HOLA he visto y realizado sus consejos pero se mantiene el trojan horse Lop.dn y tengo mas el generic7.nwj
AGRADEZCO SU AYUDA

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 15:11:09, on 17/09/2007
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\WINDOWS\Explorer.exe
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\eHome\ehmsas.exe
C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe
C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Dell\MediaDirect\PCMService.exe
C:\WINDOWS\system32\dla\tfswctrl.exe
C:\WINDOWS\vsnpstd.exe
C:\PROGRA~1\Grisoft\AVG7\avgcc.exe
C:\WINDOWS\VM305_STI.EXE
C:\WINDOWS\system\winwkh.exe
C:\WINDOWS\system\NTDETECT.exe
C:\Program Files\Windows Defender\MSASCui.exe
C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
C:\Program Files\NetWaiting\netWaiting.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Program Files\MSN Messenger\msnmsgr.exe
C:\PROGRA~1\Intel\Wireless\Bin\Dot1XCfg.exe
C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe
C:\Program Files\Digital Line Detect\DLG.exe
C:\PROGRA~1\Grisoft\AVG7\avgw.exe
C:\Program Files\MSN Messenger\usnsvc.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www1.la.dell.com/content/default.aspx?c=co&l=es&s=gen
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://www1.la.dell.com/content/default.aspx?c=co&l=es&s=gen
F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\lsass.exe
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {0DC7CC58-06B7-4D35-A4B9-197D09A993B8} - C:\WINDOWS\system32\ssttu.dll (file missing)
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O2 - BHO: DriveLetterAccess - {5CA3D70E-1895-11CF-8E15-001234567890} - C:\WINDOWS\system32\dla\tfswshx.dll
O2 - BHO: (no name) - {733E9132-53CA-4C97-9AC9-145C4502FA20} - C:\WINDOWS\system32\yaywxwx.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [ehTray] C:\WINDOWS\ehome\ehtray.exe
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe"
O4 - HKLM\..\Run: [IntelZeroConfig] "C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe"
O4 - HKLM\..\Run: [IntelWireless] "C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" /tf Intel PROSet/Wireless
O4 - HKLM\..\Run: [SigmatelSysTrayApp] stsystra.exe
O4 - HKLM\..\Run: [Dell QuickSet] C:\Program Files\Dell\QuickSet\quickset.exe
O4 - HKLM\..\Run: [SynTPEnh] C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
O4 - HKLM\..\Run: [ISUSPM Startup] C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
O4 - HKLM\..\Run: [ISUSScheduler] "C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" -start
O4 - HKLM\..\Run: [PCMService] "C:\Program Files\Dell\MediaDirect\PCMService.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [dla] C:\WINDOWS\system32\dla\tfswctrl.exe
O4 - HKLM\..\Run: [snpstd] C:\WINDOWS\vsnpstd.exe
O4 - HKLM\..\Run: [AVG7_CC] C:\PROGRA~1\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [BigDog305] C:\WINDOWS\VM305_STI.EXE VIMICRO USB PC Camera (ZC0305)
O4 - HKLM\..\Run: [systenn] C:\WINDOWS\system\winwkh.exe
O4 - HKLM\..\Run: [systenn32] C:\WINDOWS\system\NTDETECT.exe
O4 - HKLM\..\Run: [systemc] C:\WINDOWS\system\winwkh.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Program Files\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [AAWTray] C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe
O4 - HKCU\..\Run: [ModemOnHold] C:\Program Files\NetWaiting\netWaiting.exe
O4 - HKCU\..\Run: [xrun] "C:\WINDOWS\system32\xrun.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [Uniblue SpyEraser] "C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe" -m
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - Startup: Yahoo! Widget Engine.lnk = C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe
O4 - Global Startup: BTTray.lnk = ?
O4 - Global Startup: Digital Line Detect.lnk = ?
