no se si esto servira pero me aparecio este documento en el escritorio "catchme.log" y esto es lo que contenia ese documento

catchme 0.3.1361.2 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-01 22:33:34
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden services & system hive ...

scanning hidden registry entries ...

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\WindowsUpdate\Auto Update]
"OfflineDetectionPending"=dword:00000001

scanning hidden files ...

C:\WINDOWS\SoftwareDistribution\Download\036f55f6e d173b1ba1262aefa413217a

scan completed successfully
hidden processes: 0
hidden services: 0
hidden files: 1