Descargalo de Acá: http://www.forospyware.com/sUBs/ComboFix.exe

ComboFix 08-08-12.01 - Alita 2008-08-12 22:42:09.1 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.2.1252.44.1033.18.39 [GMT -5:00]
Running from: C:\Documents and Settings\Alita\Desktop\ComboFix.exe
* Created a new restore point

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\WINDOWS\system32\pskill.exe
C:\WINDOWS\system32\x64

.
((((((((((((((((((((((((( Files Created from 2008-07-13 to 2008-08-13 )))))))))))))))))))))))))))))))
.

2008-08-12 17:19 . 2008-08-12 17:19 <DIR> d-------- C:\WINDOWS\system32\Kaspersky Lab
2008-08-12 16:58 . 2005-08-29 19:04 54,960 --a------ C:\WINDOWS\system32\vsutil_loc0c0a.dll
2008-08-12 16:58 . 2008-08-12 17:00 4,212 ---h----- C:\WINDOWS\system32\zllictbl.dat
2008-08-12 16:57 . 2008-08-12 16:58 <DIR> d-------- C:\WINDOWS\system32\ZoneLabs
2008-08-12 16:57 . 2008-08-12 16:57 <DIR> d-------- C:\Program Files\Zone Labs
2008-08-12 16:57 . 2008-08-12 21:56 31,767 --ah----- C:\WINDOWS\system32\vsconfig.xml
2008-08-12 16:56 . 2008-08-12 16:59 <DIR> d-------- C:\WINDOWS\Internet Logs
2008-08-12 01:03 . 2008-08-12 01:03 <DIR> d-------- C:\Program Files\Malwarebytes' Anti-Malware
2008-08-12 01:03 . 2008-08-12 01:03 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Malwarebytes
2008-08-12 01:03 . 2008-08-12 01:03 <DIR> d-------- C:\Documents and Settings\Alita\Application Data\Malwarebytes
2008-08-12 01:03 . 2008-07-30 20:07 38,472 --a------ C:\WINDOWS\system32\drivers\mbamswissarmy.sys
2008-08-12 01:03 . 2008-07-30 20:07 17,144 --a------ C:\WINDOWS\system32\drivers\mbam.sys
2008-08-12 00:46 . 2008-08-12 00:46 <DIR> d-------- C:\Program Files\Spybot - Search & Destroy
2008-08-12 00:46 . 2008-08-12 02:29 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Spybot - Search & Destroy
2008-08-12 00:23 . 2008-06-19 17:24 28,544 --a------ C:\WINDOWS\system32\drivers\pavboot.sys
2008-08-12 00:22 . 2008-08-12 00:22 <DIR> d-------- C:\Program Files\Panda Security
2008-08-06 19:40 . 2008-08-06 19:40 <DIR> d-------- C:\Program Files\IObit
2008-08-06 18:57 . 2008-08-06 18:57 <DIR> d-------- C:\WINDOWS\Sun
2008-08-06 18:55 . 2008-06-10 02:32 73,728 --a------ C:\WINDOWS\system32\javacpl.cpl
2008-08-06 18:53 . 2008-08-06 18:55 <DIR> d-------- C:\Program Files\Java
2008-08-06 18:47 . 2008-08-06 18:47 <DIR> d-------- C:\Program Files\Common Files\Java
2008-08-06 18:29 . 2008-08-06 18:30 <DIR> d-------- C:\Program Files\CCleaner
2008-08-05 23:45 . 2008-08-05 23:45 <DIR> d-------- C:\Deckard
2008-08-05 22:05 . 2008-08-05 22:05 <DIR> d-------- C:\Program Files\Trend Micro
2008-08-05 21:20 . 2008-08-05 21:20 <DIR> d-------- C:\Program Files\Lavasoft
2008-08-05 21:20 . 2008-08-05 21:27 <DIR> d-------- C:\Documents and Settings\All Users\Application Data\Lavasoft
2008-08-05 21:17 . 2008-08-05 21:17 <DIR> d-------- C:\Program Files\Common Files\Wise Installation Wizard
2008-07-22 22:01 . 2008-07-22 22:01 <DIR> d-------- C:\Documents and Settings\Alita\Application Data\Yahoo!
2008-07-22 21:57 . 2008-08-06 19:58 <DIR> d-------- C:\Program Files\Yahoo!
2008-07-22 21:48 . 2008-07-22 21:48 <DIR> d-------- C:\Program Files\The Weather Channel FW

