OTL

OTL logfile created on: 13/03/2014 13:06:22 - Run 1
OTL by OldTimer - Version 3.2.69.0

Folder = K:\Documents and Settings\Marian
o\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTW
orkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: Espaa | Language: ESN | Date Format: dd/MM/yyyy
895,23 Mb Total Physical Memory | 237,09 Mb Available Physical Memory | 26,48% M
emory free
2,12 Gb Paging File | 1,47 Gb Available in Paging File | 69,46% Paging File free
Paging file location(s): K:\pagefile.sys 1344 2688 [binary data]
%SystemDrive% = K: | %SystemRoot% = K:\WINDOWS | %ProgramFiles% = K:\Archivos de
programa
Drive C: | 61,52 Gb Total Space | 10,98 Gb Free Space | 17,84% Space Free | Part
ition Type: NTFS
Drive D: | 82,00 Gb Total Space | 66,81 Gb Free Space | 81,48% Space Free | Part
ition Type: NTFS
Drive K: | 465,75 Gb Total Space | 410,12 Gb Free Space | 88,05% Space Free | Pa
rtition Type: NTFS
Computer Name: MARIAN | User Name: Mariano | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelis
t: On | File Age = 30 Days
[color=#E56717]========== Processes (SafeList) ==========[/color]
PRC - K:\Documents and Settings\Mariano\Mis documentos\Downloads\OTL.exe (OldTim
er Tools)
PRC - K:\Documents and Settings\Mariano\Datos de programa\ProtectExtension\prote
ct\ProtectExtension.exe ()
PRC - K:\Archivos de programa\Java\jre7\bin\jqs.exe (Oracle Corporation)
PRC - K:\Archivos de programa\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - K:\Archivos de programa\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - K:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - K:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe (Ora
cle Corporation)
PRC - K:\Archivos de programa\Winamp\winampa.exe (Nullsoft, Inc.)
PRC - K:\Documents and Settings\Mariano\Datos de programa\Octoshape\Octoshape St
reaming Services\OctoshapeClient.exe (Octoshape ApS)
PRC - K:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - K:\WINDOWS\system32\slserv.exe (Smart Link)
[color=#E56717]========== Modules (No Company Name) ==========[/color]
MOD - K:\Archivos de programa\AVAST Software\Avast\defs\14031300\algo.dll ()
MOD - K:\Documents and Settings\Mariano\Datos de programa\ProtectExtension\prote
ct\ProtectExtension.exe ()
MOD - K:\Archivos de programa\Google\Chrome\Application\33.0.1750.146\chrome_elf
.dll ()
MOD - K:\Archivos de programa\AVAST Software\Avast\libcef.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Web\50ea744ffc3cb7f0
9b027fd6c5c93b2b\System.Web.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\a9e71d
da6389403be4db7b567592e3b8\System.ServiceProcess.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Configuration\cb4cb2
1d14767292e079366a5d3d76cd\System.Configuration.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\5b3d04
8d8c003d743ea5e72caf07773a\Microsoft.VisualBasic.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System.Xml\36f3953f24d4f0b7
67bf172331ad6f3e\System.Xml.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\System\aa7926460a336408c804
1330ad90929d\System.ni.dll ()
MOD - K:\WINDOWS\assembly\NativeImages_v2.0.50727_32\mscorlib\9adb89fa22fd5b4ce4
33b5aca7fb1b07\mscorlib.ni.dll ()
MOD - K:\WINDOWS\assembly\GAC_MSIL\System.Management\2.0.0.0__b03f5f7f11d50a3a\S
ystem.Management.dll ()
MOD - K:\Documents and Settings\Mariano\Datos de programa\ProtectExtension\prote
ct\utilsDll.dll ()
MOD - K:\WINDOWS\system32\msdmo.dll ()
[color=#E56717]========== Services (SafeList) ==========[/color]
SRV - (HidServ) -- %SystemRoot%\System32\hidserv.dll File not found
SRV - (srvProtectExtension) -- K:\Documents and Settings\Mariano\Datos de progra
ma\ProtectExtension\protect\ProtectExtension.exe ()
SRV - (JavaQuickStarterService) -- K:\Archivos de programa\Java\jre7\bin\jqs.exe
(Oracle Corporation)
SRV - (avast! Antivirus) -- K:\Archivos de programa\AVAST Software\Avast\AvastSv
c.exe (AVAST Software)
SRV - (SLService) -- K:\WINDOWS\System32\slserv.exe (Smart Link)
[color=#E56717]========== Driver Services (SafeList) ==========[/color]
DRV - (WDICA) -- File not found
DRV - (PDRFRAME) -- File not found
DRV - (PDRELI) -- File not found
DRV - (PDFRAME) -- File not found
DRV - (PDCOMP) -- File not found
DRV - (PCIDump) -- File not found
DRV - (lbrtfdc) -- File not found
DRV - (i2omgmt) -- File not found
DRV - (Changer) -- File not found
DRV - (aswMonFlt) -- K:\WINDOWS\system32\drivers\aswmonflt.sys (AVAST Software)
DRV - (aswSnx) -- K:\WINDOWS\system32\drivers\aswSnx.sys (AVAST Software)
DRV - (aswVmm) -- K:\WINDOWS\System32\drivers\aswVmm.sys ()
DRV - (aswTdi) -- K:\WINDOWS\system32\drivers\aswTdi.sys (AVAST Software)
DRV - (aswSP) -- K:\WINDOWS\system32\drivers\aswSP.sys (AVAST Software)
DRV - (aswRvrt) -- K:\WINDOWS\System32\drivers\aswRvrt.sys ()
DRV - (aswRdr) -- K:\WINDOWS\system32\drivers\aswRdr.sys (AVAST Software)
DRV - (nmwcdnsu) -- K:\WINDOWS\system32\drivers\nmwcdnsu.sys (Nokia)
DRV - (nmwcdc) -- K:\WINDOWS\system32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- K:\WINDOWS\system32\drivers\ccdcmb.sys (Nokia)
DRV - (nmwcdnsuc) -- K:\WINDOWS\system32\drivers\nmwcdnsuc.sys (Nokia)
DRV - (UsbserFilt) -- K:\WINDOWS\system32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) -- K:\WINDOWS\system32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (IntcAzAudAddService) -- K:\WINDOWS\system32\drivers\RtkHDAud.sys (Realtek
Semiconductor Corp.)
DRV - (Monfilt) -- K:\WINDOWS\system32\drivers\Monfilt.sys (Creative Technology
Ltd.)
DRV - (Ambfilt) -- K:\WINDOWS\system32\drivers\Ambfilt.sys (Creative)
DRV - (nvgts) -- K:\WINDOWS\system32\drivers\nvgts.sys (NVIDIA Corporation)
DRV - (nvnetbus) -- K:\WINDOWS\system32\drivers\nvnetbus.sys (NVIDIA Corporation
)
DRV - (NVENETFD) -- K:\WINDOWS\system32\drivers\NVENETFD.sys (NVIDIA Corporation
)
DRV
DRV
DRV
DRV
DRV
DRV
DRV
DRV
DRV
DRV
(SlNtHal) -- K:\WINDOWS\system32\drivers\slnthal.sys (Smart Link)

