, 41, ...]
PAGE KSecDD.sys!QueryCredentialsAttributesW + 130 F70021D8 46 Bytes [83, E1, FC, 01, 4D, FC, 83, ...]
PAGE ...
PAGE KSecDD.sys!EnumerateSecurityPackagesW + 2 F7002536 3 Bytes [FF, 33, C0]
PAGE KSecDD.sys!EnumerateSecurityPackagesW + 6 F700253A 5 Bytes [C2, 04, 00, CC, CC] {RET 0x4; INT 3 ; INT 3 }
PAGE KSecDD.sys!EnumerateSecurityPackagesW + E F7002542 13 Bytes [8B, FF, 55, 8B, EC, 5D, E9, ...] {MOV EDI, EDI; PUSH EBP; MOV EBP, ESP; POP EBP; JMP 0xffffffffffffea3e; INT 3 ; INT 3 }
PAGE KSecDD.sys!QuerySecurityPackageInfoW + E F7002552 37 Bytes [8B, FF, 55, 8B, EC, 8D, 45, ...]
PAGE KSecDD.sys!LsaEnumerateLogonSessions + C F7002578 84 Bytes [8B, FF, 55, 8B, EC, 81, EC, ...]
PAGE KSecDD.sys!InitializeSecurityContextW + 2B F70025CD 5 Bytes [4D, E0, 8B, 4E, 04]
PAGE KSecDD.sys!InitializeSecurityContextW + 31 F70025D3 133 Bytes [4D, E4, 3B, C3, 8B, 4D, 28, ...]
PAGE KSecDD.sys!InitializeSecurityContextW + B7 F7002659 2 Bytes [5D, A8]
PAGE KSecDD.sys!InitializeSecurityContextW + BA F700265C 1 Byte [BD]
PAGE KSecDD.sys!InitializeSecurityContextW + BF F7002661 30 Bytes [F3, A5, 8B, C8, 8D, 45, CC, ...]
PAGE ...
PAGE KSecDD.sys!AcceptSecurityContext + 2B F7002811 5 Bytes [4D, E0, 8B, 4E, 04]
PAGE KSecDD.sys!AcceptSecurityContext + 31 F7002817 62 Bytes [4D, E4, 3B, C3, 8B, 4D, 1C, ...]
PAGE KSecDD.sys!AcceptSecurityContext + 70 F7002856 32 Bytes [72, 08, 8D, 85, F0, FE, FF, ...]
PAGE KSecDD.sys!AcceptSecurityContext + 91 F7002877 47 Bytes JMP AB45EF7E
PAGE KSecDD.sys!AcceptSecurityContext + C1 F70028A7 56 Bytes [F8, 50, 89, 75, 08, E8, FB, ...]
PAGE ...
PAGE KSecDD.sys!ExportSecurityContext + 2 F7002D38 38 Bytes [75, 0C, FF, 72, 04, FF, 50, ...]
PAGE KSecDD.sys!ExportSecurityContext + 29 F7002D5F 78 Bytes [83, 3D, A8, F3, FF, F6, 00, ...]
PAGE KSecDD.sys!ImportSecurityContextW + 34 F7002DAE 32 Bytes [55, F8, 89, 11, EB, 05, B8, ...]
PAGE KSecDD.sys!ImportSecurityContextW + 55 F7002DCF 134 Bytes [03, 56, 57, 33, D2, BF, 00, ...]
PAGE KSecDD.sys!ImportSecurityContextW + DD F7002E57 28 Bytes [08, 89, 4D, DC, 8B, 4B, 0C, ...]
PAGE KSecDD.sys!ImportSecurityContextW + FA F7002E74 8 Bytes [45, D8, 89, 7D, CC, 89, 75, ...]
PAGE KSecDD.sys!ImportSecurityContextW + 103 F7002E7D 57 Bytes [55, F0, 89, 55, F4, 8D, 5D, ...]
PAGE ...
PAGE KSecDD.sys!SecMakeSPN F70031C0 5 Bytes [CC, CC, CC, CC, 8B]
PAGE KSecDD.sys!SecMakeSPN + 6 F70031C6 25 Bytes [55, 8B, EC, 83, EC, 24, A1, ...]
