Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

recurro a su ayuda pues he intentado hacer de todo encuando he podido leer en el foro spyware, e echo lo que aca recomiendan para casos parecidos como el mio e corrido programas como:

smidfraudfix-ccleaner-malwarebytes-y el drweb-cureit por alguna extraña razon no reproduce ahora decidi pasarle el hijackthis pero como no se que es lo que voy a hacer pego mi blog de hijackthis para que porfavor me den lgun cosejo si observan algo estraña ya que yo n se mucho sobre le tema.
de antemano muhcas gracias.

----------------------------//////////////----------------------

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 02:48:51 p.m., on 03/11/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\igfxtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\Archivos de programa\Java\jre6\bin\jusched.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe
C:\WINDOWS\system32\RunDll32.exe
C:\WINDOWS\PixArt\PAC207\Monitor.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\WINDOWS\system32\escsrv.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\esclavo.exe
C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.cbm.com.ar/ini/comun
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext = http://windowsupdate.microsoft.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Skype add-on (mastermind) - {22BF413B-C6D2-4d91-82A9-A0F997BA588C} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Archivos de programa\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Archivos de programa\Google\GoogleToolbarNotifier\5.3.4501.141 8\swg.dll
O2 - BHO: Google Dictionary Compression sdch - {C84D72FE-E17D-4195-BB24-76C02E2E7C4E} - C:\Archivos de programa\Google\Google Toolbar\Component\fastsearch_B7C5AC242193BB3E.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dl l
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Archivos de programa\Google\Google Toolbar\GoogleToolbar_32.dll
O4 - HKLM\..\Run: [igfxtray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [igfxhkcmd] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [igfxpers] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre6\bin\jusched.exe"
O4 - HKLM\..\Run: [egui] "C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [Cmaudio] RunDll32 cmicnfg.cpl,CMICtrlWnd
O4 - HKLM\..\Run: [PAC207_Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Monitor] C:\WINDOWS\PixArt\PAC207\Monitor.exe
O4 - HKLM\..\Run: [Malwarebytes Anti-Malware (reboot)] "C:\Archivos de programa\Malwarebytes' Anti-Malware\mbam.exe" /runcleanupscript
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
O4 - HKCU\..\Run: [Skype] "C:\Archivos de programa\Skype\Phone\Skype.exe" /nosplash /minimized
O4 - HKCU\..\Run: [swg] "C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe"
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMN.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_2] regsvr32 /s /n /i:U shell32 (User 'Default user')
O4 - Startup: Chi_DESTROYS_XpWGA.lnk = C:\WINDOWS\Validation.bat
O4 - Global Startup: Actualizar la licencia del NOD32.lnk = C:\Archivos de programa\ESET\MiNODLogin\MiNODLogin.exe
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {5067A26B-1337-4436-8AFE-EE169C2DA79F} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Skype - {77BF5300-1474-4EC7-9980-D32B190E9B07} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsupdate/v6/V5Controls/en/x86/client/wuweb_site.cab?1257108760531
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Cargador del Terminal (escSrv) - Unknown owner - C:\WINDOWS\system32\escsrv.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
O24 - Desktop Component 0: (no name) - file:///C:/DOCUME~1/BLACKC~1/CONFIG~1/Temp/msohtml1/01/clip_image002.jpg

--
End of file - 7575 bytes

agradesco mucho la ayuda que me puedan prestar gracias.

Hola...

Realiza estos pasos por favor...

- Descarga la herramienta ComboFix.exe y guárdala en el escritorio.

• Desactiva temporalmente el Antivirus y/o Antispyware.
• Cierra todas las ventanas abiertas.
• Hacele doble clic al archivo ComboFix.exe y seguí las instrucciones.
• Cuando termine, generara un registro en C:\ComboFix.txt.
  • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
  • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.

• Reinicia y pega el reporte de C:\ComboFix.txt en este mismo mensaje.

Salu2
Recuerda volver y contarnos los resltados

HOla iD3vil hice lo que me dijiste pero el antivirus sigue desactivado ahi le dejo el reporte de Combofix aver si suted tiene lguan idea de que peuda estar pasando en mi pc.