O8 - Extra context menu item: &Save Flash In This Page by Flash Saver - C:\PROGRA~1\FLASHS~1\save.htm
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O8 - Extra context menu item: Enviar a &Bluetooth - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_01\bin\ssv.dll
O9 - Extra button: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - C:\PROGRA~1\FLASHS~1\save.htm
O9 - Extra 'Tools' menuitem: Flash Saver - {09EA1F80-F40A-11D1-B792-444553540001} - C:\PROGRA~1\FLASHS~1\save.htm
O9 - Extra button: PalTalk - {4EAFEF58-EEFA-4116-983D-03B49BCBFFFE} - C:\Program Files\Paltalk Messenger\Paltalk.exe
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\PROGRA~1\Skype\Phone\IEPlugin\SKYPEI~1.DLL
O9 - Extra button: (no name) - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra 'Tools' menuitem: Uninstall BitDefender Online Scanner v8 - {85d1f590-48f4-11d9-9669-0800200c9a66} - C:\WINDOWS\bdoscandel.exe
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra 'Tools' menuitem: Yahoo! Messenger - {E5D12C4E-7B4F-11D3-B5C9-0050045C3C96} - C:\PROGRA~1\Yahoo!\MESSEN~1\YPager.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {1788DC78-908D-45E0-B512-11C637972B45} (AXConverter.AXControl) - http://www.elecard.com/AXConverter/AXConverter_v.1.0.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://downloads.ewido.net/ewidoOnlineScan.cab
O16 - DPF: {2BC66F54-93A8-11D3-BEB6-00105AA9B6AE} (Symantec AntiVirus scanner) - http://security.symantec.com/sscv6/SharedContent/vc/bin/AvSniff.cab
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (Installation Support) - C:\Program Files\Yahoo!\Common\Yinsthelper.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by139fd.bay139.hotmail.msn.com/resources/MsnPUpld.cab
O16 - DPF: {512FC5A1-7DE1-43F1-BC0C-371622FCB409} (TotalScan Installer Class) - http://www.nanoscan.com/as/v1/cabs/ascstubie.cab
O16 - DPF: {5D86DDB5-BDF9-441B-9E9E-D4730F4EE499} (BDSCANONLINE Control) - http://download.bitdefender.com/resources/scan8/oscan8.cab
O16 - DPF: {5F8469B4-B055-49DD-83F7-62B522420ECC} (Facebook Photo Uploader Control) - http://upload.facebook.com/controls/FacebookPhotoUploader.cab
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {6531D99C-0D0E-4293-B3CB-A3E1D0D41847} (AhnASP Control) - http://aspglobal.ahnlab.com/asp/cab/AhnASP.cab
O16 - DPF: {8436FE12-31DB-48BF-83BF-FE682F9160B4} (NanoInstaller Class) - http://www.nanoscan.com/cabs/nanoinst.cab
O16 - DPF: {BB21F850-63F4-4EC9-BF9D-565BD30C9AE9} (a-squared Scanner) - http://ax.emsisoft.com/asquared.cab
O16 - DPF: {EF791A6B-FC12-4C68-99EF-FB9E207A39E6} (McFreeScan Class) - http://download.mcafee.com/molbin/iss-loc/mcfscan/2,2,0,5090/mcfscan.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~1\COMMON~1\Skype\SKYPE4~1.DLL
O20 - Winlogon Notify: ssttu - C:\WINDOWS\system32\ssttu.dll (file missing)
O20 - Winlogon Notify: yaywxwx - C:\WINDOWS\SYSTEM32\yaywxwx.dll
O23 - Service: Ad-Aware 2007 Service (aawservice) - Lavasoft AB - C:\Program Files\Lavasoft\Ad-Aware 2007\aawservice.exe
O23 - Service: Autodesk Licensing Service - Autodesk - C:\Program Files\Common Files\Autodesk Shared\Service\AdskScSrv.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe
O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\bin\btwdins.exe
O23 - Service: Intel(R) PROSet/Wireless Event Log (EvtEng) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
O23 - Service: Intel(R) PROSet/Wireless Registry Service (RegSrvc) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
O23 - Service: Intel(R) PROSet/Wireless Service (S24EventMonitor) - Intel Corporation - C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: Intel(R) PROSet/Wireless SSO Service (WLANKEEPER) - Intel(R) Corporation - C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe

--
End of file - 12108 bytes

Hola , te doy la bienvenida al Foro de InfoSpyware.

Paso 1- Apaga el "Restaurar Sistema"

Paso 2- Descarga estas herramientas pero no las ejecutes aun:

• DelPSGuard 4.7.1
• SUPERAntiSpyware
• ComboFix.exe

Paso 3- Con todos los programas cerrados ejecuta el HijackThis y dale a estas entradas:


F2 - REG:system.ini: Shell=Explorer.exe C:\WINDOWS\Config\lsass.exe

O2 - BHO: (no name) - {0DC7CC58-06B7-4D35-A4B9-197D09A993B8} - C:\WINDOWS\system32\ssttu.dll (file missing)

O2 - BHO: (no name) - {733E9132-53CA-4C97-9AC9-145C4502FA20} - C:\WINDOWS\system32\yaywxwx.dll

O4 - HKCU\..\Run: [xrun] "C:\WINDOWS\system32\xrun.exe"

O20 - Winlogon Notify: ssttu - C:\WINDOWS\system32\ssttu.dll (file missing)

O20 - Winlogon Notify: yaywxwx - C:\WINDOWS\SYSTEM32\yaywxwx.dll



Paso 4- Sin reiniciar con el programa "FileASSASSIN" copia y pegar estos archivos con sus rutas para ser eliminados:


C:\WINDOWS\system32\xrun.exe
C:\WINDOWS\SYSTEM32\yaywxwx.dll



Paso 5- Reinicia eh inicia en "Modo a prueba de fallos" (modo seguro)

Paso 6- Ejecuta estas herramientas, de a una:

• SUPERAntiSpyware
• DelPSGuard.exe <- Guarda su reporte.

Paso 7- Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Reinicia y nos contas los resultados.

Salu2

GRACIAS por la colaboracion

AQUI ESTA el log de COmbofix, aunque continua deshabilitado el administrador de programas. y lento para cargar los archivos de word, excel


ComboFix 07-09-18.4 - "RICARDO" 2007-09-20 23:05:59.1 - NTFSx86 MINIMAL
Microsoft Windows XP Professional 5.1.2600.2.1252.57.1033.18.657 [GMT -5:00]
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\DOCUME~1\RICARDO\APPLIC~1\macromedia\Flash Player\#SharedObjects\RHEBKEGF\iforex.com
C:\DOCUME~1\RICARDO\APPLIC~1\macromedia\Flash Player\#SharedObjects\RHEBKEGF\iforex.com\Emerp\Ev ents\flash_object.swf\user_data.sol
C:\DOCUME~1\RICARDO\APPLIC~1\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ifo rex.com
C:\DOCUME~1\RICARDO\APPLIC~1\macromedia\Flash Player\macromedia.com\support\flashplayer\sys\#ifo rex.com\settings.sol
C:\WINDOWS\system32\autoexec.bat
C:\WINDOWS\system32\AutoRun.inf
C:\WINDOWS\system32\fccdccd.dll
C:\WINDOWS\system32\pmnnl.dll
C:\WINDOWS\system32\urqponk.dll
C:\WINDOWS\system32\yaywxwx.dll

.
((((((((((((((((((((((((( Files Created from 2007-08-21 to 2007-09-21 )))))))))))))))))))))))))))))))
.

