Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Ola hace unos dias he notado que mi uso del CPU (en mi administrador de tareas) no baja de 80% y empieza a preocuparme antes nunca subia a mas de 50%
tengo una laptop Vaio de 160gb de disco duro y 2gb de memoria ram Windows Vista Home Premium he intentado encontrar errores con el tunUp, Advanced SystemCare y UniBlue SpeedUpMyPC, desfragmentar el disco pero no logro que el uso del CPU baje que puedo hacer para bajarlo?

Use varios antivirus y se supone que estoy libre de Virus el HijackThis me mando esto:
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 05:31:23 p.m., on 29/05/2009
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

***Editado***

Hola digimouse.


Realiza lo siguiente:

1. Descarga y ejecuta Ccleaner.
   • Usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos.
   • Después usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).
   
   
2. Realiza un análisis completo de Pc con: Kaspersky Online Scanner.

En la próxima respuesta:
- Pega el reporte de Kaspersky .
- Nos cuenta los resultados.

Salu2!.

Ola
primero GRACIAS por responder (:
hice lo que me dijiste con CCleaner y rsolvio las fallas que encontro
el Kapersky tardo como 4 horas, mi compu ya olia a quemado :S:S y solo habia analizado el 55% de mi disco duro :S:S lo pare ahi por que repito olia mucho a quemado aqui esta el informe:

--------------------------------------------------------------------------------
KASPERSKY ONLINE SCANNER 7.0 REPORT
Saturday, May 30, 2009
Operating System: Microsoft Windows Vista Home Premium Edition, 32-bit Service Pack 1 (build 6001)
Kaspersky Online Scanner version: 7.0.26.13
Program database last update: Sunday, May 31, 2009 00:29:06
Records in database: 2281150
--------------------------------------------------------------------------------

Scan settings:
Scan using the following database: extended
Scan archives: yes
Scan mail databases: yes

Scan area - My Computer:
C:\
D:\
E:\
F:\

Scan statistics:
Files scanned: 108678
Threat name: 5
Infected objects: 6
Suspicious objects: 0
Duration of the scan: 03:50:40


File name / Threat name / Threats count
C:\Program Files\Crcle Developement\Uninstall.exe Infected: Trojan.Win32.Obfuscated.abht 1
C:\Users\x\Downloads\Diseño&Editores\PhotoshopCS4. exe Infected: Trojan.Win32.Agent2.epe 1
C:\Users\x\Downloads\Photoshop CS4 VISTA By Tomy\Photoshop CS4 VISTA\Iniciar.exe Infected: Trojan.Win32.Agent2.epe 1
C:\Users\x\Downloads\Trick\hide ip 3 5 platinium.rar Infected: P2P-Worm.Win32.Delf.bx 1
C:\Users\x\Downloads\Trick\mdetect.exe Infected: not-a-virus:Monitor.Win32.MSNDetect.l 1
C:\Users\x\Downloads\Trick\mdetect.exe Infected: not-a-virus:Monitor.Win32.MessengerLog.w 1

The scan was stopped by the user.

tengo varios virus pero ninguno de mis antivirus los habia detectado tengo el avast, norton, spyware terminator y el spyware doctor

Hola.

Haz esto:

1.- Desinstala este programa (si aun se encuentra): Crcle Developement

• Luego elimina esta carpeta: C:\Program Files\Crcle Developement\

2.- Elimina todos estos archivos ( al terminar vacia la papelera de reciclaje):
3.- Descarga y ejecuta Glary Utilities.

4.- Descarga y ejecuta Argente Registry Cleaner.

5.- Haz esto:

Descargar DDS.pif desde aquí y guardarla en su escritorio de Windows.
Deshabilite cualquier bloqueador de script y a continuación, haga doble clic en dds.pif para ejecutar la herramienta y espere pacientemente el reporte.

• Cuando haya terminado, DDS, se abrirá dos (2) los reportes:
  1. DDS.txt
  2. Attach.txt
• Guardar los dos informes en su escritorio y pegue únicamente el reporte del archivo DDS.txt en este mismo mensaje.

*Nota* Guarde reporte del archivo Attach.txt y péguelo únicamente si se le solicita.