(SlWdmSup) -- K:\WINDOWS\system32\drivers\slwdmsup.sys (Smart Link)
(Slntamr) -- K:\WINDOWS\system32\drivers\slntamr.sys (Smart Link)
(RecAgent) -- K:\WINDOWS\system32\drivers\RecAgent.sys (Smart Link)
(NtMtlFax) -- K:\WINDOWS\system32\drivers\ntmtlfax.sys (Smart Link)
(Mtlmnt5) -- K:\WINDOWS\system32\drivers\mtlmnt5.sys (Smart Link)
(Mtlstrm) -- K:\WINDOWS\system32\drivers\mtlstrm.sys (Smart Link)
(AsIO) -- K:\WINDOWS\system32\drivers\AsIO.sys ()
(nvata) -- K:\WINDOWS\system32\drivers\nvata.sys (NVIDIA Corporation)
(MTsensor) -- K:\WINDOWS\system32\drivers\ASACPI.sys ()
[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

[color=#E56717]========== Internet Explorer ==========[/color]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://ww
w.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = http://
www.google.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\sy
stem32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://www.goo
gle.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.goog
le.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,CustomizeSearch = http://w
ww.google.com/
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://w
ww.google.com/
IE - HKLM\..\SearchScopes,DefaultScope =
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http:/
/www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "
ProxyEnable" = 0
IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "
ProxyEnable" = 0
IE - HKU\S-1-5-21-606747145-179605362-682003330-1003\SOFTWARE\Microsoft\Internet
Explorer\Main,Default_Page_URL = http://www.google.com
Explorer\Main,Default_Search_URL = http://www.google.com
Explorer\Main,Search Page = http://www.google.com
Explorer\Main,Start Page = http://www.google.com
IE - HKU\S-1-5-21-606747145-179605362-682003330-1003\..\SearchScopes,DefaultScop
e =
IE - HKU\S-1-5-21-606747145-179605362-682003330-1003\Software\Microsoft\Windows\
CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== FireFox ==========[/color]
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.51.2: K:\Archivo
s de programa\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.51.2: K:\Archi
vos de programa\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: K:\
Archivos de programa\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: K:\
Archivos de programa\Google\Update\1.3.22.5\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: K:\Archivos de programa\Adobe\Re
ader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@octoshape.com/Octoshape Streaming Services,ve
rsion=1.0: K:\Documents and Settings\Mariano\Datos de programa\Octoshape\Octosha
pe Streaming Services\sua-1103234-0-npoctoshape.dll (Octoshape ApS)
[color=#E56717]========== Chrome ==========[/color]

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerm
s}&{google:RLZ}{google:originalQueryForSuggestion}{google:assistedQueryStats}{go
ogle:searchFieldtrialParameter}{google:bookmarkBarPinned}{google:searchClient}{g
oogle:sourceId}{google:instantExtendedEnabledParameter}{google:omniboxStartMargi
nParameter}ie={inputEncoding}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{goog
le:searchFieldtrialParameter}client={google:suggestClient}&gs_ri={google:suggest
Rid}&xssi=t&q={searchTerms}&{google:cursorPosition}{google:currentPageUrl}{googl
e:pageClassification}sugkey={google:suggestAPIKeyParameter},
CHR - homepage: http://www.google.com
CHR - plugin: Error reading preferences file
CHR - Extension: Google Drive = K:\Documents and Settings\Mariano\Configuracin lo
cal\Datos de programa\Google\Chrome\User Data\Default\Extensions\apdfllckaahabaf
ndbhieahigkjlhalf\6.3_0\
CHR - Extension: YouTube = K:\Documents and Settings\Mariano\Configuracin local\D
atos de programa\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhk
bfbldkacnbeo\4.2.6_0\
CHR - Extension: Bsqueda de Google = K:\Documents and Settings\Mariano\Configuracin
local\Datos de programa\Google\Chrome\User Data\Default\Extensions\coobgpohoikk
iipiblmjeljniedjpjpf\0.0.0.20_0\
CHR - Extension: BaseFlash = K:\Documents and Settings\Mariano\Configuracin local
\Datos de programa\Google\Chrome\User Data\Default\Extensions\fhokfmhpdoppcompkl
kineedkmhinhdf\1.0_0\
CHR - Extension: AdBlock = K:\Documents and Settings\Mariano\Configuracin local\D
atos de programa\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocna
mgkkbiglidom\2.6.25_1\
CHR - Extension: Google Wallet = K:\Documents and Settings\Mariano\Configuracin l
ocal\Datos de programa\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdl
dgiimedpiccmgmieda\0.0.6.1_0\
CHR - Extension: Gmail = K:\Documents and Settings\Mariano\Configuracin local\Dat
os de programa\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdi
jeoejaedia\7_1\
O1 HOSTS File: ([2008/04/14 09:00:00 | 000,000,792 | ---- | M]) - K:\WINDOWS\sys
tem32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1
localhost
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

- K:\Archivos de programa\Java\jre7\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (BaseFlash Object) - {C68AE9C0-0909-4DDC-B661-C1AFB9F5AE53} - K:\Docum
ents and Settings\Mariano\Datos de programa\BaseFlash\IE\BaseFlash.dll ()
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A
9} - K:\Archivos de programa\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
O4 - HKLM..\Run: [Adobe ARM] K:\Archivos de programa\Archivos comunes\Adobe\ARM\
1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [AvastUI.exe] K:\Archivos de programa\AVAST Software\Avast\Avas
tUI.exe (AVAST Software)
O4 - HKLM..\Run: [NvCplDaemon] K:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation
)
O4 - HKLM..\Run: [NvMediaCenter] K:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corpor
ation)
O4 - HKLM..\Run: [nwiz] K:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [SunJavaUpdateSched] K:\Archivos de programa\Archivos comunes\J
ava\Java Update\jusched.exe (Oracle Corporation)
O4 - HKLM..\Run: [WinampAgent] K:\Archivos de programa\Winamp\winampa.exe (Nulls
oft, Inc.)
O4 - HKU\S-1-5-21-606747145-179605362-682003330-1003..\Run: [Octoshape Streaming
Services] K:\Documents and Settings\Mariano\Datos de programa\Octoshape\Octosha
pe Streaming Services\OctoshapeClient.exe (Octoshape ApS)
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: N
oDriveTypeAutoRun = 145
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: N
O7 - HKU\S-1-5-21-606747145-179605362-682003330-1003\SOFTWARE\Microsoft\Windows\
CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://download.macromedia.com
/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.42.4.207 2
00.49.130.44 192.168.1.254
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F0567841-E746-4603-B
380-9AA155673A9A}: DhcpNameServer = 200.42.4.207 200.49.130.44 192.168.1.254
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - K
:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Cor
poration)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61}
- K:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft
Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - K:
\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corp
oration)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - K:\WINDOWS\explorer.exe (Microsoft
Corporation)
O20 - HKLM Winlogon: UserInit - (K:\WINDOWS\system32\userinit.exe) - K:\WINDOWS\
system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi pgina de inicio actual) - About:Home
O24 - Desktop WallPaper: K:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O24 - Desktop BackupWallPaper: K:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013/07/18 02:04:18 | 000,000,000 | ---- | M] () - C:\AUTO
EXEC.BAT -- [ NTFS ]
O33 - MountPoints2\{fd4c9f98-a105-11e3-9bf7-002354b9d23a}\Shell - "" = Autorun
O33 - MountPoints2\{fd4c9f98-a105-11e3-9bf7-002354b9d23a}\Shell\AutoRun\command
- "" = Nokia_Suite_Light_Installer.exe
O34
O35
O35
O37
O37
O38
O38
HKLM BootExecute: (autocheck autochk *)