2007-09-20 23:04 51,200 --a------ C:\WINDOWS\NirCmd.exe
2007-09-20 19:47 <DIR> d-------- C:\Program Files\CCleaner
2007-09-20 19:46 <DIR> d-------- C:\Program Files\FileASSASSIN
2007-09-20 19:46 <DIR> d-------- C:\Program Files\DelPSGuard
2007-09-18 11:07 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2007-09-17 18:28 664 --a------ C:\WINDOWS\system32\d3d9caps.dat
2007-09-17 15:31 <DIR> d-------- C:\Program Files\SUPERAntiSpyware
2007-09-17 15:31 <DIR> d-------- C:\DOCUME~1\RICARDO\APPLIC~1\SUPERAntiSpyware.com
2007-09-17 15:31 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\SUPERAntiSpyware.com
2007-09-17 15:30 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Spybot - Search & Destroy
2007-09-16 10:35 <DIR> d-------- C:\Program Files\Trend Micro
2007-09-16 09:27 <DIR> d-------- C:\VundoFix Backups
2007-09-15 09:00 <DIR> d-------- C:\Program Files\Lavasoft
2007-09-15 09:00 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2007-09-15 09:00 <DIR> d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\Lavasoft
2007-09-15 08:02 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2007-09-14 16:51 64,128 --a------ C:\WINDOWS\system32\drivers\ahnsze.sys
2007-09-14 16:43 <DIR> d-------- C:\Program Files\AhnLab
2007-09-14 16:31 65,536 --a------ C:\WINDOWS\system32\bpssc1.1.dll
2007-09-12 21:32 109,600 --a------ C:\WINDOWS\system32\sptll.dll
2007-09-12 21:09 <DIR> d-------- C:\DOCUME~1\RICARDO\APPLIC~1\Uniblue
2007-09-12 06:56 69,632 --ahs---- C:\WINDOWS\system32\winwkh.exe
2007-09-12 06:56 69,632 --ahs---- C:\WINDOWS\system\winwkh.exe
2007-09-12 06:56 45,056 --ahs---- C:\WINDOWS\system32\NTDETECT.exe
2007-09-12 06:56 45,056 --ahs---- C:\WINDOWS\system\NTDETECT.exe
2007-09-12 06:56 24,064 --ahs---- C:\WINDOWS\system32\cmmae.exe
2007-09-12 06:56 24,064 --ahs---- C:\WINDOWS\system\cmmae.exe
2007-09-12 06:56 20,480 --ahs---- C:\WINDOWS\system\AUTOEXEC.BAT
2007-09-12 06:56 <DIR> d--h----- C:\WINDOWS\system32\RECYCLER
2007-09-12 06:56 <DIR> d--h----- C:\WINDOWS\system\RECYCLER
2007-09-05 20:11 <DIR> d-------- C:\WINDOWS\Paltalk Messenger
2007-09-05 20:11 <DIR> d-------- C:\Program Files\Paltalk Messenger
2007-09-05 20:11 <DIR> d-------- C:\DOCUME~1\RICARDO\APPLIC~1\Paltalk
2007-09-03 17:36 <DIR> d-------- C:\Program Files\Panda Security
2007-08-29 21:21 <DIR> d-------- C:\Program Files\SetupDriver
2007-08-29 21:21 <DIR> d-------- C:\Program Files\DD PlayCam
2007-08-29 21:18 81,920 --a------ C:\WINDOWS\system32\VM305STI.dll
2007-08-29 21:18 61,440 --a------ C:\WINDOWS\VM305_STI.exe
2007-08-29 21:18 53,248 --a------ C:\WINDOWS\Sti305.exe
2007-08-29 21:18 172,032 --a------ C:\WINDOWS\amcap.exe
2007-08-29 21:18 114,688 --a------ C:\WINDOWS\VM305Cap.exe
2007-08-29 21:18 1,466,624 --a------ C:\WINDOWS\system32\drivers\usbVM305.sys
2007-08-29 21:18 <DIR> d-------- C:\WINDOWS\Album
2007-08-29 21:18 <DIR> d-------- C:\Program Files\Look 316
2007-08-29 21:18 <DIR> d-------- C:\Program Files\Common Files\Look316
2007-08-26 12:31 <DIR> d-------- C:\DOCUME~1\RICARDO\outlook express contact