Recuerda regresar con el reporte de DDS y contarnos los resultados.

Salu2!

Tengo un pequeño problema con las instrucciones que me diste... dos en realidad, el primer programa no esta, y el Argente Registry Cleaner lo descarge e instale pero no abre :S dice "The aplication requires to be run with the full access token of an administrator" y no abre.. y si estoy como administrador mi sesion es de administrador.. ahora tratare con el dds.pif

Hola.


Glary Utilities está en la pagina n° 2. -->Herramientas | InfoSpyware - Part 2<--

Para ejecutar las herramientas haz clic derecho sobre el icono y selecciona la opción "Ejecutar como administrador".

Salu2!.

Ola aqui estan mis resultados:
Crcle Developement es el que no esta
Glary Utilities ya lo descarge y ejecute soluciono algunos errores
Argente Registry Cleaner igual lo ejecute sin problemas encontro fallas y las arreglo
el DDS.pif aqui esta (:

DDS (Ver_09-05-14.01) - NTFSx86 NETWORK
Run by X at 16:43:55.10 on 31/05/2009
Internet Explorer: 8.0.6001.18702 BrowserJavaVersion: 1.6.0_13
Microsoft® Windows Vista™ Home Premium 6.0.6001.1.1252.52.3082.18.2046.1342 [GMT -7:00]