-----------////////////////////////---------------------------------

ComboFix 09-11-03.01 - BlackCrystal™ 03/11/2009 19:16.1.2 - NTFSx86
Microsoft Windows XP Professional 5.1.2600.3.1252.52.3082.18.1015.603 [GMT -5:00]
Running from: c:\documents and settings\BlackCrystal™\Escritorio\ComboFix.exe

WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\esclavx.cfg
c:\windows\system32\msconfig.exe
c:\windows\system32\OgaCheckControl.dll
c:\windows\system32\tmp.reg

.
((((((((((((((((((((((((( Files Created from 2009-10-04 to 2009-11-04 )))))))))))))))))))))))))))))))
.

2009-11-03 22:18 . 2009-11-03 22:18 -------- d-----w- c:\archivos de programa\RegSeeker
2009-11-03 22:12 . 2009-11-03 22:12 -------- d-----w- c:\documents and settings\BlackCrystal™\DoctorWeb
2009-11-03 19:48 . 2009-11-03 19:48 -------- d-----w- c:\archivos de programa\Trend Micro
2009-11-03 18:56 . 2009-11-03 18:56 -------- d-----w- c:\documents and settings\BlackCrystal™\Datos de programa\Malwarebytes
2009-11-03 18:56 . 2009-09-10 20:54 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2009-11-03 18:56 . 2009-11-03 18:56 -------- d-----w- c:\archivos de programa\Malwarebytes' Anti-Malware
2009-11-03 18:56 . 2009-11-03 18:56 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Malwarebytes
2009-11-03 18:56 . 2009-09-10 20:53 19160 ----a-w- c:\windows\system32\drivers\mbam.sys
2009-11-02 15:23 . 2009-11-02 17:19 -------- d-----w- c:\documents and settings\All Users\Datos de programa\NOS
2009-11-02 14:20 . 2009-11-02 14:52 -------- d-----w- c:\documents and settings\BlackCrystal™\Datos de programa\U3
2009-11-02 14:11 . 2009-11-02 14:11 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-02 14:11 . 2009-11-02 14:11 -------- d-----w- c:\documents and settings\BlackCrystal™\Datos de programa\skypePM
2009-11-02 14:07 . 2009-11-03 23:03 -------- d-----w- c:\documents and settings\BlackCrystal™\Datos de programa\Skype
2009-11-02 14:07 . 2009-11-02 14:08 -------- d-----w- c:\archivos de programa\Google
2009-11-02 14:07 . 2009-11-02 14:07 -------- d-----w- c:\archivos de programa\Archivos comunes\Skype
2009-11-02 14:07 . 2009-11-02 14:07 -------- d-----r- c:\archivos de programa\Skype
2009-11-02 14:07 . 2009-11-02 14:07 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Skype
2009-11-02 07:12 . 2007-06-23 17:26 36 ----a-w- c:\windows\Validation.bat
2009-11-02 07:12 . 2006-11-14 12:27 1165 ----a-w- c:\windows\wga.reg
2009-11-02 07:09 . 2009-11-02 07:09 -------- dc----w- c:\windows\system32\DRVSTORE
2009-11-02 07:09 . 2009-11-02 07:09 -------- d-----w- c:\archivos de programa\Windows Live
2009-11-02 07:07 . 2009-11-02 07:07 -------- d-----w- c:\documents and settings\All Users\Datos de programa\ESET
2009-11-02 07:06 . 2009-11-02 07:07 -------- d-----w- c:\archivos de programa\ESET
2009-11-02 07:05 . 2009-11-01 21:39 -------- d-----w- c:\archivos de programa\Java
2009-11-02 07:05 . 2009-11-02 07:05 -------- d-----w- c:\archivos de programa\Archivos comunes\Java
2009-11-02 07:04 . 2008-04-14 12:47 83072 -c--a-w- c:\windows\system32\dllcache\wdmaud.sys
2009-11-02 07:04 . 2008-04-14 12:47 83072 ----a-w- c:\windows\system32\drivers\wdmaud.sys
2009-11-02 07:03 . 2008-04-14 12:15 172416 -c--a-w- c:\windows\system32\dllcache\kmixer.sys
2009-11-02 07:03 . 2008-04-14 12:15 172416 ----a-w- c:\windows\system32\drivers\kmixer.sys
2009-11-02 07:03 . 2008-04-14 12:15 2944 ----a-w- c:\windows\system32\drivers\drmkaud.sys
2009-11-02 07:03 . 2008-04-14 12:45 60800 ----a-w- c:\windows\system32\drivers\sysaudio.sys
2009-11-02 07:03 . 2008-04-14 12:09 7552 -c--a-w- c:\windows\system32\dllcache\mskssrv.sys
2009-11-02 07:03 . 2008-04-14 12:09 7552 ----a-w- c:\windows\system32\drivers\MSKSSRV.sys
2009-11-02 07:03 . 2008-04-14 12:09 4992 -c--a-w- c:\windows\system32\dllcache\mspqm.sys
2009-11-02 07:03 . 2008-04-14 12:09 4992 ----a-w- c:\windows\system32\drivers\MSPQM.sys
2009-11-02 07:03 . 2008-04-14 12:09 5376 -c--a-w- c:\windows\system32\dllcache\mspclock.sys
2009-11-02 07:03 . 2008-04-14 12:09 5376 ----a-w- c:\windows\system32\drivers\MSPCLOCK.sys