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2007-09-20 19:47 --------- d-------- C:\Program Files\Yahoo!
2007-09-18 06:26 --------- d-------- C:\DOCUME~1\ALLUSE~1\APPLIC~1\pdf995
2007-09-14 15:40 --------- d-------- C:\Program Files\Macrogaming
2007-09-13 09:02 --------- d-------- C:\DOCUME~1\RICARDO\APPLIC~1\Skype
2007-09-03 10:48 --------- d-------- C:\Program Files\Joost
2007-08-29 21:18 --------- d--h----- C:\Program Files\InstallShield Installation Information
2007-08-27 09:32 16896 --a------ C:\WINDOWS\system32\tftp.exe
2007-08-18 19:41 --------- d-------- C:\Program Files\Common Files\Panda Software
2007-08-13 11:22 --------- d-------- C:\Program Files\fxsgts
2007-08-13 11:21 --------- d-------- C:\Program Files\GemMaster
2007-08-13 11:21 --------- d-------- C:\Program Files\CandleWorks
2007-08-13 11:03 --------- d-------- C:\Program Files\beon Widgets
2007-08-11 19:52 --------- d-------- C:\Program Files\SecondLife
2007-08-07 13:58 8320 --a------ C:\WINDOWS\system32\drivers\AWRTRD.sys
2007-08-07 13:56 9344 --a------ C:\WINDOWS\system32\drivers\NSDriver.sys
2007-08-07 11:05 --------- d-------- C:\Program Files\Flash Saver
2007-08-07 09:27 --------- d-------- C:\DOCUME~1\RICARDO\APPLIC~1\Nokia Multimedia Player
2007-08-05 09:29 --------- d-------- C:\Program Files\Alwil Software
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\dllcache\cdm.dll
2007-07-30 19:19 92504 --a------ C:\WINDOWS\system32\cdm.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\wuapi.dll
2007-07-30 19:19 549720 --a------ C:\WINDOWS\system32\dllcache\wuapi.dll
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\wuauclt.exe
2007-07-30 19:19 53080 --a------ C:\WINDOWS\system32\dllcache\wuauclt.exe
2007-07-30 19:19 43352 --a------ C:\WINDOWS\system32\wups2.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\wucltui.dll
2007-07-30 19:19 325976 --a------ C:\WINDOWS\system32\dllcache\wucltui.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\wuweb.dll
2007-07-30 19:19 203096 --a------ C:\WINDOWS\system32\dllcache\wuweb.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\wuaueng.dll
2007-07-30 19:19 1712984 --a------ C:\WINDOWS\system32\dllcache\wuaueng.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\wups.dll
2007-07-30 19:18 33624 --a------ C:\WINDOWS\system32\dllcache\wups.dll
2007-07-19 01:59 3583488 --a------ C:\WINDOWS\system32\dllcache\mshtml.dll
2007-07-12 18:31 765952 --a------ C:\WINDOWS\system32\dllcache\vgx.dll
2007-07-11 08:12 251 --a------ C:\Program Files\wt3d.ini
2007-07-06 22:25 4673536 --a------ C:\Program Files\FLV PlayerRCSetup.exe
2007-06-27 09:34 823808 --a------ C:\WINDOWS\system32\dllcache\wininet.dll
2007-06-27 09:34 671232 --a------ C:\WINDOWS\system32\dllcache\mstime.dll
2007-06-27 09:34 6058496 --------- C:\WINDOWS\system32\dllcache\ieframe.dll
2007-06-27 09:34 52224 --------- C:\WINDOWS\system32\dllcache\msfeedsbs.dll
2007-06-27 09:34 477696 --a------ C:\WINDOWS\system32\dllcache\mshtmled.dll
2007-06-27 09:34 459264 --------- C:\WINDOWS\system32\dllcache\msfeeds.dll
2007-06-27 09:34 44544 --------- C:\WINDOWS\system32\dllcache\iernonce.dll
2007-06-27 09:34 384512 --------- C:\WINDOWS\system32\dllcache\iedkcs32.dll
2007-06-27 09:34 383488 --------- C:\WINDOWS\system32\dllcache\ieapfltr.dll
2007-06-27 09:34 27648 --a------ C:\WINDOWS\system32\dllcache\jsproxy.dll
2007-06-27 09:34 267776 --------- C:\WINDOWS\system32\dllcache\iertutil.dll
2007-06-27 09:34 232960 --------- C:\WINDOWS\system32\dllcache\webcheck.dll
2007-06-27 09:34 230400 --------- C:\WINDOWS\system32\dllcache\ieaksie.dll
2007-06-27 09:34 193024 --a------ C:\WINDOWS\system32\dllcache\msrating.dll
2007-06-27 09:34 153088 --------- C:\WINDOWS\system32\dllcache\ieakeng.dll
2007-06-27 09:34 132608 --a------ C:\WINDOWS\system32\dllcache\extmgr.dll
2007-06-27 09:34 124928 --------- C:\WINDOWS\system32\dllcache\advpack.dll
2007-06-27 09:34 1152000 --a------ C:\WINDOWS\system32\dllcache\urlmon.dll
2007-06-27 09:34 105984 --------- C:\WINDOWS\system32\dllcache\url.dll