PAGE KSecDD.sys!SecMakeSPN + 20 F70031E0 82 Bytes [F2, 07, 00, 00, 85, C0, 74, ...]
PAGE KSecDD.sys!SecMakeSPN + 73 F7003233 35 Bytes [F6, C6, 05, 38, F4, FF, F6, ...]
PAGE KSecDD.sys!SecMakeSPN + 97 F7003257 65 Bytes [FF, 55, 8B, EC, 83, EC, 20, ...]
PAGE ...
PAGEMSG KSecDD.sys!ImpersonateSecurityContext + 56 F700509A 6 Bytes [55, 8B, EC, A1, A8, F3]
PAGEMSG KSecDD.sys!ImpersonateSecurityContext + 5D F70050A1 40 Bytes [F6, 85, C0, 75, 07, B8, 01, ...]
PAGEMSG KSecDD.sys!QuerySecurityContextToken + 2 F70050CA 12 Bytes [50, 10, EB, 05, B8, 01, 03, ...] {PUSH EAX; ADC BL, CH; ADD EAX, 0x90301b8; SBB BYTE [EBP-0x3e], 0x10}
PAGEMSG KSecDD.sys!QuerySecurityContextToken + F F70050D7 110 Bytes [CC, CC, CC, CC, CC, 8B, FF, ...]
PAGEMSG KSecDD.sys!QueryContextAttributesW + 1E F7005146 54 Bytes [04, 88, FF, 75, 10, FF, 75, ...]
PAGEMSG KSecDD.sys!QueryContextAttributesW + 55 F700517D 20 Bytes [0A, 3B, 0D, A4, F3, FF, F6, ...]
PAGEMSG KSecDD.sys!QueryContextAttributesW + 6A F7005192 57 Bytes [FF, 72, 04, FF, 50, 1C, EB, ...]
PAGEMSG KSecDD.sys!MakeSignature + 34 F70051CC 85 Bytes [8B, 0D, 30, E4, FF, F6, 53, ...]
PAGEMSG KSecDD.sys!SealMessage + 2 F7005222 10 Bytes [85, C0, 89, 45, 08, 7C, 14, ...] {TEST EAX, EAX; MOV [EBP+0x8], EAX; JL 0x1b; CMP EBX, 0xc}
PAGEMSG KSecDD.sys!SealMessage + D F700522D 8 Bytes [1D, 8B, 0E, 8B, 45, 10, 89, ...]
PAGEMSG KSecDD.sys!SealMessage + 16 F7005236 46 Bytes [4E, 04, 89, 48, 04, EB, 0E, ...]
PAGEMSG KSecDD.sys!UnsealMessage + 1 F7005265 33 Bytes [46, 10, 32, DB, 83, 38, 00, ...]
PAGEMSG KSecDD.sys!UnsealMessage + 23 F7005287 14 Bytes [4E, 08, 75, 02, B3, 01, 8A, ...]
PAGEMSG KSecDD.sys!UnsealMessage + 32 F7005296 17 Bytes [F6, 8B, 45, 0C, 85, C0, 5F, ...]
PAGEMSG KSecDD.sys!UnsealMessage + 44 F70052A8 31 Bytes [CC, CC, CC, CC, 8B, FF, 55, ...]
PAGEMSG KSecDD.sys!UnsealMessage + 64 F70052C8 102 Bytes [4D, 08, 8D, 46, 04, 89, 0E, ...]
PAGEMSG ...
.text USBPORT.SYS!DllUnload F6E868AC 5 Bytes JMP 845201D8
.text C:\WINDOWS\system32\DRIVERS\nv4_mini.sys section is writeable [0xF63EE3A0, 0x59FFE5, 0xE8000020]
.text ah2k9ji5.SYS F6375384 1 Byte [20]
.text ah2k9ji5.SYS F6375384 37 Bytes [20, 00, 00, 68, 00, 00, 00, ...]
.text ah2k9ji5.SYS F63753AA 24 Bytes [00, 00, 20, 00, 00, E0, 00, ...]
.text ah2k9ji5.SYS F63753C4 3 Bytes [00, 00, 00]
.text ah2k9ji5.SYS F63753C9 1 Byte [00]
.text ...