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))) ))
.
2009-11-03 23:57 . 2009-11-01 22:33 256 ----a-w- c:\windows\system32\escnompc.dat
2009-11-03 23:56 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP538e.tmp
2009-11-03 23:03 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP56f9.tmp
2009-11-03 20:55 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP55ff.tmp
2009-11-03 20:34 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP560f.tmp
2009-11-03 19:28 . 2001-08-24 10:00 50590 ----a-w- c:\windows\system32\perfc00A.dat
2009-11-03 19:28 . 2001-08-24 10:00 362872 ----a-w- c:\windows\system32\perfh00A.dat
2009-11-02 07:03 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP31be.tmp
2009-11-02 07:02 . 2009-11-02 07:02 -------- d-----w- c:\archivos de programa\C-Media 3D Audio
2009-11-02 07:02 . 2009-11-02 07:02 -------- d-----w- c:\archivos de programa\Archivos comunes\InstallShield
2009-11-02 06:52 . 2009-11-02 06:52 -------- d-----w- c:\archivos de programa\microsoft frontpage
2009-11-02 06:50 . 2009-11-02 06:50 21900 ----a-w- c:\windows\system32\emptyregdb.dat
2009-11-02 06:49 . 2009-11-02 06:49 -------- d-----w- c:\archivos de programa\Windows Media Connect 2
2009-11-02 00:56 . 2009-11-02 00:56 0 ----a-w- c:\windows\nsreg.dat
2009-11-01 22:34 . 2009-11-01 22:34 -------- d-----w- c:\archivos de programa\KYE
2009-11-01 22:34 . 2009-11-01 22:34 -------- d-----w- c:\archivos de programa\Archivos comunes\PAC207
2009-11-01 22:34 . 2009-11-02 07:02 -------- d--h--w- c:\archivos de programa\InstallShield Installation Information
2009-11-01 22:34 . 2009-11-01 22:34 59528 ----a-w- c:\windows\system32\esclent.exe
2009-11-01 22:34 . 2009-11-01 22:34 40448 ----a-w- c:\windows\system32\esclavohw.exe
2009-11-01 22:34 . 2009-11-01 22:34 1440016 ----a-w- c:\windows\system32\escsalva.dat
2009-11-01 22:34 . 2009-11-01 22:33 40960 ----a-w- c:\windows\system32\escmult.exe
2009-11-01 22:33 . 2009-11-01 22:33 4 ----a-w- c:\windows\system32\escartic.dat
2009-11-01 22:33 . 2009-11-01 22:33 53248 ----a-w- c:\windows\system32\escdll.dll
2009-11-01 22:33 . 2009-11-01 22:32 1552384 ----a-w- c:\windows\system32\esclavo.exe
2009-11-01 22:32 . 2009-11-01 22:32 45056 ----a-w- c:\windows\system32\escsrv.exe
2009-11-01 22:30 . 2009-11-01 22:30 -------- d-----w- c:\archivos de programa\CCleaner
2009-11-01 22:29 . 2009-11-01 22:29 -------- d-----w- c:\archivos de programa\K-Lite Codec Pack
2009-11-01 22:23 . 2009-11-01 22:23 -------- d-----w- c:\archivos de programa\Microsoft.NET
2009-11-01 22:23 . 2009-11-01 22:23 -------- d-----w- c:\archivos de programa\Microsoft Works
2009-11-01 21:59 . 2009-11-01 21:59 -------- d-----w- c:\archivos de programa\7-Zip
2009-11-01 21:39 . 2009-11-01 21:39 411368 ----a-w- c:\windows\system32\deploytk.dll
2009-11-01 21:06 . 2009-11-01 20:50 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Microsoft Help
2009-11-01 20:58 . 2009-11-02 00:32 90112 ----a-w- c:\windows\DUMP37b9.tmp
2009-09-11 14:18 . 2008-04-14 11:48 136192 ----a-w- c:\windows\system32\msv1_0.dll
2009-09-04 21:04 . 2008-04-14 11:48 58880 ----a-w- c:\windows\system32\msasn1.dll
2009-08-29 07:56 . 2008-11-24 09:31 916480 ----a-w- c:\windows\system32\wininet.dll
2009-08-29 07:27 . 2009-08-29 07:27 78336 ------w- c:\windows\system32\ieencode.dll
2009-08-26 08:01 . 2008-04-14 11:48 247326 ----a-w- c:\windows\system32\strmdll.dll
.