HKLM\..comfile [open] -- "%1" %*
HKLM\..exefile [open] -- "%1" %*
HKLM\...com [@ = comfile] -- "%1" %*
HKLM\...exe [@ = exefile] -- "%1" %*
SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
NetSvcs:
NetSvcs:
NetSvcs:
NetSvcs:
NetSvcs:
NetSvcs:
NetSvcs:
NetSvcs:
6to4 - File not found

HidServ - %SystemRoot%\System32\hidserv.dll File not found
Ias - File not found
Iprip - File not found
Irmon - File not found
NWCWorkstation - File not found
Nwsapagent - File not found
WmdmPmSp - File not found
CREATERESTOREPOINT
Restore point Set: OTL Restore Point
[color=#E56717]========== Files/Folders - Created Within 30 Days ==========[/col
or]
[2014/03/13 12:53:47 | 000,000,000 | ---D | C] -- K:\AdwCleaner
[2014/03/12 23:48:16 | 000,000,000 | ---D | C] -- K:\Documents and Settings\Mari
ano\Datos de programa\BaseFlash
ano\Datos de programa\Malwarebytes
[2014/03/12 22:17:48 | 000,000,000 | ---D | C] -- K:\Documents and Settings\All
Users\Men Inicio\Programas\Malwarebytes' Anti-Malware
Users\Datos de programa\Malwarebytes
[2014/03/12 22:17:43 | 000,022,856 | ---- | C] (Malwarebytes Corporation) -- K:\
WINDOWS\System32\drivers\mbam.sys
[2014/03/12 22:17:42 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Malwar
ebytes' Anti-Malware
[2014/03/10 17:32:28 | 000,000,000 | ---D | C] -- K:\Mariano
[2014/03/10 17:10:48 | 000,000,000 | ---D | C] -- K:\Documents and Settings\Loca
lService\Datos de programa\McAfee
[2014/03/08 12:31:28 | 000,000,000 | RH-D | C] -- K:\Documents and Settings\Mari
ano\Recent
Users\Men Inicio\Programas\CCleaner
[2014/03/08 12:27:58 | 000,000,000 | ---D | C] -- K:\Archivos de programa\CClean
er
Users\Datos de programa\McAfee
[2014/03/07 15:12:30 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Archiv
os comunes\Adobe
[2014/03/07 15:12:30 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Adobe
Users\Datos de programa\Adobe
ano\Configuracin local\Datos de programa\Adobe
ano\Configuracin local\Datos de programa\Sun
[2014/03/05 19:06:30 | 000,000,000 | ---D | C] -- K:\WINDOWS\Sun
Users\Datos de programa\Sun

os comunes\Java
Users\Men Inicio\Programas\Java
[2014/03/05 19:03:31 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Java
ano\Datos de programa\Sun
ano\Configuracin local\Datos de programa\Octoshape
ano\Datos de programa\Mozilla
ano\Datos de programa\Octoshape
[2014/03/01 17:46:52 | 000,000,000 | -HSD | C] -- K:\RECYCLER
Users\Datos de programa\Nokia
[2014/03/01 04:26:54 | 000,008,576 | ---- | C] (Nokia) -- K:\WINDOWS\System32\dr
ivers\nmwcdnsuc.sys
ivers\nmwcdnsu.sys
ivers\usbser_lowerfltj.sys
ivers\usbser_lowerflt.sys
ivers\ccdcmbo.sys
[2014/03/01 04:26:44 | 000,605,696 | ---- | C] (Nokia) -- K:\WINDOWS\System32\nm
wcdcocls.dll
ivers\ccdcmb.sys
[2014/03/01 04:26:43 | 000,123,904 | ---- | C] (Nokia) -- K:\WINDOWS\System32\cc
dcmbwu.dll
[2014/03/01 04:26:40 | 000,075,264 | ---- | C] (Nokia) -- K:\WINDOWS\System32\nm
wcdcls.dll
[2014/03/01 04:25:57 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\DRVSTORE
os comunes\Nokia
[2014/03/01 04:23:28 | 000,035,892 | ---- | C] (Prolific Technology Inc.) -- K:\
WINDOWS\System32\SER9PL.sys
[2014/03/01 04:21:11 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Nokia
Users\Men Inicio\Programas\Phoenix
ano\Datos de programa\WinRAR
[2014/03/01 03:49:21 | 000,000,000 | ---D | C] -- K:\Nueva carpeta
ano\Men Inicio\Programas\WinRAR
Users\Men Inicio\Programas\WinRAR
[2014/03/01 03:48:15 | 000,000,000 | ---D | C] -- K:\Archivos de programa\WinRAR
ano\Men Inicio\Programas\BS.Player
ano\Datos de programa\BSplayer Pro
ano\Datos de programa\BSplayer
[2014/03/01 03:03:20 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Webteh
ano\Datos de programa\uTorrent
Users\Men Inicio\Programas\Google Chrome

