Equipo infectado con varios virus (Solucionado)

Hola,
cada vez que tengo problemas con virus recurro a los concejos que encuentro en el foro, asi que gracias de ante mano y mis felicitaciones por el sitio y la ayuda que prestan.


Ahora tengo infectado mi equipo y no he logrado limpiarlo en su totalidad.
He usado el MalwareBytes, SuperantiSpyware, Panda Online, CCleaner, Kaspersky removal Tool. estas herramientas las he ejecutado en Modo a prueba de fallos y encontraron varios bichos que eliminaron... pero aun sigo con problemas. Ya traté con reinstalar el iExplorer y revisar los programas de Windows con el comando SFC/scannow.

Sintomas:
- Pc lenta
- problemas al conectarme a algunas páginas web, por ejemplo no he logrado hacer una revisión con Kaspersky online ya que el Explorer se cae en el momento de hacer la actualización del antivirus. Tengo problemas similares al tratar de actualizar los drivers de mi PC desde la página del fabricante (también se pega), idem al tratar de descargar el sistema de seguridad de Microsoft Essentials_algo.


Configuracion:
Windows XP SP3 actualizado
Antivirus: Nod32 actualizado, Malwarebytes, Superantispyware, SpywareBlaster
Firewall: Zonealarm
Navegador: iExplorer 8 y Firefox



Agradeceria cualquier ayuda o sugerencia.

Saludos cordiales,

Hola,
disculpen la demora, pense que me llegaria un email cuando alguien respondiera a mi mensaje, ya me parecia raro que nadie respondiera

Ahora hago lo que me piden.

Saludos,

Hola, aca va el reporte de Combofix.

Ah mi problema con el email es que tenia configurada una cuenta que no uso mucho ya que en el foro me inscribi hace años. Ya lo modifique a una que uso actualmente. Mis disculpas.


Saludos cordiales,



ComboFix 11-01-10.04 - ctoledo 20-01-2011 9:09.2.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.2047.1206 [GMT -3:00]
Running from: c:\temp\Apps\ComboFix.exe
AV: ESET NOD32 antivirus system 2.70 *Disabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: ZoneAlarm Pro Firewall *Enabled* {829BDA32-94B3-44F4-8446-F8FCFF809F8B}
.
- REDUCED FUNCTIONALITY MODE -
.

((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.

c:\windows\system32\ie.ico
c:\windows\system32\time.txt
c:\windows\system32\WS.exe
c:\windows\system32\drivers\etc\lmhosts . . . . Failed to delete

.
((((((((((((((((((((((((( Files Created from 2010-12-20 to 2011-01-20 )))))))))))))))))))))))))))))))
.