------- Sigcheck -------

[-] 2008-11-24 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\NLDRV\012\atapi.sys
[-] 2008-11-24 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\NLDRV\013\atapi.sys
[-] 2008-11-24 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\NLDRV\010\atapi.sys
[-] 2008-11-24 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\NLDRV\011\atapi.sys
[-] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys

[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\asyncmac.sys
[-] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys

[-] 2001-08-24 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
[-] 2001-08-24 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys

[-] 2008-11-24 . 188DDD286BC0DAEA6984858C6A4D7BBF . 25088 . . [5.1.2600.5512] . . c:\windows\NLDRV\113\kbdclass.sys
[-] 2008-04-14 . 188DDD286BC0DAEA6984858C6A4D7BBF . 25088 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys

[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ndis.sys
[-] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys

[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ntfs.sys
[-] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys

[-] 2001-08-24 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
[-] 2001-08-24 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys

[-] 2008-04-14 . E28818BD591F8AF8FBE9897472B9665E . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
[-] 2008-04-14 . E28818BD591F8AF8FBE9897472B9665E . 77824 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\browser.dll

[-] 2008-04-14 . 671ACA589DA3733FAC878A751C5BF0ED . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
[-] 2008-04-14 . 671ACA589DA3733FAC878A751C5BF0ED . 13312 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lsass.exe

[-] 2008-04-14 . A48884C9359EE9F1FC8F3F0D93FB1D95 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
[-] 2008-04-14 . A48884C9359EE9F1FC8F3F0D93FB1D95 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\netman.dll

[-] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
[-] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\system32\dllcache\qmgr.dll

[-] 2008-04-14 . CDD2DC6AE65084481E723E746C20539A . 57856 . . [5.1.2600.5512] . . c:\windows\system32\spoolsv.exe
[-] 2008-04-14 . CDD2DC6AE65084481E723E746C20539A . 57856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\spoolsv.exe

[-] 2008-09-10 . 3F5B7DD84DB17717502FB9F9954C17A7 . 550400 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe

[-] 2008-09-10 . 6D7CD73B221FDD2BFA713115F3C4300B . 673280 . . [5.82] . . c:\windows\system32\comctl32.dll

[-] 2008-04-14 . E423C9C1946C656E0E4840210A0A8681 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
[-] 2008-04-14 . E423C9C1946C656E0E4840210A0A8681 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\cryptsvc.dll

[-] 2008-04-14 . 95DF6A7520912B1040F748A287EA382A . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
[-] 2008-04-14 . 95DF6A7520912B1040F748A287EA382A . 110080 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\imm32.dll

