Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

DDS (Ver_09-10-26.01) - NTFSx86 NETWORK 
Run by Josemi A at 21:33:39,03 on 27/10/2009
Internet Explorer: 7.0.5730.11 BrowserJavaVersion: 1.6.0_16
Microsoft Windows XP Professional  5.1.2600.3.1252.34.1033.18.1022.551 [GMT 1:00]

AV: Bitdefender Antivirus *On-access scanning disabled* (Outdated)   {6C4BB89C-B0ED-4F41-A29C-4373888923BB}
AV: AntiVir Desktop *On-access scanning disabled* (Outdated)   {AD166499-45F9-482A-A743-FDD3350758C7}

============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\Explorer.EXE
C:\Documents and Settings\Josemi A\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Josemi A\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Documents and Settings\Josemi A\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Josemi A\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Josemi A\Local Settings\Application Data\Google\Chrome\Application\chrome.exe
G:\anime\dds.pif

============== Pseudo HJT Report ===============

uStart Page = hxxp://www.windowsxlive.net
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
uInternet Connection Wizard,ShellNext = hxxp://es.es.acer.yahoo.com/
uInternet Settings,ProxyServer = 206.230.106.206:80
uURLSearchHooks: myBabylon English Toolbar: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - c:\program files\mybabylon_english\tbmyBa.dll
uURLSearchHooks: Barra Yahoo!: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: &Yahoo! Toolbar Helper: {02478d38-c3f9-4efb-9b51-7695eca05670} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\adobe\acrobat 7.0\activex\AcroIEHelper.dll
BHO: myBabylon English Toolbar: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - c:\program files\mybabylon_english\tbmyBa.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\program files\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\program files\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
BHO: Hotspot Shield Class: {f9e4a054-e9b1-4bc3-83a3-76a1ae736170} - g:\program files\hotspot shield\hssie\HssIE.dll
BHO: SingleInstance Class: {fdad4da1-61a2-4fd8-9c17-86f7ac245081} - c:\program files\yahoo!\companion\installs\cpn\YTSingleInstance.dll
TB: Acer eDataSecurity Management: {5cbe3b7c-1e47-477e-a7dd-396db0476e29} - c:\windows\system32\eDStoolbar.dll
TB: {ED0E8CA5-42FB-4B18-997B-769E0408E79D} - No File
TB: FlashGet Bar: {e0e899ab-f487-11d5-8d29-0050ba6940e3} - c:\progra~1\flashget\fgiebar.dll
TB: &Windows Live Toolbar: {21fa44ef-376d-4d53-9b0f-8a89d3229068} - c:\program files\windows live\toolbar\wltcore.dll
TB: {0FBB9689-D3D7-4f7a-A2E2-585B10099BFC} - No File
TB: myBabylon English Toolbar: {b2e293ee-fd7e-4c71-a714-5f4750d8d7b7} - c:\program files\mybabylon_english\tbmyBa.dll
TB: Barra Yahoo!: {ef99bd32-c1fb-11d2-892f-0090271d4f88} - c:\program files\yahoo!\companion\installs\cpn\yt.dll
TB: {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - No File
TB: {147D6308-0614-4112-89B1-31402F9B82C4} - No File
TB: {C2ED826E-8903-4A9D-B0DF-3A8FB8EA918A} - No File
TB: {A057A204-BACC-4D26-C39E-35F1D2A32EC8} - No File
TB: {D4027C7F-154A-4066-A1AD-4243D8127440} - No File
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [ePower_DMC] c:\acer\empowering technology\epower\ePower_DMC.exe
mRun: [eDataSecurity Loader] c:\acer\empowering technology\edatasecurity\eDSloader.exe
mRun: [Acer ePower Management] c:\acer\empowering technology\epower\Acer ePower Management.exe boot
mRun: [ADMTray.exe] "c:\acer\empowering technology\admtray.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [nwiz] nwiz.exe /install
mRun: [SunJavaUpdateSched] "c:\program files\java\jre6\bin\jusched.exe"
mRun: [Malwarebytes Anti-Malware (reboot)] "g:\program files\malwarebytes' anti-malware\mbam.exe" /runcleanupscript
mRunOnce: [NSSInstallation] c:\windows\system32\adobe\shockwave 11\nssstub.exe /runonce
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