---- User code sections - GMER 1.0.15 ----

? C:\WINDOWS\system32\lsass.exe[1280] C:\WINDOWS\system32\LSASRV.dll image checksum mismatch; time/date stamp mismatch; unknown module: NTDSA.dllunknown module: DNSAPI.dllunknown module: CRYPTUI.dllunknown module: certcli.dllunknown module: PAUTOENR.dllunknown module: MPR.dllunknown module: MSASN1.dllunknown module: NTDSAPI.dll

---- Kernel IAT/EAT - GMER 1.0.15 ----

IAT atapi.sys[HAL.dll!READ_PORT_UCHAR] [F728A046] spzs.sys
IAT atapi.sys[HAL.dll!READ_PORT_BUFFER_USHORT] [F728A142] spzs.sys
IAT atapi.sys[HAL.dll!READ_PORT_USHORT] [F728A0C4] spzs.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_BUFFER_USHORT] [F728A7CE] spzs.sys
IAT atapi.sys[HAL.dll!WRITE_PORT_UCHAR] [F728A6A4] spzs.sys
IAT \SystemRoot\system32\DRIVERS\i8042prt.sys[HAL.dll!READ_PORT_UCHAR] [F7295D7A] spzs.sys
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KfAcquireSpinLock] 000000AD
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!READ_PORT_UCHAR] 000000D4
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KeGetCurrentIrql] 000000A2
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KfRaiseIrql] 000000AF
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KfLowerIrql] 0000009C
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!HalGetInterruptVector] 000000A4
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!HalTranslateBusAddress] 00000072
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KeStallExecutionProcessor] 000000C0
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!KfReleaseSpinLock] 000000B7
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!READ_PORT_BUFFER_USHORT] 000000FD
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!READ_PORT_USHORT] 00000093
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!WRITE_PORT_BUFFER_USHORT] 00000026
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[HAL.dll!WRITE_PORT_UCHAR] 00000036
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[WMILIB.SYS!WmiSystemControl] 000000F7
IAT \SystemRoot\System32\Drivers\ah2k9ji5.SYS[WMILIB.SYS!WmiCompleteRequest] 000000CC
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!AcquireCredentialsHandleW] [F7001EE8] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!SecMakeSPN] [F7003196] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!FreeCredentialsHandle] [F700205A] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!DeleteSecurityContext] [F70024C4] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!InitializeSecurityContextW] [F7002578] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!FreeContextBuffer] [F700252A] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\mrxsmb.sys[ksecdd.sys!QueryContextAttributesW] [F7005028] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!QueryContextAttributesW] [F7005028] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!FreeContextBuffer] [F700252A] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!ImpersonateSecurityContext] [F7004F44] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!DeleteSecurityContext] [F70024C4] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!AcquireCredentialsHandleW] [F7001EE8] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!AddCredentialsW] [F7001FEE] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)
IAT \SystemRoot\system32\DRIVERS\srv.sys[ksecdd.sys!AcceptSecurityContext] [F70027BC] KSecDD.sys (Kernel Security Support Provider Interface/Microsoft Corporation)