[-] 2008-04-14 . FB67F1E092AB9967D0CD17300D751874 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
[-] 2008-04-14 . FB67F1E092AB9967D0CD17300D751874 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\linkinfo.dll

[-] 2008-04-14 . 87F15A88AA3376B48F75D7D176B312A0 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
[-] 2008-04-14 . 87F15A88AA3376B48F75D7D176B312A0 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\lpk.dll

[-] 2008-04-14 . 0F021B29E0C2C9D897258399FB2149CD . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
[-] 2008-04-14 . 0F021B29E0C2C9D897258399FB2149CD . 343040 . . [7.0.2600.5512] . . c:\windows\system32\dllcache\msvcrt.dll

[-] 2008-04-14 . CD2BBB52DFAAB666B812A51B1E96F2A0 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
[-] 2008-04-14 . CD2BBB52DFAAB666B812A51B1E96F2A0 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\netlogon.dll

[7] 2009-08-05 . 8E32445E48DF5B18490FA52CEBD0600B . 2191616 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
[7] 2009-08-05 . 8E32445E48DF5B18490FA52CEBD0600B . 2191616 . . [5.1.2600.5857] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP3GDR\ntoskrnl.exe
[7] 2009-08-05 . 8E32445E48DF5B18490FA52CEBD0600B . 2191616 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntoskrnl.exe
[-] 2009-08-04 . DEA46CF3493EAD4296E20CC7D50D8029 . 2191744 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntoskrnl.exe
[7] 2009-08-04 . 9D8ED9B8757480993BAFA211E66D98C8 . 2191744 . . [5.1.2600.5857] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP3QFE\ntoskrnl.exe
[7] 2009-08-04 . CA82F2D0652E19476BAE167EA5DEB593 . 2188416 . . [5.1.2600.3610] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP2QFE\ntoskrnl.exe
[7] 2009-08-04 . CDC00E0C7BE16AF7D61B1B38942D9B34 . 2182784 . . [5.1.2600.3610] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP2GDR\ntoskrnl.exe
[7] 2009-02-11 . 6BC8E4AAFC98B556B8FB616AD30CD5A3 . 2191616 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
[7] 2009-02-11 . 6BC8E4AAFC98B556B8FB616AD30CD5A3 . 2191616 . . [5.1.2600.5755] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP3QFE\ntoskrnl.exe
[7] 2009-02-09 . E7B0ECE4CB78624F50F144B3C88D6794 . 2182912 . . [5.1.2600.3520] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP2GDR\ntoskrnl.exe
[7] 2009-02-09 . 9AB66A74CDD55AEBB975FD7C77A39B7D . 2188544 . . [5.1.2600.3520] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP2QFE\ntoskrnl.exe
[7] 2009-02-09 . 0A413FFFE5C2FC00D5F8F6FF4B3F6889 . 2191488 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntoskrnl.exe
[7] 2009-02-09 . 0A413FFFE5C2FC00D5F8F6FF4B3F6889 . 2191488 . . [5.1.2600.5755] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP3GDR\ntoskrnl.exe
[-] 2008-04-14 . 5865859247703A0E7211267AB92A02B7 . 2147840 . . [5.1.2600.5512] . . c:\windows\system32\ntoskrnl.exe

[-] 2008-04-14 . 56DE6FD410B277C4345D7A2C3414DB64 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
[-] 2008-04-14 . 56DE6FD410B277C4345D7A2C3414DB64 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\powrprof.dll

[-] 2008-04-14 . B6BE3C96CD33336A551DB3F2299A8E69 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
[-] 2008-04-14 . B6BE3C96CD33336A551DB3F2299A8E69 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\scecli.dll

[-] 2008-04-14 . D5AC9FA63EBEFD7AACCB14BA0DB1BAC3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
[-] 2008-04-14 . D5AC9FA63EBEFD7AACCB14BA0DB1BAC3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\sfc.dll

[-] 2008-04-14 . 4F2340F0BD5B6365C38E74DD391919A8 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
[-] 2008-04-14 . 4F2340F0BD5B6365C38E74DD391919A8 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\svchost.exe