2011-01-20 11:49 . 2011-01-20 11:50 4151804 ----a-r- c:\temp\Apps\ComboFix.exe
2011-01-19 02:20 . 2011-01-18 13:21 2525288 ----a-w- c:\temp\Apps\Macafee Tool antivirus free\visionsetup.exe
2011-01-19 02:20 . 2011-01-18 13:06 6637575 ----a-w- c:\temp\Apps\Macafee Tool antivirus free\stinger10101327.exe
2011-01-19 02:20 . 2011-01-17 14:24 3349000 ----a-w- c:\temp\Apps\Macafee Tool antivirus free\SecurityScan_Release.exe
2011-01-18 19:40 . 2011-01-18 19:40 -------- d-----w- c:\archivos de programa\Foundstone Free Tools
2011-01-18 18:51 . 2011-01-18 18:51 -------- d-----w- C:\VundoFix Backups
2011-01-17 14:38 . 2011-01-17 14:38 -------- d-----w- c:\documents and settings\LocalService\Datos de programa\McAfee
2011-01-17 14:35 . 2011-01-17 14:35 -------- d-----w- c:\documents and settings\All Users\Datos de programa\McAfee Security Scan
2011-01-17 14:34 . 2011-01-17 14:34 -------- d-----w- c:\archivos de programa\McAfee Security Scan
2011-01-17 14:34 . 2011-01-17 14:34 -------- d-----w- c:\documents and settings\All Users\Datos de programa\McAfee
2011-01-16 04:42 . 2011-01-16 17:43 -------- d-----w- c:\archivos de programa\Argente - Registry Cleaner
2011-01-16 01:53 . 2011-01-16 01:53 -------- d-----w- c:\documents and settings\LocalService\Datos de programa\Intel
2011-01-16 01:53 . 2011-01-16 01:53 -------- d-----w- c:\documents and settings\Default User\Datos de programa\Intel
2011-01-16 01:52 . 2011-01-16 01:52 -------- d-----w- c:\documents and settings\NetworkService\Datos de programa\Intel
2011-01-16 01:52 . 2011-01-16 01:52 -------- d-----w- c:\documents and settings\Administrador\Datos de programa\Intel
2011-01-16 01:51 . 2011-01-16 01:51 -------- d-----w- c:\archivos de programa\Archivos comunes\Intel
2011-01-16 01:37 . 2011-01-16 01:37 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Intel
2011-01-16 01:36 . 2011-01-16 01:36 -------- d-----w- c:\documents and settings\claudio\Datos de programa\Intel
2011-01-14 13:12 . 2011-01-14 13:12 1004072 ----a-w- c:\temp\Apps\KeyFinderInstaller.exe
2011-01-14 12:09 . 2011-01-14 12:09 -------- d-----w- c:\archivos de programa\CONEXANT
2011-01-13 13:47 . 2011-01-13 13:49 8123448 ----a-w- c:\temp\Apps\Microsoft Security Essentials\mseinstall.exe
2011-01-13 11:46 . 2011-01-13 11:46 2775808 ----a-w- c:\temp\Apps\AVG Anti Conficker rmdndup.exe
2011-01-12 18:00 . 2011-01-12 18:03 -------- dc-h--w- c:\windows\ie8
2011-01-12 17:11 . 2011-01-12 17:11 -------- d-----w- c:\documents and settings\claudio\Datos de programa\ElevatedDiagnostics
2011-01-12 16:43 . 2011-01-12 16:43 772904 ----a-w- c:\temp\Apps\Mats_Run.ieperformance.exe
2011-01-12 16:24 . 2011-01-12 16:26 16980320 ----a-w- c:\temp\Apps\iexplorer8\IE8-WindowsXP-x86-ESN.exe
2011-01-12 16:09 . 2011-01-20 04:13 -------- d-----w- c:\documents and settings\claudio\Datos de programa\Winamp
2011-01-12 13:09 . 2008-04-14 10:48 116736 -c--a-w- c:\windows\system32\dllcache\xrxwiadr.dll
2011-01-12 13:09 . 2001-08-23 01:15 23040 -c--a-w- c:\windows\system32\dllcache\xrxwbtmp.dll
2011-01-12 13:09 . 2008-04-14 10:48 18944 -c--a-w- c:\windows\system32\dllcache\xrxscnui.dll
2011-01-12 13:09 . 2001-08-23 01:15 4608 -c--a-w- c:\windows\system32\dllcache\xrxflnch.exe
2011-01-12 13:09 . 2001-08-23 01:15 27648 -c--a-w- c:\windows\system32\dllcache\xrxftplt.exe
2011-01-12 13:09 . 2001-08-23 01:15 99865 -c--a-w- c:\windows\system32\dllcache\xlog.exe
2011-01-12 13:09 . 2001-08-17 23:11 16970 -c--a-w- c:\windows\system32\dllcache\xem336n5.sys
2011-01-12 13:09 . 2008-04-14 01:04 19455 -c--a-w- c:\windows\system32\dllcache\wvchntxx.sys
2011-01-12 13:09 . 2008-04-14 01:04 12063 -c--a-w- c:\windows\system32\dllcache\wsiintxx.sys
2011-01-12 13:07 . 2001-08-18 00:28 113762 -c--a-w- c:\windows\system32\dllcache\usrpda.sys
2011-01-12 13:06 . 2001-08-18 00:49 30464 -c--a-w- c:\windows\system32\dllcache\tbatm155.sys
2011-01-12 13:05 . 2008-04-14 01:05 63547 -c--a-w- c:\windows\system32\dllcache\sla30nd5.sys
2011-01-12 13:04 . 2001-08-23 01:14 62496 -c--a-w- c:\windows\system32\dllcache\s3mtrio.dll
2011-01-12 13:03 . 2008-04-14 03:11 17664 -c--a-w- c:\windows\system32\dllcache\ppa3.sys
2011-01-12 13:02 . 2001-08-17 23:49 51552 -c--a-w- c:\windows\system32\dllcache\ntgrip.sys
2011-01-12 13:01 . 2001-08-18 01:00 2944 -c--a-w- c:\windows\system32\dllcache\msmpu401.sys