SP: Spyware Doctor *enabled* (Updated) {1C3EDD79-273E-46ac-99F8-EFA9E7CBC301}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files\Spyware Doctor\pctsAuxs.exe
C:\Program Files\Spyware Doctor\pctsSvc.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Windows\system32\taskmgr.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Users\X\Downloads\dds.pif
C:\Windows\system32\conime.exe
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.poresto.net/
uDefault_Page_URL = hxxp://vaio.sony-latin.com
mStart Page = hxxp://www.forospyware.com
uInternet Settings,ProxyOverride = *.local
uURLSearchHooks: H - No File
mURLSearchHooks: H - No File
BHO: Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: HP Print Clips: {053f9267-dc04-4294-a72c-58f732d338c0} - c:\program files\hp\smart web printing\hpswp_framework.dll
BHO: Adobe PDF Link Helper: {18df081c-e8ad-4283-a596-fa578c2ebdc3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelperShim.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Search Helper: {6ebf7485-159f-4bff-a14f-b9e3aac4465b} - c:\program files\microsoft\search enhancement pack\search helper\SEPsearchhelperie.dll
BHO: Groove GFS Browser Helper: {72853161-30c5-4d22-b7f9-0bbc1d38a37e} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll
BHO: SSVHelper Class: {761497bb-d6f0-462c-b6eb-d4daf1d92d43} - c:\program files\java\jre6\bin\ssv.dll
BHO: Windows Live Aplicación auxiliar de inicio de sesión: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\program files\common files\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Google Toolbar Helper: {aa58ed58-01dd-4d91-8333-cf10577473f7} - c:\program files\google\google toolbar\GoogleToolbar.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: Windows Live Toolbar Helper: {e15a8dc0-8516-42a1-81ea-dc94ec1acf10} - c:\program files\windows live\toolbar\wltcore.dll
TB: Veoh Browser Plug-in: {d0943516-5076-4020-a3b5-aefaf26ab263} - c:\program files\veoh networks\veoh\plugins\reg\VeohToolbar.dll
TB: Veoh Web Player Video Finder: {0fbb9689-d3d7-4f7a-a2e2-585b10099bfc} - c:\program files\veoh networks\veohwebplayer\VeohIEToolbar.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: Google Toolbar: {2318c2b1-4965-11d4-9b18-009027a5cd4f} - c:\program files\google\google toolbar\GoogleToolbar.dll
TB: Yahoo! Toolbar: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
uRun: [swg] c:\program files\google\googletoolbarnotifier\GoogleToolbarNo tifier.exe
uRun: [ISUSPM Startup] "c:\program files\common files\installshield\updateservice\ISUSPM.exe" -startup
uRun: [WMPNSCFG] c:\program files\windows media player\WMPNSCFG.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [Apoint] c:\program files\apoint\Apoint.exe
mRun: [ISBMgr.exe] "c:\program files\sony\isb utility\ISBMgr.exe"
mRun: [VAIOCameraUtility] "c:\program files\sony\vaio camera utility\VCUServe.exe"
mRun: [VAIOSurvey] c:\program files\sony\vaio survey\Vista VAIO Survey.exe
mRun: [ISTray] "c:\program files\spyware doctor\pctsTray.exe"
mRun: [GrooveMonitor] "c:\program files\microsoft office\office12\GrooveMonitor.exe"
mRun: [Symantec PIF AlertEng] "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\pifsvc.exe" /a /m "c:\program files\common files\symantec shared\pif\{b8e1dd85-8582-4c61-b58f-2f227fca9a08}\AlertEng.dll"
mRun: [UnlockerAssistant] "c:\program files\unlocker\UnlockerAssistant.exe"
mRun: [SpywareTerminator] "c:\program files\spyware terminator\SpywareTerminatorShield.exe"
mRun: [HP Software Update] c:\program files\hp\hp software update\HPWuSchd2.exe
mRun: [NvSvc] RUNDLL32.EXE c:\windows\system32\nvsvc.dll,nvsvcStart
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [Adobe Reader Speed Launcher] "c:\program files\adobe\reader 9.0\reader\Reader_sl.exe"
mRun: [avast!] "c:\program files\alwil software\avast4\ashDisp.exe"
mRun: [AdobeCS4ServiceManager] "c:\program files\common files\adobe\cs4servicemanager\CS4ServiceManager.ex e" -launchedbylogin
mRun: [ISUSScheduler] "c:\program files\common files\installshield\updateservice\issch.exe" -start
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
dRun: [msnmsgr] "c:\program files\windows live\messenger\msnmsgr.exe" /background
dRunOnce: [<NO NAME>]
mExplorerRun: [<NO NAME>] 1 (0x1)
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\sta rtup\adobeg~1.lnk - c:\program files\common files\adobe\calibration\Adobe Gamma Loader.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\sta rtup\blueto~1.lnk - c:\program files\toshiba\bluetooth toshiba stack\TosBtMng.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\sta rtup\hp digital imaging monitor.lnk - c:\program files\hp\digital imaging\bin\hpqtra08.exe
IE: Add to Google Photos Screensa&ver - c:\windows\system32\GPhotos.scr/200
IE: {d9288080-1baa-4bc4-9cf8-a92d743db949} - c:\users\x1\appdata\roaming\microsoft\windows\star t menu\programs\imvu\Run IMVU.lnk
IE: {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBC} - c:\program files\java\jre6\bin\ssv.dll
IE: {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - {5F7B1267-94A9-47F5-98DB-E99415F33AEC} - c:\program files\windows live\writer\WriterBrowserExtension.dll
IE: {2670000A-7350-4f3c-8081-5663EE0C6C49} - {48E73304-E1D6-4330-914C-F5F514E3486C} - c:\progra~1\micros~4\office12\ONBttnIE.dll
IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\program files\hp\smart web printing\hpswp_extensions.dll
IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\program files\hp\smart web printing\hpswp_extensions.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~4\office12\REFIEBAR.DLL
DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} - hxxp://www.kaspersky.com/kos/spanish/kavwebscan_unicode.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://downloads.ewido.net/ewidoOnlineScan.cab
DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://gfx1.hotmail.com/mail/w3/resources/VistaMSNPUpldes-us.cab
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/ES-MX/a-UNO1/GAME_UNO1.cab
DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} - hxxp://x1bop.spaces.live.com/PhotoUpload/VistaMsnPUpldes-mx.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/polarbear/ultrashim.cab
DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0016-0000-0000-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_13-windows-i586.cab
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
Filter: x-sdch - {B1759355-3EEC-4C1E-B0F1-B719FE26E377} - c:\program files\google\google toolbar\component\fastsearch_A8904FB862BD9564.dll
Handler: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - c:\program files\microsoft office\office12\GrooveSystemServices.dll
Notify: VESWinlogon - VESWinlogon.dll
SEH: Groove GFS Stub Execution Hook: {b5a7f190-dda6-4420-b3ba-52453494e6cd} - c:\program files\microsoft office\office12\GrooveShellExtensions.dll