[-] 2008-04-14 . 04A5B8EA326951DB27DF60A14F2999FF . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
[-] 2008-04-14 . 04A5B8EA326951DB27DF60A14F2999FF . 249856 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\tapisrv.dll

[-] 2008-09-10 . 000B8A96FFBD468B5C6C67D56C260DED . 525312 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll

[-] 2008-04-14 . F5B8745B9A90EAF17E30C0574E049AA3 . 26624 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
[-] 2008-04-14 . F5B8745B9A90EAF17E30C0574E049AA3 . 26624 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\userinit.exe

[-] 2008-04-14 . 22DB5B3DA7005C6472D35BEF3FFDA5EC . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
[-] 2008-04-14 . 22DB5B3DA7005C6472D35BEF3FFDA5EC . 82432 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ws2_32.dll

[-] 2008-09-10 . 059DD4EE4D79AE02A747DDB38F68E3DB . 1475072 . . [6.00.2900.5512] . . c:\windows\explorer.exe

[-] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
[-] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\srsvc.dll


[-] 2008-04-14 . 14FDADCF05A37582399DAF1DA1DE1C7B . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
[-] 2008-04-14 . 14FDADCF05A37582399DAF1DA1DE1C7B . 129024 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\xmlprov.dll

[-] 2008-04-14 . 2744C713F0217BD8FFD13E2EF731371C . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
[-] 2008-04-14 . 2744C713F0217BD8FFD13E2EF731371C . 56320 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\eventlog.dll

[-] 2008-11-24 . 4C2921D9A5D3DA624E25CC3EE9151169 . 1572352 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll

[-] 2008-09-10 . F089E5F41489A3161F068B61B8484712 . 40448 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe

[-] 2008-04-14 . CA70EDBF32032EA53F114CB930741CB5 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\shsvcs.dll
[-] 2008-04-14 . CA70EDBF32032EA53F114CB930741CB5 . 135168 . . [6.00.2900.5512] . . c:\windows\system32\dllcache\shsvcs.dll

[-] 2008-04-14 . E424F05B07AC4357DC08D06218D76C7C . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
[-] 2008-04-14 . E424F05B07AC4357DC08D06218D76C7C . 59904 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\regsvc.dll

[-] 2008-04-14 . 51BE25C404D3DD344C6079DE715E4977 . 193536 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
[-] 2008-04-14 . 51BE25C404D3DD344C6079DE715E4977 . 193536 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\schedsvc.dll

[-] 2008-04-14 . B622A432EF02895DE4AA38AC8B85FA4C . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
[-] 2008-04-14 . B622A432EF02895DE4AA38AC8B85FA4C . 71680 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ssdpsrv.dll

[-] 2008-04-14 . 288B20D56D5F0EC4BCC77FBFA5A81740 . 296960 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
[-] 2008-04-14 . 288B20D56D5F0EC4BCC77FBFA5A81740 . 296960 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\termsrv.dll

[-] 2008-04-14 . 30CD42BFCDAFEFE8567B9E527DD3AE08 . 175104 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
[-] 2008-04-14 . 30CD42BFCDAFEFE8567B9E527DD3AE08 . 175104 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\appmgmts.dll

[-] 2001-08-24 . 1C905333C0B9F3D7C68DDF25E54B00F9 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys

[-] 2008-11-24 09:33 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\NLDRV\057\aec.sys
[-] 2008-04-14 10:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\dllcache\aec.sys
[-] 2008-04-14 10:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys

[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\ip6fw.sys
[-] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys

[-] 2008-04-14 11:48 . 27415CEEB58C8C2F92AFF8CFE2517A3C . 927504 . . [4.1.0.61] . . c:\windows\system32\mfc40u.dll
[-] 2008-04-14 11:48 . 27415CEEB58C8C2F92AFF8CFE2517A3C . 927504 . . [4.1.0.61] . . c:\windows\system32\dllcache\mfc40u.dll

[-] 2008-11-24 09:49 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\mspmsnsv.dll
[-] 2008-11-24 09:49 . C51B4A5C05A5475708E3C81C7765B71D . 27136 . . [11.0.5721.5145] . . c:\windows\system32\dllcache\mspmsnsv.dll