2011-01-12 13:01 . 2008-04-14 03:24 22016 -c--a-w- c:\windows\system32\dllcache\msircomm.sys
2011-01-12 13:01 . 2001-08-18 01:02 35200 -c--a-w- c:\windows\system32\dllcache\msgame.sys
2011-01-12 13:01 . 2001-08-18 00:48 6016 -c--a-w- c:\windows\system32\dllcache\msfsio.sys
2011-01-12 13:01 . 2008-04-14 03:16 51200 -c--a-w- c:\windows\system32\dllcache\msdv.sys
2011-01-12 13:01 . 2001-08-18 00:52 17280 -c--a-w- c:\windows\system32\dllcache\mraid35x.sys
2011-01-12 13:01 . 2008-04-14 03:16 15232 -c--a-w- c:\windows\system32\dllcache\mpe.sys
2011-01-12 13:01 . 2001-08-18 00:57 16128 -c--a-w- c:\windows\system32\dllcache\modemcsa.sys
2011-01-12 13:01 . 2001-08-18 00:52 6528 -c--a-w- c:\windows\system32\dllcache\miniqic.sys
2011-01-12 13:01 . 2001-08-23 00:33 320512 -c--a-w- c:\windows\system32\dllcache\mgaum.sys
2011-01-12 13:01 . 2001-08-23 01:14 235648 -c--a-w- c:\windows\system32\dllcache\mgaud.dll
2011-01-12 12:59 . 2008-04-14 10:46 6144 -c--a-w- c:\windows\system32\dllcache\kbd106.dll
2011-01-12 12:58 . 2001-08-23 01:15 45056 -c--a-w- c:\windows\system32\dllcache\icam5com.dll
2011-01-12 12:57 . 2001-08-23 00:46 82432 -c--a-w- c:\windows\system32\dllcache\grclass.sys
2011-01-12 12:56 . 2001-08-23 00:44 594750 -c--a-w- c:\windows\system32\dllcache\es56hpi.sys
2011-01-12 12:55 . 2001-08-23 01:15 229462 -c--a-w- c:\windows\system32\dllcache\digifwrk.dll
2011-01-12 12:54 . 2001-08-23 00:32 49182 -c--a-w- c:\windows\system32\dllcache\cem56n5.sys
2011-01-12 12:52 . 2001-08-23 01:14 342336 -c--a-w- c:\windows\system32\dllcache\banshee.dll
2011-01-12 12:52 . 2001-08-17 23:48 36128 -c--a-w- c:\windows\system32\dllcache\banshee.sys
2011-01-12 12:52 . 2001-08-17 23:19 36992 -c--a-w- c:\windows\system32\dllcache\aztw2320.sys
2011-01-12 12:52 . 2001-08-17 23:13 89952 -c--a-w- c:\windows\system32\dllcache\b1cbase.sys
2011-01-12 12:52 . 2001-08-23 01:15 144384 -c--a-w- c:\windows\system32\dllcache\avmenum.dll
2011-01-12 12:52 . 2001-08-17 23:13 37568 -c--a-w- c:\windows\system32\dllcache\avmwan.sys
2011-01-12 12:52 . 2001-08-23 01:15 87552 -c--a-w- c:\windows\system32\dllcache\avmcoxp.dll
2011-01-12 12:52 . 2008-04-14 03:16 13696 -c--a-w- c:\windows\system32\dllcache\avcstrm.sys
2011-01-12 12:52 . 2001-08-18 01:01 36096 -c--a-w- c:\windows\system32\dllcache\avcaudio.sys
2011-01-12 01:47 . 2011-01-12 01:47 12368840 ----a-w- c:\temp\Apps\Windows Antivirus Tool\windows-kb890830-v3.15.exe
2011-01-10 19:19 . 2011-01-10 19:19 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-01-07 15:14 . 2011-01-10 03:06 -------- d-----w- c:\archivos de programa\DelPSGuard
2011-01-07 02:05 . 2010-11-16 15:01 6273872 ----a-w- c:\documents and settings\All Users\Datos de programa\Microsoft\Microsoft Antimalware\Definition Updates\Backup\mpengine.dll
2011-01-07 02:05 . 2010-11-16 15:01 6273872 ----a-w- c:\documents and settings\All Users\Datos de programa\Microsoft\Microsoft Antimalware\Definition Updates\{231E0C64-DD54-457B-816B-774D097E09D9}\mpengine.dll
2011-01-07 02:04 . 2010-10-19 20:51 222080 ------w- c:\windows\system32\MpSigStub.exe
2011-01-06 19:57 . 2011-01-06 19:57 -------- d-----w- c:\documents and settings\claudio\Datos de programa\TeamViewer
2011-01-05 20:45 . 2011-01-05 20:45 -------- d-----w- c:\documents and settings\claudio\Configuración local\Datos de programa\PCHealth
2011-01-05 11:06 . 2011-01-05 11:06 87794680 ----a-w- c:\temp\Apps\karpersky removal tool\setup_9.0.0.722_05.01.2011_12-35.exe
2011-01-05 10:51 . 2005-04-10 15:07 1208832 ----a-w- c:\temp\Apps\The Cleaner Professional v4.1 Build 4252\The.Cleaner.Professional.v4.1.Build.4252.CR\CR\cleaner.exe
2011-01-05 10:51 . 2005-04-10 14:59 4628111 ----a-w- c:\temp\Apps\The Cleaner Professional v4.1 Build 4252\The.Cleaner.Professional.v4.1.Build.4252.CR\Setup\cleaner41.exe
2011-01-05 01:38 . 2011-01-05 20:44 -------- d-----w- c:\archivos de programa\Microsoft Security Essentials
2011-01-05 01:05 . 2009-03-18 19:35 26176 ---ha-w- c:\windows\system32\hamachi.sys
2011-01-05 01:05 . 2011-01-05 01:05 -------- d-----w- c:\archivos de programa\LogMeIn Hamachi
2011-01-04 17:59 . 2011-01-05 19:55 -------- d-----w- C:\MSNCleaner
2011-01-03 18:30 . 2011-01-03 18:31 -------- d-----w- c:\documents and settings\Administrador\Configuración local\Datos de programa\LogMeIn Hamachi