================= FIREFOX ===================

FF - ProfilePath - c:\users\x\appdata\roaming\mozilla\firefox\profile s\30hbe1q7.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2165679&SearchSource=3&q=
FF - prefs.js: browser.search.selectedEngine - P2P_Max_ES Customized Web Search
FF - prefs.js: browser.startup.homepage - hxxp://search.conduit.com/?ctid=CT2165679&SearchSource=13
FF - prefs.js: keyword.URL - hxxp://search.conduit.com/ResultsExt.aspx?ctid=CT2165679&q=
FF - component: c:\users\x\appdata\roaming\mozilla\firefox\profile s\30hbe1q7.default\extensions\{1e9ae952-269d-422b-9eab-b12803b8e22b}\components\FFAlert.dll
FF - plugin: c:\program files\google\google updater\2.4.1536.6592\npCIDetect13.dll
FF - plugin: c:\program files\microsoft\office live\npOLW.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npqtplugin8.dll
FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
FF - plugin: c:\program files\veoh networks\veoh\plugins\noreg\NPVeohVersion.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\NPVeohTVPlugin.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\npWebPlayerVideoPluginATL.d ll
FF - plugin: c:\program files\windows live\photo gallery\NPWLPG.dll

============= SERVICES / DRIVERS ===============

R2 sdAuxService;PC Tools Auxiliary Service;c:\program files\spyware doctor\pctsAuxs.exe [2008-5-15 356920]
S1 aswSP;avast! Self Protection;c:\windows\system32\drivers\aswSP.sys [2009-2-26 114768]
S1 sp_rsdrv2;Spyware Terminator Driver 2;c:\windows\system32\drivers\sp_rsdrv2.sys [2008-10-6 141312]
S2 aswFsBlk;aswFsBlk;c:\windows\system32\drivers\aswF sBlk.sys [2009-2-26 20560]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\as wMonFlt.sys [2009-2-26 51792]
S2 MSSQL$VAIO_VEDB;SQL Server (VAIO_VEDB);c:\program files\microsoft sql server\mssql.1\mssql\binn\sqlservr.exe [2008-11-24 29263712]
S2 Programador de LiveUpdate automático;Programador de LiveUpdate automático;c:\program files\symantec\liveupdate\AluSchedulerSvc.exe [2008-5-14 554352]
S2 regi;regi;c:\windows\system32\drivers\regi.sys [2007-4-17 11032]
S2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
S3 fssfltr;FssFltr;c:\windows\system32\drivers\fssflt r.sys [2009-2-18 55280]
S3 fsssvc;Windows Live Protección Infantil;c:\program files\windows live\family safety\fsssvc.exe [2009-2-6 533360]
S3 ICScsiSV;Image Converter SCSI Service;c:\program files\sony\image converter 3\ICScsiSV.exe [2008-5-14 75952]
S3 IcVzMonLauncher;IcVzMonLauncher;c:\program files\sony\image converter 3\IcVzMonLauncher.exe [2008-5-14 67760]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-1-25 42000]
S3 pnetmdm;PdaNet Modem;c:\windows\system32\drivers\pnetmdm.sys [2009-5-26 9472]
S3 R5U870FLx86;R5U870 UVC Lower Filter ;c:\windows\system32\drivers\R5U870FLx86.sys [2007-4-27 74240]
S3 R5U870FUx86;R5U870 UVC Upper Filter ;c:\windows\system32\drivers\R5U870FUx86.sys [2007-4-27 43904]
S3 SonyImgF;Sony Image Conversion Filter Driver;c:\windows\system32\drivers\SonyImgF.sys [2007-4-30 31104]
S3 ti21sony;ti21sony;c:\windows\system32\drivers\ti21 sony.sys [2007-4-27 807424]
S3 VAIOMediaPlatform-UCLS-AppServer;VAIO Media Content Collection;c:\program files\sony\vaio media integrated server\UCLS.exe [2008-5-14 745472]
S3 VAIOMediaPlatform-UCLS-HTTP;VAIO Media Content Collection (HTTP);c:\program files\sony\vaio media integrated server\platform\SV_Httpd.exe [2008-5-14 397312]
S3 VAIOMediaPlatform-UCLS-UPnP;VAIO Media Content Collection (UPnP);c:\program files\sony\vaio media integrated server\platform\UPnPFramework.exe [2008-5-14 1089536]