[2014/02/28 13:29:26 | 000,000,000 | ---D | C] -- K:\Estadistica Basica
ano\Men Inicio\Programas\PokerStars
[2014/02/28 12:10:42 | 000,000,000 | ---D | C] -- K:\Archivos de programa\PokerS
tars
ano\Datos de programa\AVAST Software
Users\Men Inicio\Programas\Avast
[2014/02/28 11:52:53 | 000,775,952 | ---- | C] (AVAST Software) -- K:\WINDOWS\Sy
stem32\drivers\aswSnx.sys
stem32\drivers\aswSP.sys
stem32\drivers\aswTdi.sys
stem32\drivers\aswmonflt.sys
stem32\drivers\aswRdr.sys
stem32\aswBoot.exe
[2014/02/28 11:52:41 | 000,043,152 | ---- | C] (AVAST Software) -- K:\WINDOWS\av
astSS.scr
[2014/02/28 11:51:28 | 000,000,000 | ---D | C] -- K:\Archivos de programa\AVAST
Software
ano\Mis documentos\810amrcnr.zip
[2014/02/28 10:05:29 | 000,000,000 | ---D | C] -- K:\La posta
ano\Configuracin local\Datos de programa\Deployment
lService\Configuracin local\Datos de programa\Google
[2014/02/28 09:34:21 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\Lang
[2014/02/28 09:27:42 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\RTCOM
[2014/02/28 09:27:19 | 000,359,016 | ---- | C] (Realtek Semiconductor Crop.) -K:\WINDOWS\vncutil.exe
[2014/02/28 09:27:07 | 000,129,640 | ---- | C] (Realtek Semiconductor) -- K:\WIN
DOWS\RtkAudioService.exe
[2014/02/28 09:26:55 | 002,815,592 | ---- | C] (RealTek Semicoductor Corp.) -- K
:\WINDOWS\ALCWZRD.EXE
[2014/02/28 09:26:55 | 001,691,480 | ---- | C] (Creative) -- K:\WINDOWS\System32
\drivers\Ambfilt.sys
[2014/02/28 09:26:55 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Realte
k
ano\Datos de programa\ProtectExtension
ano\Datos de programa\sweet-page
ano\Configuracin local\Datos de programa\temp
[2014/02/27 23:08:12 | 000,000,000 | R-SD | C] -- K:\WINDOWS\assembly
[2014/02/27 23:07:11 | 000,000,000 | ---D | C] -- K:\WINDOWS\Microsoft.NET
[2014/02/27 23:04:33 | 000,000,000 | ---D | C] -- K:\Archivos de programa\ASUS
ano\Mis documentos\Downloads
[2014/02/27 22:55:39 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Google
ano\Configuracin local\Datos de programa\Google
ano\Mis documentos\DriverGenius
Users\Men Inicio\Programas\Driver Genius Professional Edition
Users\Datos de programa\AVAST Software
[2014/02/27 22:43:54 | 000,000,000 | -H-D | C] -- K:\Archivos de programa\Instal
lShield Installation Information
os comunes\InstallShield
[2014/02/27 22:39:48 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\ReinstallB
ackups
Users\Men Inicio\Programas\Winamp
[2014/02/27 22:38:52 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Winamp
Detect
ano\Men Inicio\Programas\Aplicacin para detectar Winamp
ano\Datos de programa\Winamp
[2014/02/27 22:37:41 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Winamp
[2014/02/27 22:37:16 | 000,000,000 | ---D | C] -- K:\WINDOWS\nview
ano\Datos de programa\InstallShield
ano\Datos de programa\Identities
[2014/02/27 14:05:01 | 000,000,000 | -H-D | C] -- K:\Archivos de programa\Uninst
all Information
[2014/02/27 14:04:57 | 000,000,000 | R--D | C] -- K:\Documents and Settings\Mari
ano\Mis documentos\Mis imgenes
ano\Mis documentos\Mi msica
[2014/02/27 14:04:52 | 000,000,000 | --SD | C] -- K:\Documents and Settings\Mari
ano\Datos de programa\Microsoft
[2014/02/27 14:04:52 | 000,000,000 | --SD | C] -- K:\Documents and Settings\Mari
ano\Cookies
ano\SendTo
ano\Datos de programa
ano\Mis documentos
ano\Men Inicio
ano\Men Inicio\Programas\Inicio
ano\Favoritos
ano\Men Inicio\Programas\Accesorios
[2014/02/27 14:04:52 | 000,000,000 | -H-D | C] -- K:\Documents and Settings\Mari
ano\Plantillas
ano\Impresoras
ano\Entorno de red
ano\Configuracin local
ano\Configuracin local\Datos de programa\Microsoft
ano\Escritorio
[2014/02/27 14:03:12 | 000,000,000 | ---D | C] -- K:\WINDOWS\SoftwareDistributio
n
[2014/02/27 14:03:11 | 000,000,000 | ---D | C] -- K:\WINDOWS\Prefetch
[2014/02/27 14:03:09 | 000,000,000 | --SD | C] -- K:\WINDOWS\System32\Microsoft
lService\Configuracin local\Datos de programa\Microsoft
[2014/02/27 14:03:08 | 000,000,000 | --SD | C] -- K:\Documents and Settings\Loca
lService\Datos de programa\Microsoft
[2014/02/27 14:02:48 | 000,000,000 | ---D | C] -- K:\Documents and Settings\Netw
orkService\Configuracin local\Datos de programa\Microsoft
[2014/02/27 14:02:46 | 000,000,000 | --SD | C] -- K:\Documents and Settings\Netw
orkService\Datos de programa\Microsoft
[2014/02/27 14:00:36 | 000,080,896 | ---- | C] (Ricoh Co., Ltd.) -- K:\WINDOWS\S
ystem32\dllcache\rwia330.dll
ystem32\dllcache\rwia001.dll
ystem32\dllcache\rw330ext.dll
[2014/02/27 13:58:47 | 000,054,528 | ---- | C] (Philips Semiconductors GmbH) -K:\WINDOWS\System32\dllcache\cap7146.sys
[2014/02/27 13:58:06 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\xircom
[2014/02/27 13:58:06 | 000,000,000 | ---D | C] -- K:\Archivos de programa\xerox
[2014/02/27 13:58:06 | 000,000,000 | ---D | C] -- K:\Archivos de programa\micros
oft frontpage
[2014/02/27 13:54:43 | 000,000,000 | -HSD | C] -- K:\Documents and Settings\All
Users\DRM
[2014/02/27 13:54:25 | 000,000,000 | --SD | C] -- K:\WINDOWS\Downloaded Program
Files
[2014/02/27 13:54:25 | 000,000,000 | R--D | C] -- K:\WINDOWS\Offline Web Pages
[2014/02/27 13:54:08 | 000,000,000 | -H-D | C] -- K:\Archivos de programa\Window
sUpdate
[2014/02/27 13:53:55 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Servic
ios en lnea
[2014/02/27 13:53:27 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\DirectX
os comunes\Services
[2014/02/27 13:53:06 | 000,000,000 | --SD | C] -- K:\WINDOWS\Tasks
os comunes\MSSoap
[2014/02/27 13:53:01 | 000,000,000 | ---D | C] -- K:\WINDOWS\srchasst
[2014/02/27 13:53:00 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\Macromed
[2014/02/27 13:52:50 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Movie
Maker
[2014/02/27 13:52:25 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\Restore
[2014/02/27 13:52:20 | 000,000,000 | ---D | C] -- K:\Archivos de programa\NetMee
ting
[2014/02/27 13:52:14 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Outloo
k Express
os comunes\System
[2014/02/27 13:52:01 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Intern
et Explorer
[2014/02/27 13:51:59 | 000,000,000 | R--D | C] -- K:\Documents and Settings\All
Users\Documentos\Mis imgenes
Users\Men Inicio\Programas\Juegos
[2014/02/27 13:50:37 | 000,000,000 | ---D | C] -- K:\Archivos de programa\ComPlu
s Applications
Users\Men Inicio\Programas\Herramientas administrativas