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-20 12:22 . 2004-08-19 13:42 6046720 ----a-w- c:\windows\system32\logonuiX.exe
2011-01-19 15:04 . 2009-02-21 00:58 162680 ---ha-w- c:\documents and settings\claudio\Datos de programa\Microsoft\Virtual PC\VPCKeyboard.dll
2011-01-10 19:19 . 2010-05-03 15:31 472808 ----a-w- c:\windows\system32\deployJava1.dll
2010-12-20 21:09 . 2010-09-23 18:59 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2010-12-20 21:08 . 2010-09-23 18:59 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2010-12-02 03:35 . 2010-12-02 03:35 4280320 ----a-w- c:\windows\system32\GPhotos.scr
2010-11-18 18:15 . 2005-06-15 03:46 86016 ----a-w- c:\windows\system32\isign32.dll
2010-11-09 14:52 . 2004-08-19 13:42 249856 ----a-w- c:\windows\system32\odbc32.dll
2010-11-06 00:21 . 2004-08-19 13:42 916480 ----a-w- c:\windows\system32\wininet.dll
2010-11-06 00:21 . 2004-08-19 13:43 1469440 ------w- c:\windows\system32\inetcpl.cpl
2010-11-06 00:21 . 2004-08-19 13:42 43520 ------w- c:\windows\system32\licmgr10.dll
2010-11-03 12:26 . 2004-08-19 13:23 385024 ------w- c:\windows\system32\html.iec
2010-11-02 15:17 . 2001-08-24 11:00 40960 ----a-w- c:\windows\system32\drivers\ndproxy.sys
2010-10-28 13:08 . 2004-08-19 13:38 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-10-26 13:58 . 2004-08-19 13:30 1853440 ----a-w- c:\windows\system32\win32k.sys
.