StartupFolder: c:\docume~1\alluse~1\startm~1\programs\startup\adober~1.lnk - c:\program files\adobe\acrobat 7.0\reader\reader_sl.exe
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: Descargar con Fl&ashGet - c:\program files\flashget\jc_link.htm
IE: Descargar todo con Flas&hGet - c:\program files\flashget\jc_all.htm
IE: {4BA36342-D9B9-4D4A-935E-47A6E729B785}
IE: {D6E814A0-E0C5-11d4-8D29-0050BA6940E3} - c:\progra~1\flashget\flashget.exe
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\program files\messenger\msmsgs.exe
IE: {36ECAF82-3300-8F84-092E-AFF36D6C7040} - {86529161-034E-4F8A-88D2-3C625E612E04}
IE: {58ECB495-38F0-49cb-A538-10282ABF65E7} - {E763472E-A716-4CD9-89BD-DBDA6122F741} - c:\program files\hp\smart web printing\hpswp_extensions.dll
IE: {700259D7-1666-479a-93B1-3250410481E8} - {A93C41D8-01F8-4F8B-B14C-DE20B117E636} - c:\program files\hp\smart web printing\hpswp_extensions.dll
DPF: {02BF25D5-8C17-4B23-BC80-D3488ABDDC6B} - hxxp://a1540.g.akamai.net/7/1540/52/20070711/qtinstall.info.apple.com/qtactivex/qtplugin.cab
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
DPF: {17492023-C23A-453E-A040-C7C580BBF700} - hxxp://go.microsoft.com/fwlink/?linkid=39204
DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} - hxxp://messenger.zone.msn.com/binary/msgrchkr.cab56986.cab
DPF: {2C153C75-8476-434B-B3C3-57B63A3D1939} - hxxp://www.worldwinner.com/games/v48/brickout/brickout.cab
DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} - c:\program files\yahoo!\common\yinsthelper.dll
DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} - hxxp://amunt1995.spaces.live.com//PhotoUpload/MsnPUpld.cab
DPF: {5D6F45B3-9043-443D-A792-115447494D24} - hxxp://messenger.zone.msn.com/ES-ES/a-UNO1/GAME_UNO1.cab
DPF: {69EF49E5-FE46-4B92-B5FA-2193AB7A6B8A} - hxxp://www.acclaim.com/cabs/acclaim_v5.cab
DPF: {6FC19219-C47E-4880-9A79-D218A1C374F9} - hxxp://www.netmarble.jp/_common/cab/NMJTransX.cab
DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} - hxxp://webfansdeharrypotter.spaces.live.com/PhotoUpload/MsnPUpld.cab
DPF: {8A94C905-FF9D-43B6-8708-F0F22D22B1CB} - hxxp://www.worldwinner.com/games/shared/wwlaunch.cab
DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {8E82893F-7ED1-4811-A247-580DCC0E2629} - hxxp://www.sf.in.th/activex/StarterSFTDE.cab
DPF: {8FFBE65D-2C9C-4669-84BD-5829DC0B603C} - hxxp://fpdownload.macromedia.com/get/flashplayer/current/ultrashim.cab
DPF: {B8BE5E93-A60C-4D26-A2DC-220313175592} - hxxp://messenger.zone.msn.com/binary/ZIntro.cab56649.cab
DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} - hxxp://messenger.zone.msn.com/binary/MessengerStatsPAClient.cab56907.cab
DPF: {CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_03-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_04-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_06-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_07-windows-i586.cab
DPF: {CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} - hxxp://java.sun.com/update/1.6.0/jinstall-1_6_0_16-windows-i586.cab
DPF: {D0FD5E32-CABD-4A6E-BD0F-94ACE89CCE03} - hxxp://down.hangame.co.jp/jp/dist/hgstart/HGPluginJP23.cab
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
DPF: {F5A7706B-B9C0-4C89-A715-7A0C6B05DD48} - hxxp://messenger.zone.msn.com/binary/MineSweeper.cab56986.cab
DPF: {F8C5C0F1-D884-43EB-A5A0-9E1C4A102FA8} - hxxps://secure.gopetslive.com/dev/GoPetsWeb.cab
TCP: {A55E5BDA-721E-48B2-8ABB-CFCB56B1AB9E} = 208.67.222.222,208.67.220.220
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: !SASWinLogon - g:\program files\superantispyware\SASWINLO.dll
Notify: igfxcui - igfxdev.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
SEH: SABShellExecuteHook Class: {5ae067d3-9afb-48e0-853a-ebb7f4a000da} - g:\program files\superantispyware\SASSEH.DLL
SecurityProviders: msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll,