[2014/02/27 13:50:13 | 000,000,000 | ---D | C] -- K:\WINDOWS\Registration
Users\Documentos\Mi msica
[2014/02/27 13:49:47 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Window
s Media Player
[2014/02/27 13:49:47 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Online
Services
[2014/02/27 13:49:30 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Messen
ger
[2014/02/27 13:49:26 | 000,000,000 | ---D | C] -- K:\Archivos de programa\MSN Ga
ming Zone
[2014/02/27 13:49:02 | 000,000,000 | ---D | C] -- K:\WINDOWS\Cursores
[2014/02/27 13:48:39 | 000,000,000 | ---D | C] -- K:\Archivos de programa\MSN
[2014/02/27 13:48:38 | 000,284,160 | ---- | C] (Cinematronics) -- K:\WINDOWS\Sys
tem32\dllcache\pinball.exe
[2014/02/27 13:48:37 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Window
s NT
[2014/02/27 13:48:33 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\MsDtc
[2014/02/27 13:48:32 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\Com
Users\Documentos\Mis vdeos
Users\Men Inicio\Programas\Accesorios
[2014/02/27 10:26:15 | 000,000,000 | R-SD | C] -- K:\WINDOWS\Fonts
[2014/02/27 10:26:15 | 000,000,000 | RHSD | C] -- K:\WINDOWS\System32\dllcache
[2014/02/27 10:26:15 | 000,000,000 | R--D | C] -- K:\WINDOWS\Web
[2014/02/27 10:26:15 | 000,000,000 | -H-D | C] -- K:\WINDOWS\inf
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\WinSxS
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\wins
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\wbem
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\usmt
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\twain_32
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\Temp
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\system32
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\system
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\spool
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\ShellExt
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\Setup
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\security
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\Resources
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\repair
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\ras
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\Provisioning
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\PeerNet
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\pchealth
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\oobe
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\npp
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\Network Diagnostic
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\mui
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\mui
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\msapps
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\msagent
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\Media
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\L2Schemas
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\java
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\inetsrv
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\System32\IME
[2014/02/27 10:26:15 | 000,000,000 | ---D | C] -- K:\WINDOWS\ime
[2014/02/27 10:26:15 | 000,000,000

[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
c
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
sdn
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 10:26:15 | 000,000,000
[2014/02/27 09:35:26 | 000,000,000
[2014/02/27 09:35:23 | 000,000,000
os comunes\ODBC
[2014/02/27 09:35:20 | 000,000,000
os comunes\SpeechEngines
[2014/02/27 09:35:19 | 000,000,000
[2014/02/27 09:35:19 | 000,000,000
os comunes\Microsoft Shared
[2014/02/27 09:35:19 | 000,000,000
os comunes
[2014/02/27 09:34:36 | 000,000,000
Users\Men Inicio
[2014/02/27 09:34:36 | 000,000,000
Users\Men Inicio\Programas\Inicio
[2014/02/27 09:34:36 | 000,000,000
Users\Documentos
[2014/02/27 09:34:36 | 000,000,000
Users\Plantillas
[2014/02/27 09:34:36 | 000,000,000
Users\Favoritos
[2014/02/27 09:34:36 | 000,000,000
Users\Escritorio
[2014/02/27 09:34:15 | 000,000,000
[2014/02/27 09:34:15 | 000,000,000
[2014/02/27 09:34:09 | 000,000,000
Users\Datos de programa\Microsoft
[2014/02/27 09:34:09 | 000,000,000
|
|
|
|
|
---D
---D
---D
---D
---D
|
|
|
|
|
C]
C]
C]
C]
C]
------
K:\WINDOWS\System32\icsxml
K:\WINDOWS\System32\ias
K:\WINDOWS\Help
K:\WINDOWS\System32\export
K:\WINDOWS\System32\drivers\et
|
|
|
|
|
|
---D
---D
---D
---D
---D
---D
|
|
|
|
|
|
C]
C]
C]
C]
C]
C]
-------
K:\WINDOWS\System32\es-es
K:\WINDOWS\System32\es
K:\WINDOWS\ehome
K:\WINDOWS\System32\drivers
K:\WINDOWS\Driver Cache
K:\WINDOWS\System32\drivers\di
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
---D
-HSD
---D
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
C]
-----------------------
K:\WINDOWS\System32\dhcp
K:\WINDOWS\Debug
K:\WINDOWS\Cursors
K:\WINDOWS\Connection Wizard
K:\WINDOWS\System32\config
K:\WINDOWS\Config
K:\WINDOWS\AppPatch
K:\WINDOWS\addins
K:\WINDOWS\System32\3com_dmi
K:\WINDOWS\System32\3082
K:\WINDOWS\Installer
K:\Archivos de programa\Archiv
| ---D | C] -- K:\Archivos de programa\Archiv