((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"Skype"="c:\archivos de programa\Skype\Phone\Skype.exe" [2010-12-03 14944136]
"Google Update"="c:\documents and settings\claudio\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" [2010-10-14 136176]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"BluetoothAuthenticationAgent"="bthprops.cpl" [2008-04-14 110592]
"ATIPTA"="c:\archivos de programa\ATI Technologies\ATI Control Panel\atiptaxx.exe" [2005-07-07 344064]
"PSDruntime"="c:\archivos de programa\Broadcom\Security Platform Software\PSDrt.EXE" [2005-03-11 81920]
"Apoint"="c:\archivos de programa\Apoint\Apoint.exe" [2004-09-13 155648]
"Dell QuickSet"="c:\archivos de programa\Dell\QuickSet\quickset.exe" [2007-05-14 1191936]
"nod32kui"="c:\archivos de programa\Eset\nod32kui.exe" [2008-08-06 949376]
"LogonStudio"="c:\archivos de programa\WinCustomize\LogonStudio\logonstudio.exe" [2002-09-03 987187]
"LogMeIn GUI"="c:\archivos de programa\LogMeIn\x86\LogMeInSystray.exe" [2008-08-11 63048]
"ZoneAlarm Client"="c:\archivos de programa\Zone Labs\ZoneAlarm\zlclient.exe" [2010-07-21 1038848]
"ISW"="c:\archivos de programa\CheckPoint\ZAForceField\ForceField.exe" [2010-06-15 730600]
"LogMeIn Hamachi Ui"="c:\archivos de programa\LogMeIn Hamachi\hamachi-2-ui.exe" [2010-12-06 1910152]
"SunJavaUpdateSched"="c:\archivos de programa\Archivos comunes\Java\Java Update\jusched.exe" [2010-05-14 248552]
"WinampAgent"="c:\archivos de programa\Winamp\winampa.exe" [2010-12-09 74752]
"IntelZeroConfig"="c:\archivos de programa\Intel\WiFi\bin\ZCfgSvc.exe" [2009-11-03 1372160]
"IntelWireless"="c:\archivos de programa\Archivos comunes\Intel\WirelessCommon\iFrmewrk.exe" [2009-11-03 1202448]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
Bluetooth Manager.lnk - c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\TosBtMng1.exe [2004-12-22 45056]
McAfee Security Scan Plus.lnk - c:\archivos de programa\McAfee Security Scan\3.0.188\SSScheduler.exe [2010-10-4 272528]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon]
"UIHost"="c:\windows\system32\logonuiX.exe"