[7] 2009-08-05 . 21FA534239604D3200B028838B6ED72F . 2068608 . . [5.1.2600.5857] . . c:\windows\$hf_mig$\KB971486\SP3QFE\ntkrnlpa.exe
[7] 2009-08-05 . 21FA534239604D3200B028838B6ED72F . 2068608 . . [5.1.2600.5857] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP3QFE\ntkrnlpa.exe
[7] 2009-08-04 . ECFDB2EEECEC8FBCA643801100D4D179 . 2068480 . . [5.1.2600.5857] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
[7] 2009-08-04 . ECFDB2EEECEC8FBCA643801100D4D179 . 2068480 . . [5.1.2600.5857] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP3GDR\ntkrnlpa.exe
[7] 2009-08-04 . ECFDB2EEECEC8FBCA643801100D4D179 . 2068480 . . [5.1.2600.5857] . . c:\windows\system32\dllcache\ntkrnlpa.exe
[7] 2009-08-04 . 0F6A6A17A83E8D4466A89A3A046C4275 . 2065408 . . [5.1.2600.3610] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP2QFE\ntkrnlpa.exe
[7] 2009-08-04 . 058FCC72B5950D4310045D9CC98DDE06 . 2060160 . . [5.1.2600.3610] . . c:\windows\SoftwareDistribution\Download\f366f495f 9bfe9061b5d80e49d91e8fa\SP2GDR\ntkrnlpa.exe
[7] 2009-02-11 . 2050C3BAB913974643D43C1A414CACB5 . 2068480 . . [5.1.2600.5755] . . c:\windows\$NtUninstallKB971486$\ntkrnlpa.exe
[7] 2009-02-11 . 2050C3BAB913974643D43C1A414CACB5 . 2068480 . . [5.1.2600.5755] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP3GDR\ntkrnlpa.exe
[7] 2009-02-09 . 952D5100EDD7A9AF9CE858BFC3699F43 . 2060160 . . [5.1.2600.3520] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP2GDR\ntkrnlpa.exe
[7] 2009-02-09 . 6DEAEEA5DE2374B98450054B863AE713 . 2065408 . . [5.1.2600.3520] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP2QFE\ntkrnlpa.exe
[7] 2009-02-09 . 9B5E5D325CEDBB10A9A86679634A38CC . 2068608 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
[7] 2009-02-09 . 9B5E5D325CEDBB10A9A86679634A38CC . 2068608 . . [5.1.2600.5755] . . c:\windows\SoftwareDistribution\Download\3fe7287b3 dedcc9cbc58a4a8529c25e9\SP3QFE\ntkrnlpa.exe
[-] 2008-11-24 . B4604169BB187939CAE61D62B41E85E0 . 2026496 . . [5.1.2600.5512] . . c:\windows\system32\ntkrnlpa.exe

[-] 2008-04-14 11:48 . D60C40D71A4D874C903255E4827AFA0C . 437760 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
[-] 2008-04-14 11:48 . D60C40D71A4D874C903255E4827AFA0C . 437760 . . [5.1.2400.5512] . . c:\windows\system32\dllcache\ntmssvc.dll

[-] 2008-04-14 . 7594203F459ABDB5FE53C08D6B1BD53B . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
[-] 2008-04-14 . 7594203F459ABDB5FE53C08D6B1BD53B . 186368 . . [5.1.2600.5512] . . c:\windows\system32\dllcache\upnphost.dll

c:\windows\system32\wscntfy.exe ... is missing !!
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"MsnMsgr"="c:\archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" [2007-10-18 5724184]
"Skype"="c:\archivos de programa\Skype\Phone\Skype.exe" [2009-07-16 25604904]
"swg"="c:\archivos de programa\Google\GoogleToolbarNotifier\GoogleToolba rNotifier.exe" [2009-11-02 39408]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"igfxtray"="c:\windows\system32\igfxtray.exe" [2005-09-20 94208]
"igfxhkcmd"="c:\windows\system32\hkcmd.exe" [2005-09-20 77824]
"igfxpers"="c:\windows\system32\igfxpers.exe" [2005-09-20 114688]
"SunJavaUpdateSched"="c:\archivos de programa\Java\jre6\bin\jusched.exe" [2009-11-01 149280]
"egui"="c:\archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" [2009-02-06 2021400]
"PAC207_Monitor"="c:\windows\PixArt\PAC207\Monitor .exe" [2006-11-03 319488]
"Monitor"="c:\windows\PixArt\PAC207\Monitor.ex e" [2006-11-03 319488]
"Malwarebytes Anti-Malware (reboot)"="c:\archivos de programa\Malwarebytes' Anti-Malware\mbam.exe" [2009-09-10 1312080]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-09-10 40448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\RunOnce]
"_nltide_2"="shell32" [X]
"_nltide_3"="advpack.dll" - c:\windows\system32\advpack.dll [2009-03-08 128512]