| R--D | C] -- K:\Archivos de programa
| R--D | C] -- K:\Documents and Settings\All
| -H-D | C] -- K:\Documents and Settings\All
| ---D | C] -- K:\Documents and Settings\All
| ---D | C] -- K:\Documents and Settings\All
| ---D | C] -- K:\WINDOWS\System32\CatRoot2
| ---D | C] -- K:\WINDOWS\System32\CatRoot
| --SD | C] -- K:\Documents and Settings\All
| RH-D | C] -- K:\Documents and Settings\All
Users\Datos de programa
[2014/02/27 09:33:44 | 000,000,000 | -HSD | C] -- K:\System Volume Information
[2014/02/27 09:33:44 | 000,000,000 | ---D | C] -- K:\Documents and Settings
[1 K:\WINDOWS\System32\*.tmp files -> K:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files - Modified Within 30 Days ==========[/color]
[2014/03/13 13:01:56 | 000,000,332 | -H-- | M] () -- K:\WINDOWS\tasks\avast! Eme
rgency Update.job
[2014/03/13 13:01:31 | 000,001,100 | ---- | M] () -- K:\WINDOWS\tasks\GoogleUpda
teTaskMachineCore.job
[2014/03/13 13:01:26 | 000,198,435 | ---- | M] () -- K:\WINDOWS\System32\nvapps.
xml
[2014/03/13 13:01:18 | 000,002,048 | --S- | M] () -- K:\WINDOWS\bootstat.dat
[2014/03/13 12:58:46 | 000,001,104 | ---- | M] () -- K:\WINDOWS\tasks\GoogleUpda
teTaskMachineUA.job
[2014/03/12 22:17:48 | 000,000,833 | ---- | M] () -- K:\Documents and Settings\A
ll Users\Escritorio\Malwarebytes Anti-Malware.lnk
[2014/03/12 22:15:06 | 000,028,546 | ---- | M] () -- K:\Documents and Settings\M
ariano\Mis documentos\cc_20140312_221500.reg
ariano\Configuracin local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.
ini
[2014/03/12 19:00:43 | 000,002,206 | ---- | M] () -- K:\WINDOWS\System32\wpa.dbl
[2014/03/11 00:34:21 | 000,091,088 | ---- | M] () -- K:\WINDOWS\System32\FNTCACH
E.DAT
ariano\Mis documentos\liberar.vbe
[2014/03/10 17:09:59 | 000,000,426 | ---- | M] () -- K:\AVScanner.ini
ariano\Escritorio\Documento.rtf
ll Users\Escritorio\CCleaner.lnk
ll Users\Escritorio\Adobe Reader XI.lnk
ll Users\Escritorio\Google Chrome.lnk
[2014/03/01 14:22:15 | 000,000,000 | -H-- | M] () -- K:\WINDOWS\System32\drivers
\Msft_Kernel_ccdcmb_01009.Wdf
[2014/03/01 14:22:09 | 000,000,000 | -H-- | M] () -- K:\WINDOWS\System32\drivers
\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
ariano\Escritorio\BS.Player FREE.lnk
ariano\Escritorio\Torrent.lnk
ariano\Escritorio\PokerStars.lnk
ll Users\Escritorio\avast! Free Antivirus.lnk
[2014/02/28 11:53:45 | 000,067,824 | ---- | M] (AVAST Software) -- K:\WINDOWS\Sy
stem32\drivers\aswmonflt.sys
stem32\drivers\aswSnx.sys
[2014/02/28 11:52:44 | 000,180,248 | ---- | M] () -- K:\WINDOWS\System32\drivers
\aswVmm.sys
stem32\drivers\aswTdi.sys
stem32\drivers\aswSP.sys
[2014/02/28 11:52:43 | 000,049,944 | ---- | M] () -- K:\WINDOWS\System32\drivers
\aswRvrt.sys
stem32\drivers\aswRdr.sys
stem32\aswBoot.exe
[2014/02/28 11:52:41 | 000,043,152 | ---- | M] (AVAST Software) -- K:\WINDOWS\av
astSS.scr
[2014/02/28 11:36:28 | 000,458,386 | ---- | M] () -- K:\WINDOWS\System32\perfh00
A.dat
[2014/02/28 11:36:28 | 000,397,060 | ---- | M] () -- K:\WINDOWS\System32\perfh00
9.dat
[2014/02/28 11:36:28 | 000,077,488 | ---- | M] () -- K:\WINDOWS\System32\perfc00
A.dat
[2014/02/28 11:36:28 | 000,059,532 | ---- | M] () -- K:\WINDOWS\System32\perfc00
9.dat
[2014/02/28 09:34:25 | 000,146,650 | ---- | M] () -- K:\WINDOWS\System32\Buzzing
Bee.wav
[2014/02/28 09:34:24 | 000,940,794 | ---- | M] () -- K:\WINDOWS\System32\LoopyMu
sic.wav
ariano\Escritorio\Driver Genius Professional Edition.lnk
ll Users\Escritorio\Winamp.lnk
[2014/02/27 14:02:51 | 000,008,192 | ---- | M] () -- K:\WINDOWS\REGLOCS.OLD
[2014/02/27 14:01:36 | 000,000,261 | ---- | M] () -- K:\WINDOWS\System32\$winnt$
.inf
[2014/02/27 13:57:02 | 000,002,909 | ---- | M] () -- K:\WINDOWS\System32\CONFIG.
NT
[2014/02/27 13:56:53 | 000,316,640 | ---- | M] () -- K:\WINDOWS\WMSysPr9.prx
[2014/02/27 13:56:52 | 000,023,392 | ---- | M] () -- K:\WINDOWS\System32\nscompa
t.tlb
[2014/02/27 13:56:52 | 000,016,832 | ---- | M] () -- K:\WINDOWS\System32\amcompa
t.tlb
[2014/02/27 13:56:25 | 000,004,205 | ---- | M] () -- K:\WINDOWS\ODBCINST.INI
[2014/02/27 13:51:05 | 000,021,900 | ---- | M] () -- K:\WINDOWS\System32\emptyre
gdb.dat
[2014/02/27 10:32:46 | 000,000,210 | -HS- | M] () -- K:\boot.ini
[2014/02/27 09:44:23 | 000,004,444 | ---- | M] () -- K:\WINDOWS\System32\pid.PNF
[1 K:\WINDOWS\System32\*.tmp files -> K:\WINDOWS\System32\*.tmp -> ]
[color=#E56717]========== Files Created - No Company Name ==========[/color]
[2014/03/12 22:17:48 | 000,000,833 | ---- | C] () -- K:\Documents and Settings\A
ll Users\Escritorio\Malwarebytes Anti-Malware.lnk
[2014/03/12 22:15:02 | 000,028,546 | ---- | C] () -- K:\Documents and Settings\M
ariano\Mis documentos\cc_20140312_221500.reg
[2014/03/10 18:30:51 | 000,000,426 | ---- | C] () -- K:\AVScanner.ini
ariano\Mis documentos\liberar.vbe
ariano\Escritorio\Documento.rtf
ll Users\Escritorio\CCleaner.lnk
ll Users\Men Inicio\Programas\Adobe Reader XI.lnk
ll Users\Escritorio\Adobe Reader XI.lnk
ariano\Configuracin local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.
ini
[2014/03/01 14:22:15 | 000,000,000 | -H-- | C] () -- K:\WINDOWS\System32\drivers

\Msft_Kernel_ccdcmb_01009.Wdf
[2014/03/01 14:22:09 | 000,000,000 | -H-- | C] () -- K:\WINDOWS\System32\drivers
\MsftWdf_Kernel_01009_Coinstaller_Critical.Wdf
[2014/03/01 04:23:28 | 000,026,719 | ---- | C] () -- K:\WINDOWS\System32\SERSPL.
VXD
ariano\Escritorio\BS.Player FREE.lnk
ariano\Escritorio\Torrent.lnk
ll Users\Escritorio\Google Chrome.lnk
[2014/03/01 02:53:03 | 000,001,104 | ---- | C] () -- K:\WINDOWS\tasks\GoogleUpda
teTaskMachineUA.job
[2014/03/01 02:53:02 | 000,001,100 | ---- | C] () -- K:\WINDOWS\tasks\GoogleUpda
teTaskMachineCore.job
ariano\Escritorio\PokerStars.lnk
ll Users\Escritorio\avast! Free Antivirus.lnk
[2014/02/28 11:53:22 | 000,000,332 | -H-- | C] () -- K:\WINDOWS\tasks\avast! Eme
rgency Update.job
[2014/02/28 11:52:53 | 000,180,248 | ---- | C] () -- K:\WINDOWS\System32\drivers
\aswVmm.sys
\aswRvrt.sys
[2014/02/28 11:28:41 | 000,207,670 | ---- | C] () -- K:\WINDOWS\System32\nvapps.
nvb
\nvphy.bin
[2014/02/28 11:26:33 | 000,006,045 | ---- | C] () -- K:\WINDOWS\System32\nvnrm.n
vu
[2014/02/28 09:34:24 | 000,940,794 | ---- | C] () -- K:\WINDOWS\System32\LoopyMu
sic.wav
[2014/02/28 09:34:24 | 000,146,650 | ---- | C] () -- K:\WINDOWS\System32\Buzzing
Bee.wav
[2014/02/27 23:04:37 | 000,024,576 | ---- | C] () -- K:\WINDOWS\System32\AsIO.dl
l
\AsIO.sys
[2014/02/27 23:02:24 | 000,005,810 | R--- | C] () -- K:\WINDOWS\System32\drivers
\ASACPI.sys
ariano\Escritorio\Driver Genius Professional Edition.lnk
[2014/02/27 22:39:50 | 000,001,570 | ---- | C] () -- K:\WINDOWS\System32\nvide.n
vu
ll Users\Escritorio\Winamp.lnk
[2014/02/27 22:37:32 | 000,198,435 | ---- | C] () -- K:\WINDOWS\System32\nvapps.
xml
[2014/02/27 22:37:16 | 000,018,725 | ---- | C] () -- K:\WINDOWS\System32\nvdisp.
nvu
ariano\Men Inicio\Programas\Outlook Express.lnk
ariano\Men Inicio\Programas\Internet Explorer.lnk
ariano\Men Inicio\Programas\Asistencia remota.lnk
ariano\Men Inicio\Programas\Reproductor de Windows Media.lnk
[2014/02/27 14:02:50 | 000,008,192 | ---- | C] () -- K:\WINDOWS\REGLOCS.OLD