================= FIREFOX ===================

FF - ProfilePath - c:\docume~1\josemi~1\applic~1\mozilla\firefox\profiles\g5xvw84a.default\
FF - prefs.js: browser.search.defaulturl - hxxp://www.google.com/search?lr=&ie=UTF-8&oe=UTF-8&q=
FF - prefs.js: browser.search.selectedEngine - Yahoo
FF - prefs.js: browser.startup.homepage - www.google.es
FF - prefs.js: keyword.URL - hxxp://es.search.yahoo.com/search?ei=utf-8&fr=megaup&p=
FF - prefs.js: network.proxy.http - 89.97.232.161
FF - prefs.js: network.proxy.http_port - 80
FF - prefs.js: network.proxy.type - 4
FF - plugin: c:\documents and settings\all users\application data\nexoneu\ngm\npNxGameeu.dll
FF - plugin: c:\documents and settings\josemi a\local settings\application data\google\update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\byond\bin\npbyond.dll
FF - plugin: c:\program files\google\update\1.2.183.7\npGoogleOneClick8.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbittorrent.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npbyond.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npijjiautoinstallpluginff.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npijjiCHPlugin.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npijjiFFPlugin1.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npmusicn.dll
FF - plugin: c:\program files\mozilla firefox\plugins\npPandoWebInst.dll
FF - plugin: c:\program files\quicktime\plugins\npqtplugin8.dll
FF - plugin: c:\program files\veoh networks\veohwebplayer\npWebPlayerVideoPluginATL.dll
FF - plugin: c:\windows\system32\Npindeo.dll
FF - plugin: c:\windows\system32\npmirage.dll
FF - plugin: g:\opera\program\plugins\npmusicn.dll
FF - plugin: g:\opera\program\plugins\npqtplugin.dll
FF - plugin: g:\opera\program\plugins\npqtplugin2.dll
FF - plugin: g:\opera\program\plugins\npqtplugin3.dll
FF - plugin: g:\opera\program\plugins\npqtplugin4.dll
FF - plugin: g:\opera\program\plugins\npqtplugin5.dll
FF - plugin: g:\opera\program\plugins\npqtplugin6.dll
FF - plugin: g:\opera\program\plugins\npqtplugin7.dll
FF - plugin: g:\opera\program\plugins\npqtplugin8.dll
FF - plugin: g:\opera\program\plugins\NPSWF32.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0003-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0004-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0006-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0007-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0011-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0013-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0015-ABCDEFFEDCBA}
FF - HiddenExtension: Java Console: No Registry Reference - c:\program files\mozilla firefox\extensions\{CAFEEFAC-0016-0000-0016-ABCDEFFEDCBA}

---- FIREFOX POLICIES ----
FF - user.js: network.http.max-connections-per-server - 8
FF - user.js: network.http.max-persistent-connections-per-server - 4
FF - user.js: content.max.tokenizing.time - 200000
FF - user.js: content.notify.interval - 100000
FF - user.js: content.switch.threshold - 650000
FF - user.js: nglayout.initialpaint.delay - 300