============== File Associations ===============

inifile=%SystemRoot%\System32\NOTEPAD.EXE %1"
piffile="%1" %*"

=============== Created Last 30 ================

2009-05-30 22:40 <DIR> --d----- c:\program files\Argente Software
2009-05-30 22:37 <DIR> --d----- c:\users\x\appdata\roaming\GlarySoft
2009-05-30 22:29 <DIR> --d----- c:\program files\Glary Utilities
2009-05-30 17:16 <DIR> --d----- c:\program files\Yahoo!
2009-05-30 17:15 <DIR> --d----- c:\program files\CCleaner
2009-05-29 17:29 <DIR> --d----- c:\program files\Trend Micro
2009-05-29 16:11 <DIR> --d----- c:\users\x\appdata\roaming\IObit
2009-05-29 15:59 <DIR> --d----- c:\users\x\appdata\roaming\uniblue
2009-05-26 20:26 <DIR> --d----- C:\FileZilla FTP Client
2009-05-26 10:06 9,472 a------- c:\windows\system32\drivers\pnetmdm.sys
2009-05-26 09:55 <DIR> --d----- c:\programdata\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-26 09:55 <DIR> --d----- c:\progra~2\{8CD7F5AF-ECFA-4793-BF40-D8F42DBFF906}
2009-05-26 09:53 <DIR> --d----- c:\program files\Bonjour
2009-05-22 19:09 <DIR> --d----- c:\program files\SmartFTP Client 3.0 Setup Files
2009-05-19 16:29 <DIR> --d----- c:\program files\P2P_Max_ES
2009-05-19 15:36 <DIR> --d----- c:\users\x\appdata\roaming\LimeWire
2009-05-02 20:44 <DIR> --d----- c:\program files\CamStudio