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2008-07-23 23:32 --------- d-----w C:\Program Files\Google
2008-07-19 01:24 --------- d-----w C:\Documents and Settings\All Users\Application Data\NOS
2008-07-19 01:22 --------- d-----w C:\Program Files\NOS
2008-07-07 00:44 --------- d-----w C:\Documents and Settings\All Users\Application Data\MAGIX
2008-07-07 00:42 --------- d-----w C:\Program Files\Common Files\MAGIX Shared
2008-07-04 03:20 76,040 ----a-w C:\WINDOWS\system32\drivers\avgtdix.sys
2008-07-04 03:19 96,520 ----a-w C:\WINDOWS\system32\drivers\avgldx86.sys
2008-07-04 03:19 10,520 ----a-w C:\WINDOWS\system32\avgrsstx.dll
2008-07-02 17:15 --------- d-----w C:\Documents and Settings\Alita\Application Data\AVGTOOLBAR
2008-07-02 17:13 --------- d-----w C:\Program Files\AVG
2008-07-02 17:13 --------- d-----w C:\Documents and Settings\All Users\Application Data\avg8
2008-06-29 20:07 --------- d-----w C:\Documents and Settings\All Users\Application Data\Zylom
2008-06-20 17:36 245,248 ----a-w C:\WINDOWS\system32\mswsock.dll
2008-06-20 17:36 245,248 ------w C:\WINDOWS\system32\dllcache\mswsock.dll
2008-06-20 17:36 147,968 ----a-w C:\WINDOWS\system32\dllcache\dnsapi.dll
2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\drivers\tcpip.sys
2008-06-20 10:44 360,960 ----a-w C:\WINDOWS\system32\dllcache\tcpip.sys
2008-06-20 10:44 138,368 ----a-w C:\WINDOWS\system32\drivers\afd.sys
2008-06-20 10:44 138,368 ------w C:\WINDOWS\system32\dllcache\afd.sys
2008-06-20 09:32 225,920 ----a-w C:\WINDOWS\system32\drivers\tcpip6.sys
2008-06-20 09:32 225,920 ------w C:\WINDOWS\system32\dllcache\tcpip6.sys
2008-06-18 23:24 --------- d-----w C:\Program Files\Digital Chocolate
2008-06-18 22:34 --------- d---a-w C:\Documents and Settings\All Users\Application Data\TEMP
2008-06-18 22:27 --------- d-----w C:\Documents and Settings\All Users\Application Data\DigitalChocolate
2008-06-18 22:26 --------- d-----w C:\Documents and Settings\All Users\Application Data\Double Trump
2008-06-17 22:29 --------- d-----w C:\Documents and Settings\All Users\Application Data\PopCap
2008-06-13 13:10 272,128 ------w C:\WINDOWS\system32\drivers\bthport.sys
2008-06-13 13:10 272,128 ------w C:\WINDOWS\system32\dllcache\bthport.sys
2008-05-16 16:58 12,632 ----a-w C:\WINDOWS\system32\lsdelete.exe
2008-05-14 16:10 164 ----a-w C:\install.dat
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2006-11-03 07:00 15360]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 16:21 1449984]
"DW6"="C:\Program Files\The Weather Channel FW\Desktop\DesktopWeather.exe" [2008-07-17 13:33 789616]
"SpybotSD TeaTimer"="C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe" [2008-07-07 09:42 2156368]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"SmcService"="C:\PROGRA~1\Sygate\SPF\smc.exe" [2005-09-27 06:16 2635472]
"IgfxTray"="C:\WINDOWS\system32\igfxtray.exe" [2006-10-05 16:11 98304]
"HotKeysCmds"="C:\WINDOWS\system32\hkcmd.exe" [2006-10-05 16:13 114688]
"Persistence"="C:\WINDOWS\system32\igfxpers.ex e" [2006-10-05 16:10 94208]
"LaunchAp"="C:\Program Files\Launch Manager\LaunchAp.exe" [2005-07-25 13:36 32768]
"PowerKey"="C:\Program Files\Launch Manager\PowerKey.exe" [2002-08-30 15:02 94208]
"LManager"="C:\Program Files\Launch Manager\HotkeyApp.exe" [2005-06-06 11:52 69632]
"CtrlVol"="C:\Program Files\Launch Manager\CtrlVol.exe" [2003-09-16 14:28 20480]
"LMgrOSD"="C:\Program Files\Launch Manager\OSDCtrl.exe" [2005-07-25 10:45 241664]
"Wbutton"="C:\Program Files\Launch Manager\Wbutton.exe" [2005-07-25 13:34 81920]
"PCSuiteTrayApplication"="C:\PROGRA~1\Nokia\NOKIAP ~1\LAUNCH~1.EXE" [2006-06-15 12:36 229376]
"AVG8_TRAY"="C:\PROGRA~1\AVG\AVG8\avgtray.exe" [2008-07-03 22:20 1232152]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe" [2008-06-10 04:27 144784]
"Zone Labs Client"="C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe" [2005-08-29 19:09 980736]
"SoundMan"="SOUNDMAN.EXE" [2005-04-15 05:01 77824 C:\WINDOWS\SOUNDMAN.EXE]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="C:\WINDOWS\system32\CTFMON.EXE" [2006-11-03 07:00 15360]