[2014/02/27 14:01:36 | 000,002,048 | --S- | C] () -- K:\WINDOWS\bootstat.dat
[2014/02/27 14:00:27 | 000,175,104 | ---- | C] () -- K:\WINDOWS\System32\dllcach
e\pintlcsa.dll
e\korwbrkr.lex
e\imscinst.exe
e\imjpinst.exe
e\imekr.lex
e\hwxjpn.dll
e\hanja.lex
e\fpencode.dll
e\chtskf.dll
[2014/02/27 13:57:02 | 000,002,909 | ---- | C] () -- K:\WINDOWS\System32\CONFIG.
NT
[2014/02/27 13:56:52 | 000,023,392 | ---- | C] () -- K:\WINDOWS\System32\nscompa
t.tlb
[2014/02/27 13:56:52 | 000,016,832 | ---- | C] () -- K:\WINDOWS\System32\amcompa
t.tlb
[2014/02/27 13:56:51 | 000,316,640 | ---- | C] () -- K:\WINDOWS\WMSysPr9.prx
ll Users\Men Inicio\Programas\Windows Movie Maker.lnk
e\nls302en.lex
[2014/02/27 13:53:18 | 000,048,680 | -HS- | C] () -- K:\WINDOWS\winnt256.bmp
[2014/02/27 13:53:18 | 000,048,680 | -HS- | C] () -- K:\WINDOWS\winnt.bmp
e\srframe.mmf
e\msinfo.dll
ll Users\Men Inicio\Programas\Windows Messenger.lnk
[2014/02/27 13:51:05 | 000,021,900 | ---- | C] () -- K:\WINDOWS\System32\emptyre
gdb.dat
ll Users\Men Inicio\Programas\MSN.lnk
[2014/02/27 13:49:02 | 000,009,522 | ---- | C] () -- K:\WINDOWS\Azteca.bmp
[2014/02/27 13:49:01 | 000,065,954 | ---- | C] () -- K:\WINDOWS\Viento.bmp
[2014/02/27 13:49:01 | 000,065,832 | ---- | C] () -- K:\WINDOWS\Santa Fe.bmp
[2014/02/27 13:49:01 | 000,026,680 | ---- | C] () -- K:\WINDOWS\Abanicos.bmp
[2014/02/27 13:49:01 | 000,026,582 | ---- | C] () -- K:\WINDOWS\Roca verde.bmp
[2014/02/27 13:49:01 | 000,017,362 | ---- | C] () -- K:\WINDOWS\Rododendro.bmp
[2014/02/27 13:49:01 | 000,017,336 | ---- | C] () -- K:\WINDOWS\A pescar.bmp
[2014/02/27 13:49:01 | 000,017,062 | ---- | C] () -- K:\WINDOWS\Grano de caf.bmp
[2014/02/27 13:49:01 | 000,016,730 | ---- | C] () -- K:\WINDOWS\Plumas.bmp
[2014/02/27 13:49:00 | 000,065,978 | ---- | C] () -- K:\WINDOWS\Pompas.bmp
[2014/02/27 13:49:00 | 000,001,272 | ---- | C] () -- K:\WINDOWS\Lazo azul 16.bmp
[2014/02/27 13:48:57 | 000,003,286 | ---- | C] () -- K:\WINDOWS\System32\tslabel
s.h
[2014/02/27 13:48:57 | 000,001,161 | ---- | C] () -- K:\WINDOWS\System32\usrlogo
n.cmd
[2014/02/27 13:48:56 | 000,000,768 | ---- | C] () -- K:\WINDOWS\System32\msdtcpr
f.h
[2014/02/27 13:48:49
.msc
[2014/02/27 10:32:46
[2014/02/27 10:32:34
.inf
[2014/02/27 09:44:23
[2014/02/27 09:35:23
[2014/02/27 09:35:21
e\sam.spd
[2014/02/27 09:35:21
e\sam.sdf
[2014/02/27 09:35:20
e\ltts1033.lxa
[2014/02/27 09:35:20
e\r1033tts.lxa
[2014/02/27 09:35:03
C.NT
[2014/02/27 09:34:36
e\NT5IIS.CAT
[2014/02/27 09:34:36
e\MAPIMIG.CAT
[2014/02/27 09:34:36
e\netfx.cat
[2014/02/27 09:34:36
e\tabletpc.cat
[2014/02/27 09:34:36
e\MW770.CAT
[2014/02/27 09:34:36
e\mediactr.cat
[2014/02/27 09:34:36
e\FP4.CAT
[2014/02/27 09:34:36
e\IMS.CAT
[2014/02/27 09:34:36
e\HPCRDP.CAT
[2014/02/27 09:34:36
e\MSMSGS.CAT
[2014/02/27 09:34:36
e\MSTSWEB.CAT
[2014/02/27 09:34:36
e\IASNT4.CAT
[2014/02/27 09:34:36
e\OEMBIOS.CAT
[2014/02/27 09:34:36
e\wmerrenu.cat
[2014/02/27 09:34:35
e\NT5.CAT
[2014/02/27 09:34:35
e\SP3.CAT
[2014/02/27 09:34:35
e\NT5INF.CAT
[2014/02/27 09:33:44
E.DAT
[2013/04/09 13:38:11
e
[2013/04/09 13:38:03
dll
[2013/04/09 13:38:02
l.dll
[2013/04/09 13:37:54
| 000,063,488 | ---- | C] () -- K:\WINDOWS\System32\wmimgmt