2007-06-27 09:34 102400 --------- C:\WINDOWS\system32\dllcache\occache.dll
2007-06-27 03:27 63488 --------- C:\WINDOWS\system32\dllcache\ie4uinit.exe
2007-06-27 03:27 625152 --------- C:\WINDOWS\system32\dllcache\iexplore.exe
2007-06-27 03:27 13824 --------- C:\WINDOWS\system32\dllcache\ieudinit.exe
2007-06-27 02:00 161792 --------- C:\WINDOWS\system32\dllcache\ieakui.dll
2007-06-26 01:08 1104896 --a------ C:\WINDOWS\system32\msxml3.dll
2007-06-26 01:08 1104896 --------- C:\WINDOWS\system32\dllcache\msxml3.dll
2006-11-18 05:40 21275 --a------ C:\DOCUME~1\i386\AegisP.sys
2006-08-25 08:23 44544 --a------ C:\DOCUME~1\i386\bcm4sbxp.sys
2006-08-22 16:32 89088 --a------ C:\DOCUME~1\i386\atl71.dll
2006-08-22 16:32 499712 --a------ C:\DOCUME~1\i386\msvcp71.dll
2006-08-22 16:32 44544 --a------ C:\DOCUME~1\i386\msxml4a.dll
2006-08-22 16:32 1060864 --a------ C:\DOCUME~1\i386\MFC71.dll
2006-08-22 16:32 1047552 --a------ C:\DOCUME~1\i386\MFC71u.dll
2006-08-07 13:00 701752 --a------ C:\DOCUME~1\i386\KB921883.exe
2006-07-14 10:31 332288 --a------ C:\DOCUME~1\i386\netapi32.dll
2006-07-13 00:11 2531056 --a------ C:\DOCUME~1\i386\KB909095.Exe
2006-07-07 13:00 725304 --a------ C:\DOCUME~1\i386\KB917159.exe
2006-07-07 13:00 1018168 --a------ C:\DOCUME~1\i386\KB914388.exe
2006-06-16 14:34 48936 --a------ C:\DOCUME~1\i386\sirenacm.dll
2006-06-13 13:00 764216 --a------ C:\DOCUME~1\i386\KB917344.Exe
2006-06-13 13:00 567096 --a------ C:\DOCUME~1\i386\KB918439.Exe
2006-06-13 13:00 4609848 --a------ C:\DOCUME~1\i386\KB916281.Exe
2006-06-02 06:06 929792 --a------ C:\DOCUME~1\i386\wkcvqd01.dll
2006-06-02 06:06 91136 -ra------ C:\DOCUME~1\i386\msls2.dll
2006-06-02 06:06 87104 -ra------ C:\DOCUME~1\i386\msencode.dll
2006-06-02 06:06 348160 -ra------ C:\DOCUME~1\i386\msvcr71.dll
2006-06-02 06:06 31744 --a------ C:\DOCUME~1\i386\hlp95en.dll
2006-06-02 06:06 147456 --a------ C:\DOCUME~1\i386\wkcvqr01.dll
2006-06-02 06:06 126976 --a------ C:\DOCUME~1\i386\WkWinUni.dll
2006-06-02 06:06 115400 -ra------ C:\DOCUME~1\i386\msconv97.dll
2006-06-02 06:06 108544 --a------ C:\DOCUME~1\i386\WPEQU532.DLL
2006-06-01 13:47 27648 --a------ C:\DOCUME~1\i386\jgpl400.dll
2006-06-01 13:47 163840 --a------ C:\DOCUME~1\i386\jgdw400.dll
2006-05-29 10:32 1496576 --a------ C:\DOCUME~1\i386\shdocvw.dll
2006-05-24 19:31 90112 --a------ C:\DOCUME~1\i386\BtWiaExt.dll
2006-05-24 19:26 311343 --a------ C:\DOCUME~1\i386\btwhidcs.dll
2006-05-24 19:25 946241 --a------ C:\DOCUME~1\i386\BtWizard.dll
2006-05-24 19:24 1065037 --a------ C:\DOCUME~1\i386\BTNeighborhood.dll
2006-05-24 19:22 413755 --a------ C:\DOCUME~1\i386\btcss.dll
2006-05-24 19:22 200704 --a------ C:\DOCUME~1\i386\btsec.dll
2006-05-24 19:20 73728 --a------ C:\DOCUME~1\i386\btsendto_ie.dll
2006-05-24 19:20 172032 --a------ C:\DOCUME~1\i386\btsendto_office.dll
2006-05-24 19:19 73728 --a------ C:\DOCUME~1\i386\btsendto_wab.dll
1997-04-09 18:03:46 24,064 --sha-w C:\WINDOWS\system\cmmae.exe
2007-01-17 23:48:32 45,056 --sha-w C:\WINDOWS\system\NTDETECT.exe
2007-01-17 23:50:06 69,632 --sha-w C:\WINDOWS\system\winwkh.exe
1997-04-09 18:03:46 24,064 --sha-w C:\WINDOWS\system\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\cmmae.exe
2007-01-17 23:48:32 45,056 --sha-w C:\WINDOWS\system\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\NTDETECT.exe
2007-01-17 23:50:06 69,632 --sha-w C:\WINDOWS\system\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\winwkh.exe
1997-04-09 18:03:46 24,064 --sha-w C:\WINDOWS\system32\cmmae.exe
2007-01-17 23:48:32 45,056 --sha-w C:\WINDOWS\system32\NTDETECT.exe
2007-01-17 23:50:06 69,632 --sha-w C:\WINDOWS\system32\winwkh.exe
1997-04-09 18:03:46 24,064 --sha-w C:\WINDOWS\system32\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\cmmae.exe
2007-01-17 23:48:32 45,056 --sha-w C:\WINDOWS\system32\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\NTDETECT.exe
2007-01-17 23:50:06 69,632 --sha-w C:\WINDOWS\system32\RECYCLER\S-1-5-21-1078081533-1229272821-725345543-666\winwkh.exe
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.