C:\Documents and Settings\All Users\Start Menu\Programs\Startup\
Bluetooth.lnk - C:\Program Files\WIDCOMM\Bluetooth Software\BTTray.exe [2005-05-31 08:29:16 577597]

[HKEY_LOCAL_MACHINE\software\microsoft\windows\curr entversion\policies\explorer]
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoStartMenuPinnedList"= 1 (0x1)
"StartMenuFavorites"= 0 (0x0)
"Start_ShowHelp"= 0 (0x0)
"Start_ShowMyComputer"= 1 (0x1)
"Start_ShowMyDocs"= 1 (0x1)
"Start_ShowMyMusic"= 0 (0x0)
"Start_ShowMyPics"= 1 (0x1)
"Start_ShowNetConn"= 1 (0x1)
"Start_ShowPrinters"= 1 (0x1)
"Start_ShowRun"= 1 (0x1)
"Start_ShowSearch"= 0 (0x0)
"NoStartMenuMFUprogramsList"= 1 (0x1)
"ClassicViewState"= 1 (0x1)
"HideRunAsVerb"= 1 (0x1)
"ShowSuperHidden"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoStartMenuMFUprogramsList"= 1 (0x1)
"NoInstrumentation"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"ForceClassicControlPanel"= 1 (0x1)
"NoResolveTrack"= 1 (0x1)
"NoResolveSearch"= 1 (0x1)
"NoSMConfigurePrograms"= 1 (0x1)
"MemCheckBoxInRunDlg"= 1 (0x1)
"NoStartMenuMFUprogramsList"= 1 (0x1)
"NoInstrumentation"= 1 (0x1)
"NoSMBalloonTip"= 1 (0x1)

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\windows]
"AppInit_DLLs"=avgrsstx.dll

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"UpdatesDisableNotify"=dword:00000001
"AntiVirusDisableNotify"=dword:00000001
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"C:\\Program Files\\Messenger\\msmsgs.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\msnmsgr.exe"=
"C:\\Program Files\\Windows Live\\Messenger\\livecall.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgupd.exe"=
"C:\\Program Files\\AVG\\AVG8\\avgemc.exe"=

R0 pavboot;pavboot;C:\WINDOWS\system32\drivers\pavboo t.sys [2008-06-19 17:24]
R1 AvgLdx86;AVG AVI Loader Driver x86;C:\WINDOWS\system32\Drivers\avgldx86.sys [2008-07-03 22:19]
R1 Hotkey;Hotkey;C:\WINDOWS\system32\drivers\Hotkey.s ys [2003-04-28 11:27]
R2 avg8emc;AVG8 E-mail Scanner;C:\PROGRA~1\AVG\AVG8\avgemc.exe [2008-07-03 22:19]
R2 avg8wd;AVG8 WatchDog;C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe [2008-07-03 22:20]
R2 AvgTdiX;AVG8 Network Redirector;C:\WINDOWS\system32\Drivers\avgtdix.sys [2008-07-03 22:20]
R3 POWERKEY;POWERKEY;C:\Program Files\Launch Manager\POWERKEY.sys [2000-12-19 18:29]
S1 Wbutton;Wbutton;C:\WINDOWS\system32\drivers\Wbutto n.sys []
S3 getPlus(R) Helper;getPlus(R) Helper;C:\Program Files\NOS\bin\getPlus_HelperSvc.exe [2008-06-26 10:24]