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2010-09-23 18:28 548352 ----a-w- c:\archivos de programa\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\IfxWlxEN]
2005-03-11 15:05 360448 ----a-w- c:\windows\system32\IfxWlxEN.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\LMIinit]
2009-09-28 22:34 87352 ----a-w- c:\windows\system32\LMIinit.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\PSDNtfy]
2005-03-11 14:43 45056 ----a-w- c:\archivos de programa\Broadcom\Security Platform Software\PSDNtfy.dll

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ PDBoot.exe\0autocheck autochk /p \??\g:\0autocheck autochk *\0smrgdf c:\archivos de programa\iolo\System Mechanic Professional 6"

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Acrobat Assistant.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\Acrobat Assistant.lnk
backup=c:\windows\pss\Acrobat Assistant.lnkCommon Startup

[HKLM\~\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^DSLMON.lnk]
path=c:\documents and settings\All Users\Menú Inicio\Programas\Inicio\DSLMON.lnk
backup=c:\windows\pss\DSLMON.lnkCommon Startup

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\NeroCheck]
2001-07-09 16:50 155648 ----a-w- c:\windows\system32\NeroCheck.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\QuickTime Task]
2007-04-27 13:41 282624 ----a-w- c:\archivos de programa\QuickTime\qttask.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\services]
"SQLWriter"=2 (0x2)
"MSSQLSERVER"=2 (0x2)
"Pml Driver HPZ12"=3 (0x3)

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"ISUSPM Startup"=c:\archiv~1\ARCHIV~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
"ISUSScheduler"="c:\archivos de programa\Archivos comunes\InstallShield\UpdateService\issch.exe" -start
"ISUSPM"="c:\archivos de programa\Archivos comunes\InstallShield\UpdateService\ISUSPM.exe" -scheduler
"CloneCDTray"="c:\archivos de programa\SlySoft\CloneCD\CloneCDTray.exe" /s

[HKEY_LOCAL_MACHINE\software\microsoft\security center]
"AntiVirusOverride"=dword:00000001
"FirewallOverride"=dword:00000001

[HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\ZoneLabsFirewall]
"DisableMonitoring"=dword:00000001

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Messenger\\msmsgs.exe"=
"c:\\WINDOWS\\pchealth\\helpctr\\binaries\\HelpCtr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Archivos comunes\\SafeNet Sentinel\\Sentinel RMS License Manager\\WinNT\\lservnt.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\WINDOWS\\system32\\ZoneLabs\\vsmon.exe"=
"c:\archivos de programa\Microsoft ActiveSync\rapimgr.exe"= c:\archivos de programa\Microsoft ActiveSync\rapimgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync RAPI Manager
"c:\archivos de programa\Microsoft ActiveSync\wcescomm.exe"= c:\archivos de programa\Microsoft ActiveSync\wcescomm.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Connection Manager
"c:\archivos de programa\Microsoft ActiveSync\WCESMgr.exe"= c:\archivos de programa\Microsoft ActiveSync\WCESMgr.exe:169.254.2.0/255.255.255.0:Enabled:ActiveSync Application
"c:\\Archivos de programa\\Skype\\Phone\\Skype.exe"=

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\GloballyOpenPorts\List]
"3389:TCP"= 3389:TCP:@xpsp2res.dll,-22009
"26675:TCP"= 26675:TCP:169.254.2.0/255.255.255.0:Enabled:ActiveSync Service