============= SERVICES / DRIVERS ===============

R3 taphss;Anchorfree HSS Adapter;c:\windows\system32\drivers\taphss.sys [2009-9-15 32768]
S0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [2009-10-26 28552]
S1 OsaFsLoc;OsaFsLoc;c:\windows\system32\drivers\OsaFsLoc.sys [2005-10-15 12106]
S1 SASDIFSV;SASDIFSV;g:\program files\superantispyware\sasdifsv.sys [2009-10-12 9968]
S1 SASKUTIL;SASKUTIL;g:\program files\superantispyware\SASKUTIL.SYS [2009-10-12 74480]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-8-31 108289]
S2 Cabal Official Wiki: Cabal Auto-Manual Updater update permissions manager. 7938.;Cabal Official Wiki: Cabal Auto-Manual Updater update permissions manager. 7938.; [x]
S2 cpuz132;cpuz132;c:\windows\system32\drivers\cpuz132_x32.sys [2009-9-15 12672]
S2 EpmPsd;Acer EPM Power Scheme Driver;c:\windows\system32\drivers\epm-psd.sys [2007-3-30 4096]
S2 EpmShd;Acer EPM System Hardware Driver;c:\windows\system32\drivers\epm-shd.sys [2007-3-30 78208]
S2 gupdate1ca0623a9ac64f0;Servicio Google Update (gupdate1ca0623a9ac64f0); [x]
S2 HssSrv;Hotspot Shield Routing Service;g:\program files\hotspot shield\hsswpr\hsssrv.exe [2009-9-15 331824]
S2 osaio;osaio;c:\windows\system32\drivers\osaio.sys [2005-6-30 7296]
S2 osanbm;osanbm;c:\windows\system32\drivers\osanbm.sys [2005-1-14 4010]
S2 Programador de LiveUpdate automático;Programador de LiveUpdate automático; [x]
S2 SeaPort;SeaPort;c:\program files\microsoft\search enhancement pack\seaport\SeaPort.exe [2009-5-19 240512]
S3 ByakkoDriver;ByakkoDriver;\??\c:\docume~1\josemi~1\locals~1\temp\226281.03-30-2009 --> c:\docume~1\josemi~1\locals~1\temp\226281.03-30-2009 [?]
S3 GarenaPEngine;GarenaPEngine;\??\c:\docume~1\josemi~1\locals~1\temp\ohq8b.tmp --> c:\docume~1\josemi~1\locals~1\temp\OHQ8B.tmp [?]
S3 GunzProtectDrv;GunzProtectDrv;\??\c:\program files\mpog spain\gunz\gunzprotectdrv.sys --> c:\program files\mpog spain\gunz\GunzProtectDrv.sys [?]
S3 HssTrayService;Hotspot Shield Tray Service;g:\program files\hotspot shield\bin\HssTrayService.exe [2009-9-15 57640]
S3 ICDUSB2;Sony IC Recorder (P);c:\windows\system32\drivers\ICDUSB2.sys [2002-11-28 39048]
S3 lv321av;Logitech USB PC Camera (VC0321);c:\windows\system32\drivers\lv321av.sys [2006-6-19 1097728]
S3 NdisFilt;OSA NdisFilter Protocol;c:\windows\system32\drivers\NdisFilt.sys [2005-9-13 4392]
S3 NPF;NetGroup Packet Filter Driver;c:\windows\system32\drivers\npf.sys [2007-3-30 32512]
S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\gamemon.des -service --> c:\windows\system32\GameMon.des -service [?]
S3 PPJoyBus;Parallel Port Joystick Bus device driver;c:\windows\system32\drivers\PPJoyBus.sys [2004-1-23 13952]
S3 PPortJoystick;Parallel Port Joystick device driver;c:\windows\system32\drivers\PPortJoy.sys [2004-1-23 28800]
S3 RkPavproc1;RkPavproc1;\??\c:\windows\system32\drivers\rkpavproc1.sys --> c:\windows\system32\drivers\RkPavproc1.sys [?]
S3 SASENUM;SASENUM;g:\program files\superantispyware\SASENUM.SYS [2009-10-12 7408]
S3 SPDTool;SPDTool;\??\c:\docume~1\josemi~1\locals~1\temp\spdtool.sys --> c:\docume~1\josemi~1\locals~1\temp\SPDTool.sys [?]
S3 XDva009;XDva009;\??\c:\windows\system32\xdva009.sys --> c:\windows\system32\XDva009.sys [?]
S3 XDva016;XDva016;\??\c:\windows\system32\xdva016.sys --> c:\windows\system32\XDva016.sys [?]
S3 XDva032;XDva032;\??\c:\windows\system32\xdva032.sys --> c:\windows\system32\XDva032.sys [?]
S3 XDva038;XDva038;\??\c:\windows\system32\xdva038.sys --> c:\windows\system32\XDva038.sys [?]
S4 Arca Eclipse;Arca Eclipse; [x]