| 000,000,210 | -HS- | C] () -- K:\boot.ini
| 000,000,261 | ---- | C] () -- K:\WINDOWS\System32\$winnt$
| 000,004,444 | ---- | C] () -- K:\WINDOWS\System32\pid.PNF
| 000,004,205 | ---- | C] () -- K:\WINDOWS\ODBCINST.INI
| 001,685,606 | ---- | C] () -- K:\WINDOWS\System32\dllcach
| 000,001,936 | ---- | C] () -- K:\WINDOWS\System32\AUTOEXE
| 000,091,088 | ---- | C] () -- K:\WINDOWS\System32\FNTCACH
| 001,657,376 | ---- | C] () -- K:\WINDOWS\System32\nwiz.ex
| 001,101,824 | ---- | C] () -- K:\WINDOWS\System32\nvwimg.
| 001,724,416 | ---- | C] () -- K:\WINDOWS\System32\nvwdmcp
| 000,466,944 | ---- | C] () -- K:\WINDOWS\System32\nvshell
.dll
[2013/04/09
l.dll
[2013/04/09
ll
[2013/04/09
.dll
[2013/04/09
h.exe
[2013/04/09
r.exe
[2013/04/09
e.exe
13:37:50 | 000,286,720 | ---- | C] () -- K:\WINDOWS\System32\nvnt4cp

13:37:46 | 001,507,328 | ---- | C] () -- K:\WINDOWS\System32\nview.d
13:37:45 | 000,581,632 | ---- | C] () -- K:\WINDOWS\System32\nvhwvid
13:37:43 | 001,346,080 | ---- | C] () -- K:\WINDOWS\System32\nvdspsc
13:37:22 | 000,449,056 | ---- | C] () -- K:\WINDOWS\System32\nvappba
13:37:13 | 000,436,768 | ---- | C] () -- K:\WINDOWS\System32\keyston
[color=#E56717]========== ZeroAccess Check ==========[/color]

[2014/02/27 23:08:12 | 000,000,227 | RHS- | M] () -- K:\WINDOWS\assembly\Desktop
.ini
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}
\InProcServer32]
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}
\InProcServer32]
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1
}\InProcServer32]
"" = %SystemRoot%\system32\shdocvw.dll -- [2008/04/14 09:00:00 | 001,499,648 | --- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F
}\InProcServer32]
"" = K:\WINDOWS\system32\wbem\fastprox.dll -- [2008/04/14 09:00:00 | 000,472,064
| ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1
}\InProcServer32]
"" = K:\WINDOWS\system32\wbem\wbemess.dll -- [2008/04/14 09:00:00 | 000,273,920
| ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
[color=#E56717]========== LOP Check ==========[/color]
[2014/02/28 11:50:55 | 000,000,000 | ---D
Users\Datos de programa\AVAST Software
[2014/03/10 18:34:17 | 000,000,000 | ---D
Users\Datos de programa\Nokia
[2014/02/28 11:55:39 | 000,000,000 | ---D
ano\Datos de programa\AVAST Software
[2014/03/12 23:48:20 | 000,000,000 | ---D
ano\Datos de programa\BaseFlash
[2014/03/01 04:44:29 | 000,000,000 | ---D
ano\Datos de programa\BSplayer
[2014/03/01 03:03:22 | 000,000,000 | ---D
ano\Datos de programa\BSplayer Pro
[2014/03/01 20:48:12 | 000,000,000 | ---D
ano\Datos de programa\Octoshape
[2014/02/28 09:24:08 | 000,000,000 | ---D
| M] -- K:\Documents and Settings\All

| M] -- K:\Documents and Settings\All
| M] -- K:\Documents and Settings\Mari
ano\Datos de programa\ProtectExtension
[2014/02/28 09:57:41 | 000,000,000 | ---D | M] -- K:\Documents and Settings\Mari
ano\Datos de programa\sweet-page
[2014/03/12 13:07:33 | 000,000,000 | ---D | M] -- K:\Documents and Settings\Mari
ano\Datos de programa\uTorrent
[color=#E56717]========== Purity Check ==========[/color]
[color=#E56717]========== Custom Scans ==========[/color]

[color=#A23BEC]< %SYSTEMDRIVE%\*.* >[/color]
[2014/03/10 17:09:59 | 000,000,426 | ---- | M] () -- K:\AVScanner.ini
[2014/02/27 10:32:46 | 000,000,210 | -HS- | M] () -- K:\boot.ini
[2008/04/14 09:00:00 | 000,004,952 | RHS- | M] () -- K:\Bootfont.bin
[2008/04/14 09:00:00 | 000,047,564 | RHS- | M] () -- K:\NTDETECT.COM
[2008/04/14 09:00:00 | 000,251,168 | RHS- | M] () -- K:\ntldr
[2014/03/13 13:01:17 | 1409,286,144 | -HS- | M] () -- K:\pagefile.sys
[2014/01/15 21:40:14 | 000,487,016 | ---- | M] (McAfee, Inc.) -- K:\SecurityScan
ner.dll
< End of report >

OTL

Transféré par

Informations du document

Description originale:

Titre original

Copyright

Formats disponibles

Partager ce document

Partager ou intégrer le document

Options de partage

Avez-vous trouvé ce document utile ?

Ce contenu est-il inapproprié ?

Droits d'auteur :

Formats disponibles

OTL

Transféré par

Droits d'auteur :

Formats disponibles

OTL logfile created on: 13/03/2014 13:06:22 - Run 1

OTL by OldTimer - Version 3.2.69.0

(SlNtHal) -- K:\WINDOWS\system32\drivers\slnthal.sys (Smart Link)

[color=#E56717]========== Standard Registry (SafeList) ==========[/color]

CurrentVersion\Internet Settings: "ProxyEnable" = 0

[color=#E56717]========== Chrome ==========[/color]

O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43}

HKLM BootExecute: (autocheck autochk *)

6to4 - File not found

[2014/03/05 19:05:57 | 000,000,000 | ---D | C] -- K:\Archivos de programa\Archiv

Users\Men Inicio\Programas\Google Chrome

Users\Men Inicio\Programas\Herramientas administrativas

[2014/02/27 10:26:15 | 000,000,000

| ---D | C] -- K:\Archivos de programa\Archiv

[2014/03/01 14:22:15 | 000,000,000 | -H-- | C] () -- K:\WINDOWS\System32\drivers

[2014/02/27 14:02:50 | 000,008,192 | ---- | C] () -- K:\WINDOWS\REGLOCS.OLD

| 000,063,488 | ---- | C] () -- K:\WINDOWS\System32\wmimgmt

13:37:50 | 000,286,720 | ---- | C] () -- K:\WINDOWS\System32\nvnt4cp

[color=#E56717]========== ZeroAccess Check ==========[/color]

| M] -- K:\Documents and Settings\All

[color=#E56717]========== Custom Scans ==========[/color]

Vous aimerez peut-être aussi