c:\documents and settings\BlackCrystalT\Men£ Inicio\Programas\Inicio\
Chi_DESTROYS_XpWGA.lnk - c:\windows\Validation.bat [2009-11-2 36]

c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
Actualizar la licencia del NOD32.lnk - c:\archivos de programa\ESET\MiNODLogin\MiNODLogin.exe [2009-3-7 125952]

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\policies\explorer]
"NoSMMyPictures"= 1 (0x1)

[HKEY_USERS\.default\software\microsoft\windows\cur rentversion\policies\explorer]
"NoSMHelp"= 1 (0x1)
"NoSMMyPictures"= 1 (0x1)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile]
"DisableUnicastResponsesToMulticastBroadcast"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpo licy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=

R1 ehdrv;ehdrv;c:\windows\system32\drivers\ehdrv.sys [06/02/2009 03:23 p.m. 106208]
R1 epfwtdir;epfwtdir;c:\windows\system32\drivers\epfw tdir.sys [06/02/2009 03:24 p.m. 93336]
R2 ekrn;ESET Service;c:\archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe [06/02/2009 03:23 p.m. 727720]
R2 escSrv;Cargador del Terminal;c:\windows\system32\escsrv.exe [01/11/2009 05:32 p.m. 45056]
R3 PAC207;e-Messenger 112;c:\windows\system32\drivers\PFC027.SYS [01/11/2009 05:34 p.m. 616064]

--- Other Services/Drivers In Memory ---

*NewlyCreated* - MBR
*NewlyCreated* - PROCEXP113
*Deregistered* - mbr
*Deregistered* - PROCEXP113
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.cbm.com.ar/ini/comun
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
FF - ProfilePath - c:\documents and settings\BlackCrystal™\Datos de programa\Mozilla\Firefox\Profiles\ebo87xlj.default \
FF - plugin: c:\archivos de programa\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll
FF - plugin: c:\archivos de programa\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll
.
- - - - ORPHANS REMOVED - - - -

HKLM-Run-Cmaudio - cmicnfg.cpl



************************************************** ************************
scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files:

************************************************** ************************
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(540)
c:\windows\system32\SETUPAPI.dll
c:\windows\system32\sfc_os.dll

- - - - - - - > 'lsass.exe'(596)
c:\windows\system32\setupapi.dll
.
Completion time: 2009-11-04 19:22
ComboFix-quarantined-files.txt 2009-11-04 00:21

Pre-Run: 15,830,614,016 bytes libres
Post-Run: 15,896,461,312 bytes libres


de antemano le agradesco si se le ocurre algo mas que pueda ahcer. thx

Bueno amigo ps mira como es la vida de una manera muy extraña se me hacia raro que al correr antivirus en linea corriendo casi todas las herramientas de foro mi problema no dava solucion, hasta que me dio por revisar la BIOS si la BIOS¡¡¡¡ Y sucedia que la fecha y la hora de la bios estava mal configurada y ps configure la hora y fecha de la BIOS ¡¡¡¡ y listo los problemas dejaron de mostrar su cara de igual manera muchas gracias por la ayuda que me prestaste gracias


ya con esto podemos dar por solucionado el tema porfavor CERRAR.

Damos tú tema por solucionado, pero si llegase a surgir el problema le das clic al botón del simbolito arriba del post: o también puedes mandarle un MP (Mensaje privado) a cualquier Administrador, Moderador o Warrior de este Sub-Foro para qué reabran el tema y seguir con ellá

Salu2