============== File Associations ===============

regfile=regedit.exe "%1" %*
scrfile="%1" %*

=============== Created Last 30 ================

2009-10-26 22:27:01	28552	----a-w-	c:\windows\system32\drivers\pavboot.sys
2009-10-26 07:02:08	0	d-----w-	c:\program files\Panda Security
2009-10-25 20:43:07	0	d-----w-	c:\program files\DNA
2009-10-25 20:43:07	0	d-----w-	c:\docume~1\josemi~1\applic~1\DNA
2009-10-25 11:55:52	0	d-----w-	C:\NVIDIA
2009-10-25 11:51:48	38224	----a-w-	c:\windows\system32\drivers\mbamswissarmy.sys
2009-10-25 11:51:41	19160	----a-w-	c:\windows\system32\drivers\mbam.sys
2009-10-25 10:07:37	0	d-----w-	c:\windows\system32\VIRepair
2009-10-25 10:07:35	20480	----a-w-	c:\windows\system32\scrnrdr.exe
2009-10-24 01:19:40	0	d-----w-	c:\program files\common files\GC Install
2009-10-20 17:26:05	0	d-----w-	c:\program files\Ares
2009-10-14 23:58:06	41872	----a-w-	c:\windows\system32\xfcodec.dll
2009-10-11 17:20:29	33340	------w-	c:\windows\system32\dbmsqlgc.dll
2009-10-11 17:20:29	24576	------w-	c:\windows\system32\dbmsgnet.dll
2009-10-11 17:19:51	0	d-----w-	c:\program files\Microsoft SQL Server
2009-10-11 17:17:23	0	d-----w-	c:\program files\Vstplugins
2009-10-09 16:30:41	0	d-----w-	c:\docume~1\josemi~1\applic~1\Romeo Burner
2009-10-09 16:19:43	8704	--sha-w-	c:\windows\Thumbs.db
2009-10-03 15:02:55	0	d-----w-	C:\Hotspot Shield
2009-10-01 21:34:06	28672	----a-w-	c:\windows\system32\regclass.dll