==================== Find3M ====================

2009-05-30 18:41 12,978 a------- c:\users\x\appdata\roaming\nvModes.dat
2009-05-30 17:15 714,694 a------- c:\windows\system32\perfh00A.dat
2009-05-30 17:15 147,302 a------- c:\windows\system32\perfc00A.dat
2009-05-26 14:25 143,360 a------- c:\windows\inf\infstrng.dat
2009-05-26 14:25 86,016 a------- c:\windows\inf\infstor.dat
2009-05-26 14:25 86,016 a------- c:\windows\inf\infpub.dat
2009-03-16 20:38 40,960 a------- c:\windows\apppatch\apihex86.dll
2009-03-16 20:38 13,824 a------- c:\windows\system32\apilogen.dll
2009-03-16 20:38 24,064 a------- c:\windows\system32\amxread.dll
2009-03-09 05:19 410,984 a------- c:\windows\system32\deploytk.dll
2009-03-08 04:34 914,944 a------- c:\windows\system32\wininet.dll
2009-03-08 04:34 43,008 a------- c:\windows\system32\licmgr10.dll
2009-03-08 04:33 18,944 a------- c:\windows\system32\corpol.dll
2009-03-08 04:33 109,056 a------- c:\windows\system32\iesysprep.dll
2009-03-08 04:33 109,568 a------- c:\windows\system32\PDMSetup.exe
2009-03-08 04:33 132,608 a------- c:\windows\system32\ieUnatt.exe
2009-03-08 04:33 107,520 a------- c:\windows\system32\RegisterIEPKEYs.exe
2009-03-08 04:33 107,008 a------- c:\windows\system32\SetIEInstalledDate.exe
2009-03-08 04:33 103,936 a------- c:\windows\system32\SetDepNx.exe
2009-03-08 04:33 420,352 a------- c:\windows\system32\vbscript.dll
2009-03-08 04:32 72,704 a------- c:\windows\system32\admparse.dll
2009-03-08 04:32 71,680 a------- c:\windows\system32\iesetup.dll
2009-03-08 04:32 66,560 a------- c:\windows\system32\wextract.exe
2009-03-08 04:32 169,472 a------- c:\windows\system32\iexpress.exe
2009-03-08 04:31 34,816 a------- c:\windows\system32\imgutil.dll
2009-03-08 04:31 48,128 a------- c:\windows\system32\mshtmler.dll
2009-03-08 04:31 45,568 a------- c:\windows\system32\mshta.exe
2009-03-08 04:22 156,160 a------- c:\windows\system32\msls31.dll
2009-03-02 21:46 3,599,328 a------- c:\windows\system32\ntkrnlpa.exe
2009-03-02 21:46 3,547,632 a------- c:\windows\system32\ntoskrnl.exe
2009-03-02 21:40 499,200 a------- c:\windows\system32\wbem\WmiPrvSD.dll
2009-03-02 21:40 129,024 a------- c:\windows\system32\wbem\WmiDcPrv.dll
2009-03-02 21:39 183,296 a------- c:\windows\system32\sdohlp.dll
2009-03-02 21:39 551,424 a------- c:\windows\system32\rpcss.dll
2009-03-02 21:39 26,112 a------- c:\windows\system32\printfilterpipelineprxy.dll
2009-03-02 21:37 98,304 a------- c:\windows\system32\iasrecst.dll
2009-03-02 21:37 54,784 a------- c:\windows\system32\iasads.dll
2009-03-02 21:37 44,032 a------- c:\windows\system32\iasdatastore.dll
2009-03-02 21:36 615,424 a------- c:\windows\system32\wbem\fastprox.dll
2009-03-02 20:04 666,624 a------- c:\windows\system32\printfilterpipelinesvc.exe
2009-03-02 19:38 17,408 a------- c:\windows\system32\iashost.exe
2009-03-02 19:16 247,296 a------- c:\windows\system32\wbem\WmiPrvSE.exe
2008-10-25 15:26 174 a--sh--- c:\program files\desktop.ini
2008-10-25 15:09 665,600 a------- c:\windows\inf\drvindex.dat
2006-11-02 08:43 336,930 a------- c:\windows\inf\perflib\0c0a\perfi.dat
2006-11-02 08:43 336,930 a------- c:\windows\inf\perflib\0c0a\perfh.dat
2006-11-02 08:43 40,258 a------- c:\windows\inf\perflib\0c0a\perfd.dat
2006-11-02 08:43 40,258 a------- c:\windows\inf\perflib\0c0a\perfc.dat
2006-11-02 02:20 287,440 a------- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 02:20 287,440 a------- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 02:20 30,674 a------- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 02:20 30,674 a------- c:\windows\inf\perflib\0000\perfc.dat
2009-01-02 14:36 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\lo cal\microsoft\windows\history\history.ie5\index.da t
2009-01-02 14:36 32,768 a--sh--- c:\windows\serviceprofiles\localservice\appdata\lo cal\microsoft\windows\temporary internet files\content.ie5\index.dat
2009-01-02 14:36 16,384 a--sh--- c:\windows\serviceprofiles\localservice\appdata\ro aming\microsoft\windows\cookies\index.dat

============= FINISH: 16:46:15.67 ===============

Mi uso del cpu se mantiene en un minimo de 65% pero a ratos sube a 100%

Hola.

Creo que están entrando en conflicto los antispyware que haz instalado al ordenador con el windows defender.

• spyware doctor
• spyware terminator

La solución: configurarlos para que no inicien cuando arranque el sistema; o desinstalarlos si el problema persiste.

También tienes ejecutándose desde el inicio el windows live messenger y el windows media player, recomiendo que los configures para que no se ejecuten desde el arranque.

Nos comentas.

Salu2!.

Desinstale el Spyware Termitator
El Spyware Doctor ya no inicia cuando abro sesion
El Messenger ya no inicia al abrir sesion
y al media player no supe como configurarlo

he visto que en mi administrador de tareas dice que lo que usa mas es el explorer.exe pero eso no lo puedo quitar o si?
luego el firefox.. pero he intentado usando el internet explorer y usa lo mismo..
perdona por la molestia