*Note* empty entries & legit default entries are not shown

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"ehTray"="C:\WINDOWS\ehome\ehtray.exe" [2005-09-29 15:01]
"igfxtray"="C:\WINDOWS\system32\igfxtray.exe" [2005-12-14 00:44]
"igfxhkcmd"="C:\WINDOWS\system32\hkcmd.exe" [2005-12-14 00:41]
"igfxpers"="C:\WINDOWS\system32\igfxpers.exe" [2005-12-14 00:45]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_01\bin\jusched.exe" [2007-03-14 03:43]
"IntelZeroConfig"="C:\Program Files\Intel\Wireless\bin\ZCfgSvc.exe" [2006-05-01 10:28]
"IntelWireless"="C:\Program Files\Intel\Wireless\Bin\ifrmewrk.exe" [2006-05-01 10:28]
"SigmatelSysTrayApp"="stsystra.exe" [2006-03-25 00:30 C:\WINDOWS\stsystra.exe]
"Dell QuickSet"="C:\Program Files\Dell\QuickSet\quickset.exe" [2006-08-03 19:51]
"SynTPEnh"="C:\Program Files\Synaptics\SynTP\SynTPEnh.exe" [2006-03-08 19:48]
"ISUSPM Startup"="C:\PROGRA~1\COMMON~1\INSTAL~1\UPDATE~1\I SUSPM.exe" [2004-07-27 17:50]
"ISUSScheduler"="C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe" [2004-07-27 17:50]
"PCMService"="C:\Program Files\Dell\MediaDirect\PCMService.exe" [2006-08-22 16:32]
"NeroFilterCheck"="C:\WINDOWS\system32\NeroCheck.e xe" [2001-07-09 10:50]
"dla"="C:\WINDOWS\system32\dla\tfswctrl.exe" [2005-05-31 05:33]
"snpstd"="C:\WINDOWS\vsnpstd.exe" [2004-06-10 13:48]
"AVG7_CC"="C:\PROGRA~1\Grisoft\AVG7\avgcc.exe" [2007-09-13 21:06]
"BigDog305"="C:\WINDOWS\VM305_STI.exe" [2005-08-05 15:15]
"systenn32"="C:\WINDOWS\system\NTDETECT.exe" [2007-01-17 18:48]
"systemc"="C:\WINDOWS\system\winwkh.exe" [2007-01-17 18:50]
"AAWTray"="C:\Program Files\Lavasoft\Ad-Aware 2007\AAWTray.exe" [2007-08-08 15:53]

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"ctfmon.exe"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-10 06:00]
"ModemOnHold"="C:\Program Files\NetWaiting\netWaiting.exe" [2003-09-10 03:24]

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\run]
"Nokia.PCSync"=C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog

C:\DOCUME~1\ALLUSE~1\STARTM~1\Programs\Startup\
BTTray.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2006-05-24 19:28:28]
Digital Line Detect.lnk - C:\Program Files\Digital Line Detect\DLG.exe [2006-11-18 05:46:34]

C:\DOCUME~1\RICARDO\STARTM~1\Programs\Startup\
Yahoo! Widget Engine.lnk - C:\Program Files\Yahoo!\Widgets\YahooWidgetEngine.exe [2007-07-20 12:57:16]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\system]
"InstallVisualStyle"=C:\WINDOWS\Resources\Themes\R oyale\Royale.msstyles
"InstallTheme"=C:\WINDOWS\Resources\Themes\Royale. theme

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\system]
"DisableTaskMgr"=1 (0x1)

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Explorer\ShellExecuteHooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 12:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\ssttu]
C:\WINDOWS\system32\ssttu.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^HOTSYNCSHORTCUTNAME.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\HOTSYNCSHORTCUTNAME.lnk
backup=C:\WINDOWS\pss\HOTSYNCSHORTCUTNAME.lnkCommo n Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Start Menu^Programs^Startup^PalStart.lnk]
path=C:\Documents and Settings\All Users\Start Menu\Programs\Startup\PalStart.lnk
backup=C:\WINDOWS\pss\PalStart.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^RICARDO^Start Menu^Programs^Startup^Babelbox.lnk]
path=C:\Documents and Settings\RICARDO\Start Menu\Programs\Startup\Babelbox.lnk
backup=C:\WINDOWS\pss\Babelbox.lnkStartup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\37]
"C:\WINDOWS\system32\37.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\96]
"C:\WINDOWS\system32\96.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\CMIJ]
"C:\Documents and Settings\RICARDO\CMIJ.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\EIDO]
"C:\Documents and Settings\RICARDO\EIDO.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\KFIU]
"C:\Documents and Settings\RICARDO\KFIU.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCAgentExe]
c:\PROGRA~1\mcafee.com\agent\McAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MCUpdateExe]
C:\PROGRA~1\mcafee.com\agent\McUpdate.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MFPB]
"C:\Documents and Settings\RICARDO\MFPB.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MPFExe]
C:\PROGRA~1\McAfee.com\PERSON~1\MpfTray.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MPSExe]
c:\PROGRA~1\mcafee.com\mps\mscifapp.exe /embedding