==================== Find3M  ====================

2009-10-27 17:44:38	73976	----a-w-	c:\windows\system32\GDIPFONTCACHEV1.DAT
2009-09-27 18:09:05	107888	----a-w-	c:\windows\system32\CmdLineExt.dll
2009-09-20 14:30:41	98304	----a-w-	c:\windows\system32CmdLineExt.dll
2009-09-20 14:16:56	19968	----a-w-	c:\windows\system32\perfc5932.dat
2009-09-19 23:21:26	30829	----a-w-	c:\program files\Dibujo.JPG
2009-09-18 22:30:01	421888	----a-w-	c:\windows\NEXON_EU_DownloaderUpdater.exe
2009-09-15 20:04:58	37376	----a-w-	c:\windows\system32\drivers\HssDrv.sys
2009-09-15 20:04:58	32768	----a-w-	c:\windows\system32\drivers\taphss.sys
2009-09-14 16:28:47	74703	----a-w-	c:\windows\system32\mfc45.dll
2009-09-11 14:18:39	136192	----a-w-	c:\windows\system32\msv1_0.dll
2009-09-11 14:18:39	136192	------w-	c:\windows\system32\dllcache\msv1_0.dll
2009-09-10 22:26:58	98304	--sh--r-	c:\windows\system32\avsysdb.exe
2009-09-10 22:26:58	98304	------w-	c:\windows\system32\avgvsm.exe
2009-09-04 21:03:36	58880	----a-w-	c:\windows\system32\msasn1.dll
2009-09-04 21:03:36	58880	------w-	c:\windows\system32\dllcache\msasn1.dll
2009-08-29 11:19:36	86016	----a-w-	c:\windows\system32\frapsvid.dll
2009-08-28 10:28:59	70656	----a-w-	c:\windows\system32\dllcache\ie4uinit.exe
2009-08-28 10:28:59	13824	----a-w-	c:\windows\system32\dllcache\ieudinit.exe
2009-08-27 05:18:44	634648	----a-w-	c:\windows\system32\dllcache\iexplore.exe
2009-08-27 05:18:41	161792	----a-w-	c:\windows\system32\dllcache\ieakui.dll
2009-08-26 08:00:21	247326	----a-w-	c:\windows\system32\strmdll.dll
2009-08-26 08:00:21	247326	----a-w-	c:\windows\system32\dllcache\strmdll.dll
2009-08-25 15:04:30	75264	----a-w-	c:\windows\system32\uc_holybeast_launching.dll
2009-08-13 15:16:05	512000	----a-w-	c:\windows\system32\dllcache\jscript.dll
2009-08-06 18:24:18	327896	----a-w-	c:\windows\system32\dllcache\wucltui.dll
2009-08-06 18:24:18	209632	----a-w-	c:\windows\system32\dllcache\wuweb.dll
2009-08-06 18:24:10	35552	----a-w-	c:\windows\system32\dllcache\wups.dll
2009-08-06 18:24:06	53472	----a-w-	c:\windows\system32\dllcache\wuauclt.exe
2009-08-06 18:24:04	96480	----a-w-	c:\windows\system32\dllcache\cdm.dll
2009-08-06 18:23:54	575704	----a-w-	c:\windows\system32\dllcache\wuapi.dll
2009-08-06 18:23:46	1929952	----a-w-	c:\windows\system32\dllcache\wuaueng.dll
2009-08-05 09:01:48	204800	----a-w-	c:\windows\system32\mswebdvd.dll
2009-08-05 09:01:48	204800	------w-	c:\windows\system32\dllcache\mswebdvd.dll
2009-08-04 18:44:46	2189184	------w-	c:\windows\system32\dllcache\ntoskrnl.exe
2009-08-04 15:13:08	2145280	----a-w-	c:\windows\system32\ntoskrnl.exe
2009-08-04 15:13:08	2145280	------w-	c:\windows\system32\dllcache\ntkrnlmp.exe
2009-08-04 14:20:09	2023936	----a-w-	c:\windows\system32\ntkrnlpa.exe
2009-08-04 14:20:09	2023936	------w-	c:\windows\system32\dllcache\ntkrpamp.exe
2009-08-04 14:20:08	2066048	------w-	c:\windows\system32\dllcache\ntkrnlpa.exe
2009-07-31 13:23:10	411368	----a-w-	c:\windows\system32\deploytk.dll
2007-03-30 17:18:06	251	----a-w-	c:\program files\wt3d.ini
2007-06-05 16:10:28	848	--sha-w-	c:\windows\system32\KGyGaAvL.sys
2008-09-26 20:37:44	32768	--sha-w-	c:\windows\system32\config\systemprofile\local settings\history\history.ie5\mshist012008092620080927\index.dat

============= FINISH: 21:34:32,67 ===============

Fix Navipromo version 4.0.3 se inicio el 27/10/2009 22:35:43,25

!!! Peligro, este reporte incluye archivos/programas legitimos!!!
!!! Postee este reporte, en el foro donde esta recibiendo ayuda !!!

Fix, ejecutado desde C:\Program Files\navilog1

Actualizado el 21.10.2009 a las 22h00 por IL-MAFIOSO

Microsoft Windows XP Professional ( v5.1.2600 ) Service Pack 3
X86-based PC ( Multiprocessor Free : Genuine Intel(R) CPU           T2250  @ 1.73GHz )
BIOS : Ver 1.00PARTTBL
USER : Josemi A ( Administrator )
BOOT : Fail-safe with network boot

Antivirus : AntiVir Desktop 9.0.1.32 (Not Activated)


C:\ (Local Disk) - NTFS - Total:53 Go (Free:0 Go)
D:\ (Local Disk) - NTFS - Total:53 Go (Free:23 Go)
E:\ (CD or DVD)
G:\ (Local Disk) - FAT32 - Total:465 Go (Free:278 Go)


Busqueda efectuada en Modo Seguro

Etapa de limpieza efectuada en Modo Seguro


C:\Documents and Settings\All Users\startm~1\programs\WebMediaPlayer Eliminado !


Limpieza de C:\WINDOWS\Temp hecho !
Limpieza de C:\Documents and Settings\Josemi A\locals~1\Temp hecho !


*** Copia de Registro, a la carpeta de Copia de Seguridad ***

Copia de Seguiridad del Registro Hecho !

*** Limpiando el Registro ***

El registro fue limpiado




*** Scan completado 27/10/2009 22:37:27,62 ***