*Newly Created Service* - CATCHME
*Newly Created Service* - PROCEXP90
.
Contents of the 'Scheduled Tasks' folder

2008-08-13 C:\WINDOWS\Tasks\MP Scheduled Scan.job
- C:\Program Files\Windows Defender\MpCmdRun.exe [2006-11-03 19:20]
.
.
------- Supplementary Scan -------
.
R0 -: HKCU-Main,Start Page = hxxp://www.google.com/
R0 -: HKCU-Main,SearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.micros oft:en-US&ie=utf8&oe=utf8
R1 -: HKCU-SearchURL,(Default) = hxxp://www.google.com/keyword/%s

O16 -: {BFF1950D-B1B4-4AE8-B842-B2CCF06D9A1B} - hxxp://game05.zylom.com/activex/zylomgamesplayer.cab
C:\WINDOWS\Downloaded Program Files\ZylomGamesPlayer.inf
C:\WINDOWS\Downloaded Program Files\zylomgamesplayer.dll


************************************************** ************************

catchme 0.3.1361 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-08-12 22:45:22
Windows 5.1.2600 Service Pack 2 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

************************************************** ************************
.
Completion time: 2008-08-12 22:46:44
ComboFix-quarantined-files.txt 2008-08-13 03:46:40

Pre-Run: 25,615,073,280 bytes free
Post-Run: 25,627,041,792 bytes free

200 --- E O F --- 2008-08-07 21:33:35


aki esta el informe...saludos gracias x toda la ayuda q me estas brindando y espero tu respuesta!

ahora lo peor esk despues de arranque el combo fix mi wireless ni mi cable red reconoce mi modem y no me puedo conectar a internet....creo que ya deberia mandar a formatear no me quedara de otra no?

1. Descargar el "WinsockXPFix"
2. Reinicia en Modo Seguro
3. Ejecuta el "WinsockXPFix"
4. Dale Sobre "Fix"
5. Reinicias .

salu2!
Me cuentas...!

lo podre ejecutar sin estar en modo seguro porque ya van 3 veces que trato de iniciar asi la laptop y nomas no se aparece toda la pantalla para elegir modo seguro...por cierto mi conexion ya funciona pero es tipo intermitente osea la prendo funciona, la reinicio no funciona, la vuelvo a reiniciar y funciona y asi

esteeem allo?? k hago jajjajja

Asi, si perdon, pero se me paso tu tema

Pegame un nuevo reporte de ComboFix.

Salu2!

mmm el combofix lo desinstale pero me da miedo pasarlo de nuevo porque si otra vez me falla la conexion a internet estare otro dia sin poder conectarme...

Por favor, realiza un Analisis en linea con el "Kaspersky Online Scanner", copias y pegas acá el reporte.

• Manual de Kaspersky Online Scanner

aki esta el log!

-------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER INFORME
jueves, 14 de agosto de 2008 23:21:22
Sistema operativo: Microsoft Windows XP Professional, Service Pack 2 (Build 2600)
Kaspersky Online Scanner versión: 5.0.84.1
Ultima actualización: 15/08/2008
Registros en la base antivirus: 973506
-------------------------------------------------------------------------------

Configuración del análisis:
Analizar usando las siguientes bases: standard
Analizar archivos: verdadero
Analizar bases de correo: verdadero

Objetivo a analizar - Mi PC:
C:\
D:\
E:\

Estadísticas:
Número de objeros analizados: 17386
Virus encontrados: 0
Objetos infectados: 0 / 0
Objetos sospechosos: 0
Duración del análisis: 00:45:43