---- User IAT/EAT - GMER 1.0.15 ----

IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!SearchPathW] [7C80AA36] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!TlsAlloc] [7C80E77C] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!RaiseException] [7C812E3F] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!QueueUserWorkItem] [7C812AA9] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!CreateTimerQueueTimer] [7C830A6A] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!RegisterWaitForSingleObjectEx] [7C82117D] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!DeleteTimerQueueTimer] [7C82B086] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!UnregisterWaitEx] [7C821130] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!WaitForSingleObjectEx] [7C83006A] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!MapViewOfFileEx] [7C91FF2D] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!VirtualAllocEx] [7C80B936] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [KERNEL32.dll!lstrcmpiW] [7C809B12] C:\WINDOWS\system32\kernel32.dll (DLL de cliente API BASE de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtDeviceIoControlFile] [7C9247E9] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlCopyUnicodeString] [7C9356F2] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlCreateHeap] [7C91D51E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtMapViewOfSection] [7C91DF0E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtUnmapViewOfSection] [7C935F5E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlDestroyHeap] [7C9200C4] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlAllocateHeap] [7C91120E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!DbgBreakPoint] [7C91D60E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtOpenProcessToken] [7C91D92E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtQuerySystemInformation] [7C91D6DE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtPrivilegedServiceAuditAlarm] [7C91D6BE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtPrivilegeCheck] [7C91D5FE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtOpenProcess] [7C91D65E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtOpenThread] [7C91D7FE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtQueryInformationProcess] [7C91DFAE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtWriteVirtualMemory] [7C91D9FE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtReadVirtualMemory] [7C91D3FE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtImpersonateClientOfPort] [7C945176] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlImpersonateSelf] [7C91DF4E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtWaitForSingleObject] [7C91DC8E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtSetInformationObject] [7C91DCBE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtSetInformationToken] [7C91D2AE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtDuplicateToken] [7C923164] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!RtlCopyLuid] [7C91D96E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtQueryValueKey] [7C91D5CE] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\LSASRV.dll [ntdll.dll!NtOpenKey] [7C91D27E] C:\WINDOWS\system32\ntdll.dll (DLL de la capa de Windows NT/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsarQueryInformationPolicy] [753E88E1] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIFree_LSAPR_POLICY_INFORMATION] [753EF3FE] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIHealthCheck] [753F6004] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIGetBootOption] [75447D4E] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaISetBootOption] [75447C1F] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIChangeSecretCipherKey] [7543EDAA] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaILookupWellKnownName] [7544ED4B] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsarSetInformationPolicy] [753F853C] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIRegisterPolicyChangeNotificationCallback] [753EEC5A] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaISafeMode] [753F5BC2] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaISamIndicatedDsStarted] [7544E6BB] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIQueryInformationPolicyTrusted] [753F5B47] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIAuditSamEvent] [754366A5] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIAuditNotifyPackageLoad] [753F5E6D] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaISetSerialNumberPolicy] [7544CC07] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaINotifyChangeNotification] [753FAE92] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsarClose] [753E759C] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIOpenPolicyTrusted] [753F5C04] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)
IAT C:\WINDOWS\system32\lsass.exe[1280] @ C:\WINDOWS\system32\SAMSRV.dll [LSASRV.dll!LsaIRegisterNotification] [753F3C49] C:\WINDOWS\system32\LSASRV.dll (DLL de servidor LSA/Microsoft Corporation)

---- Devices - GMER 1.0.15 ----

Device \FileSystem\Ntfs \Ntfs 84B201F8

AttachedDevice \FileSystem\Ntfs \Ntfs TfFsMon.sys (ThreatFire Filesystem Monitor/PC Tools)
AttachedDevice \Driver\Tcpip \Device\Ip pctgntdi.sys (PC Tools Generic TDI Driver/PC Tools)

Device \Driver\sptd \Device\660033718 spzs.sys
Device \Driver\usbohci \Device\USBPDO-0 844641F8
Device \Driver\usbehci \Device\USBPDO-1 844601F8
Device \Driver\dmio \Device\DmControl\DmIoDaemon 84AB41F8
Device \Driver\dmio \Device\DmControl\DmConfig 84AB41F8
Device \Driver\dmio \Device\DmControl\DmPnP 84AB41F8
Device \Driver\dmio \Device\DmControl\DmInfo 84AB41F8

AttachedDevice \Driver\Tcpip \Device\Tcp pctgntdi.sys (PC Tools Generic TDI Driver/PC Tools)