R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [21-06-2007 12:58 15424]
R1 PersonalSecureDrive;PersonalSecureDrive;c:\windows\system32\drivers\psd.sys [11-03-2005 11:43 29283]
R1 SASKUTIL;SASKUTIL;c:\archivos de programa\SUPERAntiSpyware\SASKUTIL.SYS [28-05-2008 11:33 67656]
R2 GembaseBatch6078;GembaseBatch Port=6078 (7.3.0);c:\ross\Soft\gem\730\Run\gem_batch.exe [16-02-2008 14:30 57344]
R2 GembaseBroker6077;GembaseBroker Port=6077 (7.3.0);c:\ross\Soft\gem\730\Run\gem_broker.exe [16-02-2008 14:30 90112]
R2 GembaseMonitor6079;GembaseMonitor Port=6079 (7.3.0);c:\ross\Soft\gem\730\Run\gem_monitor.exe [16-02-2008 14:30 65536]
R2 GemPrintService730.exe;GemPrintService 7.3.0;c:\ross\Soft\IAF\730\GemPrintService\Bin\GemPrintService730.exe [16-02-2008 14:56 28672]
R2 Hamachi2Svc;LogMeIn Hamachi 2.0 Tunneling Engine;c:\archivos de programa\LogMeIn Hamachi\hamachi-2.exe [06-12-2010 8:31 1238408]
R2 ISWKL;ZoneAlarm Toolbar ISWKL;c:\archivos de programa\CheckPoint\ZAForceField\ISWKL.sys [16-03-2010 5:55 26352]
R2 IswSvc;ZoneAlarm Toolbar IswSvc;c:\archivos de programa\CheckPoint\ZAForceField\ISWSVC.exe [16-03-2010 5:55 493032]
R2 LMIInfo;LogMeIn Kernel Information Provider;c:\archivos de programa\LogMeIn\x86\rainfo.sys [11-08-2008 12:41 12856]
R2 RossLicenseService;RossLicenseService;c:\rosslicenseservice\lmgrd.exe [17-06-2005 1:06 659456]
R2 Sentinel RMS License Manager;Sentinel RMS License Manager;c:\archivos de programa\Archivos comunes\SafeNet Sentinel\Sentinel RMS License Manager\WinNT\lservnt.exe [01-08-2006 9:00 774144]
R3 dfmirage;dfmirage;c:\windows\system32\drivers\dfmirage.sys [25-11-2005 18:43 31896]
R3 EuMusDesignVirtualAudioCableWdm_sdh;Sandhills Audio Cable;c:\windows\system32\drivers\vacsdhkd.sys [05-07-2008 20:16 29568]
R3 GTIPCI21;GTIPCI21;c:\windows\system32\drivers\gtipci21.sys [03-05-2004 17:26 80384]
R3 xpvcom;XPVCOM Port;c:\windows\system32\drivers\XPVCOM.sys [23-03-2007 3:00 30032]
S2 gupdate;Google Update Service (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [25-09-2009 15:45 133104]
S3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\drivers\ggflt.sys [02-06-2008 22:33 13352]
S3 McComponentHostService;McAfee Security Scan Component Host Service;c:\archivos de programa\McAfee Security Scan\3.0.188\McCHSvc.exe [04-10-2010 23:27 237008]
S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [19-08-2004 10:43 14336]
S3 rcvpn;SonicWALL VPN Adapter;c:\windows\system32\DRIVERS\rcvpn.sys --> c:\windows\system32\DRIVERS\rcvpn.sys [?]
S3 SASENUM;SASENUM;c:\archivos de programa\SUPERAntiSpyware\SASENUM.SYS [28-05-2008 11:33 12872]
S4 msvsmon80;Visual Studio 2005 Remote Debugger;c:\archivos de programa\Microsoft Visual Studio 8\Common7\IDE\Remote Debugger\x86\msvsmon.exe [23-09-2005 8:01 2799808]
S4 WICluster;WebIntelligence Cluster service; [x]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
.
Contents of the 'Scheduled Tasks' folder

2011-01-17 c:\windows\Tasks\AppleSoftwareUpdate.job
- c:\archivos de programa\Apple Software Update\SoftwareUpdate.exe [2006-10-10 21:13]

2011-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2009-09-25 18:45]

2011-01-20 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2009-09-25 18:45]