Bombre del objeto infectado / Nombre del virus / Última acción
C:\Documents and Settings\Alita\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Feeds Cache\index.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\Logs\Dfsr00005.log Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\pending.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\Working\database_5220_B3E7_20B3_D069\df sr.db Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\Working\database_5220_B3E7_20B3_D069\fs r.log Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\Working\database_5220_B3E7_20B3_D069\fs rtmp.log Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Messenger\alegrdz@hotmail.com\Shari ngMetadata\Working\database_5220_B3E7_20B3_D069\tm p.edb Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Windows Live Contacts\alegrdz@hotmail.com\real\members.stg Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Application Data\Microsoft\Windows Live Contacts\alegrdz@hotmail.com\shadow\members.stg Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\History\History.IE5\MSHist012008081420080 815\index.dat Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\temp\~DF65AD.tmp Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\temp\~DF6676.tmp Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\temp\~DF908.tmp Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\temp\~DF929.tmp Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Temporary Internet Files\Content.IE5\DVZK0CLL\p_513938355=0&[9].htm Object is locked saltado
C:\Documents and Settings\Alita\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\Alita\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\Alita\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\All Users\Application Data\avg8\emc\Log\emc.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgcore.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgrs.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgui.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\avg8\Log\avgwd.log Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr0.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Network\Downloader\qmgr1.dat Object is locked saltado
C:\Documents and Settings\All Users\Application Data\Microsoft\Windows Defender\Support\MPLog-05142008-125604.log Object is locked saltado
C:\Documents and Settings\LocalService\Cookies\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\History\History.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\Local Settings\Temporary Internet Files\Content.IE5\index.dat Object is locked saltado
C:\Documents and Settings\LocalService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\LocalService\ntuser.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat Object is locked saltado
C:\Documents and Settings\NetworkService\Local Settings\Application Data\Microsoft\Windows\UsrClass.dat.LOG Object is locked saltado
C:\Documents and Settings\NetworkService\NTUSER.DAT Object is locked saltado
C:\Documents and Settings\NetworkService\ntuser.dat.LOG Object is locked saltado
C:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
C:\System Volume Information\_restore{DC4A9730-6FA2-4F32-933F-7D31E1FE5E0C}\RP3\change.log Object is locked saltado
C:\WINDOWS\Debug\PASSWD.LOG Object is locked saltado
C:\WINDOWS\SchedLgU.Txt Object is locked saltado
C:\WINDOWS\SoftwareDistribution\ReportingEvents.lo g Object is locked saltado
C:\WINDOWS\Sti_Trace.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\edb.log Object is locked saltado
C:\WINDOWS\system32\CatRoot2\tmp.edb Object is locked saltado
C:\WINDOWS\system32\config\AppEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\default Object is locked saltado
C:\WINDOWS\system32\config\default.LOG Object is locked saltado
C:\WINDOWS\system32\config\Internet.evt Object is locked saltado
C:\WINDOWS\system32\config\SAM Object is locked saltado
C:\WINDOWS\system32\config\SAM.LOG Object is locked saltado
C:\WINDOWS\system32\config\SecEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\SECURITY Object is locked saltado
C:\WINDOWS\system32\config\SECURITY.LOG Object is locked saltado
C:\WINDOWS\system32\config\software Object is locked saltado
C:\WINDOWS\system32\config\software.LOG Object is locked saltado
C:\WINDOWS\system32\config\SysEvent.Evt Object is locked saltado
C:\WINDOWS\system32\config\system Object is locked saltado
C:\WINDOWS\system32\config\system.LOG Object is locked saltado
C:\WINDOWS\system32\h323log.txt Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.BTR Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\INDEX.MAP Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING.VER Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING1.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\MAPPING2.MA P Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.DAT A Object is locked saltado
C:\WINDOWS\system32\wbem\Repository\FS\OBJECTS.MAP Object is locked saltado
C:\WINDOWS\wiadebug.log Object is locked saltado
C:\WINDOWS\wiaservc.log Object is locked saltado
C:\WINDOWS\WindowsUpdate.log Object is locked saltado
D:\System Volume Information\MountPointManagerRemoteDatabase Object is locked saltado
D:\System Volume Information\_restore{DC4A9730-6FA2-4F32-933F-7D31E1FE5E0C}\RP3\change.log Object is locked saltado

Análisis completado.