Device \Driver\NetBT \Device\NetBT_Tcpip_{10019C33-2540-471B-B213-86D94E87D372} 836871F8
Device \Driver\Ftdisk \Device\HarddiskVolume1 84B231F8
Device \Driver\Ftdisk \Device\HarddiskVolume2 84B231F8
Device \Driver\Cdrom \Device\CdRom0 844911F8
Device \Driver\Cdrom \Device\CdRom1 844911F8
Device \Driver\atapi \Device\Ide\IdePort0 [F71BCB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP0T0L0-4 [F71BCB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdePort1 [F71BCB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\atapi \Device\Ide\IdeDeviceP0T1L0-c [F71BCB40] atapi.sys[unknown section] {MOV EDX, [ESP+0x8]; LEA ECX, [ESP+0x4]; PUSH EAX; MOV EAX, ESP; PUSH EAX}
Device \Driver\NetBT \Device\NetBt_Wins_Export 836871F8
Device \Driver\NetBT \Device\NetbiosSmb 836871F8
Device \Driver\PCI_PNP4968 \Device\0000004c spzs.sys

AttachedDevice \Driver\Tcpip \Device\Udp pctgntdi.sys (PC Tools Generic TDI Driver/PC Tools)
AttachedDevice \Driver\Tcpip \Device\RawIp pctgntdi.sys (PC Tools Generic TDI Driver/PC Tools)

Device \Driver\usbohci \Device\USBFDO-0 844641F8
Device \Driver\usbehci \Device\USBFDO-1 844601F8
Device \FileSystem\MRxSmb \Device\LanmanDatagramReceiver 8352E1F8
Device \FileSystem\MRxSmb \Device\LanmanRedirector 8352E1F8
Device \Driver\Ftdisk \Device\FtControl 84B231F8
Device \Driver\nvgts \Device\Scsi\nvgts1 84AB31F8
Device \Driver\nvgts \Device\Scsi\nvgts2 84AB31F8
Device \Driver\ah2k9ji5 \Device\Scsi\ah2k9ji51Port4Path0Target0Lun0 842AA1F8
Device \Driver\ah2k9ji5 \Device\Scsi\ah2k9ji51 842AA1F8
Device \FileSystem\Cdfs \Cdfs 84229500

---- Registry - GMER 1.0.15 ----

Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s1 771343423
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@s2 285507792
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg@h0 1
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Archivos de programa\DAEMON Tools Lite\
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x98 0xD1 0x02 0x38 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xF3 0xE3 0xAC 0x99 ...
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40
Reg HKLM\SYSTEM\CurrentControlSet\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x85 0x53 0xE7 0xC7 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Archivos de programa\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x98 0xD1 0x02 0x38 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xF3 0xE3 0xAC 0x99 ...
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet002\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x85 0x53 0xE7 0xC7 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@p0 C:\Archivos de programa\DAEMON Tools Lite\
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@h0 0
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4@khjeh 0x98 0xD1 0x02 0x38 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@a0 0x20 0x01 0x00 0x00 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001@khjeh 0xF3 0xE3 0xAC 0x99 ...
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40 (not active ControlSet)
Reg HKLM\SYSTEM\ControlSet003\Services\sptd\Cfg\19659239224E364682FA4BAF72C53EA4\00000001\0Jf40@khjeh 0x85 0x53 0xE7 0xC7 ...
Reg HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Prefetcher@TracesProcessed 65
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{3EA97BB7-724D-2DB5-657D-B871A2B78538}
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{3EA97BB7-724D-2DB5-657D-B871A2B78538}@jaaebopfocgdlgchgbhe 0x62 0x61 0x65 0x6E ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{3EA97BB7-724D-2DB5-657D-B871A2B78538}@jaaebopfocgdlgchgbde 0x62 0x61 0x62 0x6E ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{3EA97BB7-724D-2DB5-657D-B871A2B78538}@iaadfcbimakplebapf 0x6B 0x61 0x6A 0x6E ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{3EA97BB7-724D-2DB5-657D-B871A2B78538}@haojdpmdmlipfcjd 0x6B 0x61 0x6A 0x6E ...
Reg HKCU\Software\Microsoft\Windows\CurrentVersion\Shell Extensions\Approved\{44F3D6D0-BE70-D3FC-344C-9B99C8A70B6B}