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKAGENTEXE]
C:\PROGRA~1\McAfee\SPAMKI~1\MskAgent.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSKDetectorExe]
C:\Program Files\McAfee\SpamKiller\MSKDetct.exe /uninstall

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\MSMSGS]
"C:\Program Files\Messenger\msmsgs.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
"C:\Program Files\MSN Messenger\msnmsgr.exe" /background

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OASClnt]
C:\Program Files\McAfee.com\VSO\oasclnt.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\OrderReminder]
C:\Program Files\Hewlett-Packard\OrderReminder\OrderReminder.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
C:\Program Files\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PowerBar]
"C:\Program Files\CyberLink DVD Solution\Multimedia Launcher\PowerBar.exe" /AtBootTime

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
"C:\Program Files\Skype\Phone\Skype.exe" /nosplash /minimized

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SpeedTouch USB Diagnostics]
"C:\Program Files\Thomson\SpeedTouch USB\Dragdiag.exe" /icon

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VirusScan Online]
C:\Program Files\McAfee.com\VSO\mcvsshld.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\VSOCheckTask]
"C:\PROGRA~1\McAfee.com\VSO\mcmnhdlr.exe" /checktask

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\WinampAgent]
C:\Program Files\Winamp\winampa.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Yahoo! Pager]
c:\Program Files\Yahoo!\Messenger\ypager.exe -quiet

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"AresChatServer"=3 (0x3)

R3 DDPlayCam;DDPlay Virtual Camera;C:\WINDOWS\system32\DRIVERS\DDPlayCam.sys
S3 alcan5ln;SpeedTouch(tm) USB ADSL RFC1483 Networking Driver (NDIS);C:\WINDOWS\system32\DRIVERS\alcan5ln.sys
S3 GT680xNT;ColorPage-Vivid 1200XE;C:\WINDOWS\system32\drivers\gt680x.sys
S3 ZSMC0305;Look 316;C:\WINDOWS\system32\Drivers\usbVM305.sys

.
Contents of the 'Scheduled Tasks' folder
"2007-09-07 23:30:00 C:\WINDOWS\Tasks\Detectar virus mediante McAfee.com - Mi equipo (MACLTDA-RENÉ).job"
"2007-09-13 02:31:51 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC Nag.job"
"2007-09-13 02:09:50 C:\WINDOWS\Tasks\Uniblue SpeedUpMyPC.job"
- C:\Program Files\Uniblue\SpeedUpMyPC 3\SpeedUpMyPC.exe
"2007-09-20 12:18:51 C:\WINDOWS\Tasks\Uniblue SpyEraser Nag.job"
- C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
"2007-09-18 02:53:08 C:\WINDOWS\Tasks\Uniblue SpyEraser.job"
- C:\Program Files\Uniblue\SpyEraser\SpyEraser.exe
.
************************************************** ************************

catchme 0.3.1061 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2007-09-20 23:34:16
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
Completion time: 2007-09-20 23:36:31 - machine was rebooted
C:\ComboFix-quarantined-files.txt ... 2007-09-20 23:36
.
--- E O F ---

Descarga CCleaner v1.4 y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Una vez que este termine de limpiar todo, actualiza "Java", hace una Desfragmentación del disco con la opción de Windows y pasa por www.windowsupdate.com para descargar todos los parches disponibles (si tu sistema lo permite)

• Descarga y ejecuta la utilidad Advanced WindowsCare, para reparar y optimizar a fondo tu PC.

Reinicia y nos contas los resultados.

Salu2

Articulo de interés: "Eliminar lentitud en Windows"

Ejecute las recomendaciones, efectivamente mejoro el rendimiento. Muchas gracias por su colaboracion. Realizare los pasos del tema pC mas lento.

Pero en este no comenta sobre la habilitacion de la barra de tareas!!

Agradezco mucho tu colaboracion.