---- Files - GMER 1.0.15 ----

File C:\WINDOWS\system32\wmpdxm.dll (size mismatch) 286208/314880 bytes executable
File C:\WINDOWS\system32\WMVCore.dll (size mismatch) 2462720/2458112 bytes executable
File C:\WINDOWS\system32\SET134.tmp 149504 bytes executable
File C:\WINDOWS\Temp\TMP1B.tmp (size mismatch) 339520/0 bytes executable
File C:\WINDOWS\wmsetup.log 877 bytes
File C:\WINDOWS\KB973540.log 14452 bytes
File C:\WINDOWS\KB973869.log 17620 bytes
File C:\WINDOWS\KB973904.log 17971 bytes
File C:\WINDOWS\KB978601.log 18015 bytes
File C:\WINDOWS\KB978695.log 13673 bytes
File C:\WINDOWS\$NtUninstallKB2079403$ 0 bytes
File C:\WINDOWS\$NtUninstallKB2079403$\msxml3.dll 1106944 bytes executable
File C:\WINDOWS\$NtUninstallKB2079403$\spuninst 0 bytes
File C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.exe 233848 bytes executable
File C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.inf 9772 bytes
File C:\WINDOWS\$NtUninstallKB2079403$\spuninst\spuninst.txt 365 bytes
File C:\WINDOWS\$NtUninstallKB2079403$\spuninst\updspapi.dll 401272 bytes executable
File C:\WINDOWS\$NtUninstallKB2121546$ 0 bytes
File C:\WINDOWS\$NtUninstallKB2121546$\spuninst 0 bytes
File C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.exe 233848 bytes executable
File C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.inf 9636 bytes
File C:\WINDOWS\$NtUninstallKB2121546$\spuninst\spuninst.txt 316 bytes
File C:\WINDOWS\$NtUninstallKB2121546$\spuninst\updspapi.dll 401272 bytes executable
File C:\WINDOWS\$NtUninstallKB2121546$\winsrv.dll 293888 bytes executable
File C:\WINDOWS\KB956844.log 19098 bytes
File C:\WINDOWS\$NtUninstallKB973507$ 0 bytes
File C:\WINDOWS\$NtUninstallKB973507$\atl.dll 58880 bytes executable
File C:\WINDOWS\$NtUninstallKB973507$\spuninst 0 bytes
File C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.exe 233848 bytes executable
File C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.inf 9314 bytes
File C:\WINDOWS\$NtUninstallKB973507$\spuninst\spuninst.txt 300 bytes
File C:\WINDOWS\$NtUninstallKB973507$\spuninst\updspapi.dll 401272 bytes executable
File C:\WINDOWS\$NtUninstallKB973540_WM9$ 0 bytes
File C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst 0 bytes
File C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.exe 233848 bytes executable
File C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.inf 9128 bytes
File C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\spuninst.txt 399 bytes
File C:\WINDOWS\$NtUninstallKB973540_WM9$\spuninst\updspapi.dll 382840 bytes executable
File C:\WINDOWS\$NtUninstallKB973540_WM9$\wmp.dll 10834944 bytes executable
File C:\WINDOWS\$NtUninstallKB973540_WM9$\wmpdxm.dll 314880 bytes executable

---- EOF - GMER 1.0.15 ----

MALWAREBYTES' ANTI-MALWARE 1.46
WWW.MALWAREBYTES.ORG

Versión de la Base de Datos: 4818

Windows 5.1.2600 Service Pack 3
Internet Explorer 7.0.5730.11

14/10/2010 02:14:58 a.m.
mbam-log-2010-10-14 (02-14-58).txt

Tipos de Análisis: Análisis Rápido
Objetos examinados: 131493
Tiempo transcurrido: 13 minuto(s), 27 segundo(s)

Procesos en Memoria Infectados: 0
Módulos de Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 0
Carpetas Infectadas: 0
Archivos Infectados: 0

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos de Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
(No se han detectado elementos maliciosos)

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Archivos Infectados:
(No se han detectado elementos maliciosos)

---------------------------------------------

eXTRA
LOCKSEARCH BY JPSHORTSTUFF (05.11.09.1)
Log created at 03:47 on 14/10/2010 (Administrador)
Scanning C:\WINDOWS\


C:\WINDOWS\system32\drivers\sptd.sys
-------------------------
C:\WINDOWS\system32\drivers\sptd.sys [Unable to get md5 : 715248 bytes]

-=E.O.F=-