2011-01-20 c:\windows\Tasks\User_Feed_Synchronization-{737011AA-042C-4941-A5DB-2528DE36FD86}.job
- c:\windows\system32\msfeedssync.exe [2006-10-17 07:31]
.
.
------- Supplementary Scan -------
.
uStart Page = hxxp://www.google.cl/
uSearchMigratedDefaultURL = hxxp://www.google.com/search?q={searchTerms}&sourceid=ie7&rls=com.microsoft:en-US&ie=utf8&oe=utf8
mStart Page = hxxp://www.infospyware.com
uInternet Settings,ProxyServer = 192.168.0.1:3128
uInternet Settings,ProxyOverride = 192.168.0.202;<local>
IE: {{20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - {20CCCFEC-D26F-4ffe-996B-388B39C8CCCA} - c:\windows\system32\mscoree.DLL
Trusted Zone: //abrepopup('http://deportes.tvn.cl/audio_popup/index_flash.html','Toulon','480','640');
Trusted Zone: //achica();
Trusted Zone: //showProductDemo("http://h71016.www7.hp.com/html/interactive/DV4/model2.html?buyNowLink=default");void(0);
Trusted Zone: //ventana2('/MFT/MFT.htm');
Trusted Zone: //void(window.open('productos/productos.html','popup','toolbar=no,menubar=no,scrollbars=yes,resizable=yes,width=430,height=510'))
Trusted Zone: //w=window.open('http://www.esa.int/SPECIALS/Rosetta/','','toolbar=1,menubar=1,location=1,status=1,resizable=1,scrollbars=1,width=1024,height=768');w.focus()
Trusted Zone: 100000volts.cl\www
Trusted Zone: 100hoursofastronomy.org\www
Trusted Zone: 110mb.com\32nod
Trusted Zone: 24horas.cl\www
Trusted Zone: adamobydell.com\www
Trusted Zone: aerolineas.com.ar\www
Trusted Zone: aerolineasdelsur.cl\www
Trusted Zone: aeromexico.com\reservations
Trusted Zone: aeromexico.com\www
Trusted Zone: afphabitat.cl\www
Trusted Zone: agrogestion.net\www
Trusted Zone: aguaschillan.cl\www
Trusted Zone: ahumada.cl\www
Trusted Zone: aircrack-ng.org\download
Trusted Zone: aldaily.com\www
Trusted Zone: alienware.com\www
Trusted Zone: altova.com\www
Trusted Zone: amarillas.cl\www
Trusted Zone: amazon.com\www
Trusted Zone: americanscientist.org\www
Trusted Zone: andesgear.cl\www
Trusted Zone: anfitrion.cl\www
Trusted Zone: antartica.cl\www
Trusted Zone: apcmedia.com\www
Trusted Zone: apple.com\www
Trusted Zone: aquadelis.cl\www
Trusted Zone: arturogoga.com\www
Trusted Zone: asia-team.info\www
Trusted Zone: asiva.cl\www
Trusted Zone: atari.com\games
Trusted Zone: atarifreak.com\www
Trusted Zone: aximsite.com\www
Trusted Zone: bancabif.cl\www
Trusted Zone: bancafacil.cl\www
Trusted Zone: bancoestado.cl\personas
Trusted Zone: bancoestado.cl\www
Trusted Zone: bancosantiago.cl\emoney
Trusted Zone: bansander.cl\www
Trusted Zone: battlefront.com\www
Trusted Zone: bbc.co.uk\news
Trusted Zone: bcentral.cl\www
Trusted Zone: bci.cl\www
Trusted Zone: bcn.cl\leychile
Trusted Zone: bcn.cl\www
Trusted Zone: beaf.cl\www
Trusted Zone: belda.cl\www
Trusted Zone: bibliotheka.org\www
Trusted Zone: biboz.net
Trusted Zone: bikenew.cl\www
Trusted Zone: bing.com\www
Trusted Zone: biomedicinas.cl\www
Trusted Zone: bioware.com\masseffect
Trusted Zone: bip.cl\www
Trusted Zone: bitacoras.com\labuhardilla
Trusted Zone: bitdefender.com\quickscan
Trusted Zone: bleacherreport.com
Trusted Zone: blogger.com\www
Trusted Zone: blogspot.com\librosgr
Trusted Zone: blogspot.com\nopedirlg
Trusted Zone: bmc.com\documents
Trusted Zone: boargamegeek.com\www
Trusted Zone: bolsadesantiago.com\www
Trusted Zone: bosca.cl\www
Trusted Zone: bryo.cl\www
Trusted Zone: bsantander.cl\www
Trusted Zone: buscalibros.cl\www
Trusted Zone: buscape.cl\www
Trusted Zone: busescruzdelsur.cl\www
Trusted Zone: cabanaspehuen.cl\www
Trusted Zone: canal13.cl\teletrece
Trusted Zone: canal13.cl\zates2
Trusted Zone: cariola.cl\www
Trusted Zone: carnes.cl\www
Trusted Zone: casa
Trusted Zone: casaroyal.cl\www
Trusted Zone: cautiva.cl\www
Trusted Zone: cchc.cl\www
Trusted Zone: ccs.cl\www
Trusted Zone: cdcsoftware.com\sales
Trusted Zone: cdw.com\www
Trusted Zone: cern.ch\atlas.web
Trusted Zone: cern.ch\lhc-webcast.web
Trusted Zone: cern.ch\lhc.web
Trusted Zone: cern.ch\webcast
Trusted Zone: channelchooser.com\www
Trusted Zone: chanta.cl\www
Trusted Zone: chileautos.cl\www2
Trusted Zone: chileemprende.cl
Trusted Zone: chilefilms.cl\www
Trusted Zone: chilevision.cl\www
Trusted Zone: chilewarez.cl\www
Trusted Zone: chilewarez.org\www
Trusted Zone: cinemark.cl\www
Trusted Zone: circulomas.cl\www
Trusted Zone: claudio
Trusted Zone: clinicalosandes.cl\www
Trusted Zone: club-digytal.com\www
Trusted Zone: clubdediagramas.com\www
Trusted Zone: cognos.com\www
Trusted Zone: comolohizo.com\www
Trusted Zone: compusa.com\www
Trusted Zone: conalep.edu.mx\webi
Trusted Zone: conama.cl\www
Trusted Zone: concursobanchile.cl\www
Trusted Zone: concursoiphone4.cl\www
Trusted Zone: consejodelacultura.cl\www
Trusted Zone: cooperativa.cl\www
Trusted Zone: correos.cl\codigopostal
Trusted Zone: correos.cl\www
Trusted Zone: correosdechile.cl\www
Trusted Zone: crecic.cl\www
Trusted Zone: cruzblanca.cl\www
Trusted Zone: crystalreports.com\na
Trusted Zone: cuevana.com\www
Trusted Zone: cuevana.tv\www
Trusted Zone: cuspide.com\www
Trusted Zone: cypapudo.cl\www
Trusted Zone: datasheetcatalog.net\www
Trusted Zone: decoop.cl\www
Trusted Zone: dell.com\configure.la
Trusted Zone: dell.com\support
Trusted Zone: dell.com\www
Trusted Zone: dell.com\www1.la
Trusted Zone: demo
Trusted Zone: demotores.cl\autos
Trusted Zone: depositfiles.com
Trusted Zone: designyoutrust.com
Trusted Zone: diariollanquihue.cl\www
Trusted Zone: diariosregionales.cl\www
Trusted Zone: dicom.cl\www
Trusted Zone: direcmed.cl\www
Trusted Zone: dnsdoctor.org\demo
Trusted Zone: dreamers.com\mafalda
Trusted Zone: dunenovels.com\www
Trusted Zone: e-rol.com\www
Trusted Zone: eafit.edu.co\bdigital
Trusted Zone: earphonesolutions.com\www
Trusted Zone: easy-share.com\www
Trusted Zone: easy.cl\www
Trusted Zone: eclac.cl\www
Trusted Zone: economiaynegocios.cl\www
Trusted Zone: elbruto.es\gartolo
Trusted Zone: eldivisadero.cl\www
Trusted Zone: elinmobiliario.cl\www
Trusted Zone: elmercurio.com\diario
Trusted Zone: elmercurio.com\impreso
Trusted Zone: elpais.com\www
Trusted Zone: elpalaciodehierro.com.mx\www
Trusted Zone: elsitio.com\www
Trusted Zone: elsur.cl\www
Trusted Zone: emol.com\emoltv
Trusted Zone: emol.com\www
Trusted Zone: entel.cl\www
Trusted Zone: entel.cl\zona
Trusted Zone: entelbandancha.cl\www
Trusted Zone: entelpcs.cl\www
Trusted Zone: entelpcs.com\mipcs
Trusted Zone: epdlp.com\www
Trusted Zone: erizosdetierra.cl\www
Trusted Zone: es.gov.br\www.vitoria
Trusted Zone: esa.int\www
Trusted Zone: eset.com\www
Trusted Zone: eset.sk\www
Trusted Zone: esprit.com\www
Trusted Zone: espritshop.com\www
Trusted Zone: essbio.cl\www
Trusted Zone: etarget.cl\bsantander
Trusted Zone: ethek.com\windows-xp-service-pack.es
Trusted Zone: ethek.com\www
Trusted Zone: europa.eu\www.ecdc
Trusted Zone: ewido.net\www
Trusted Zone: exchangerate.com\www
Trusted Zone: exordio.com\www
Trusted Zone: facebook.com\www
Trusted Zone: faenacar.cl\www
Trusted Zone: falabella.com\www
Trusted Zone: fayerwayer.com\www
Trusted Zone: fcharte.com\www
Trusted Zone: fedex.com\www
Trusted Zone: fenapo.com\www
Trusted Zone: feriachilenadellibro.cl\www
Trusted Zone: feriadeldisco.cl\www
Trusted Zone: fifa.com\es
Trusted Zone: filefactory.com\www
Trusted Zone: fme.cl\www
Trusted Zone: fon.com\shop
Trusted Zone: fon.com\www
Trusted Zone: forospyware.com\www
Trusted Zone: forumtopics.com\www
Trusted Zone: forwardsys.cl\www
Trusted Zone: gamespot.com\download2
Trusted Zone: gamespot.com\www
Trusted Zone: gamevideos.com\www
Trusted Zone: gateway.com\www
Trusted Zone: gigasize.com\www
Trusted Zone: gizmologia.com
Trusted Zone: gob.cl\www.dt
Trusted Zone: gob.cl\www.odepa
Trusted Zone: gob.mx\www.guadalajara
Trusted Zone: gob.mx\www.tienda.sepomex
Trusted Zone: google.cl\groups
Trusted Zone: google.cl\images
Trusted Zone: google.cl\maps
Trusted Zone: google.cl\www
Trusted Zone: google.com\mail
Trusted Zone: google.com\maps
Trusted Zone: google.com\picasa
Trusted Zone: google.com\picasaweb
Trusted Zone: google.com\sites
Trusted Zone: google.com\talkgadget
Trusted Zone: google.com\video
Trusted Zone: google.com\www
Trusted Zone: google.es\maps
Trusted Zone: google.es\picasaweb
Trusted Zone: gstatic.com\maps
Trusted Zone: gstatics.com\maps
Trusted Zone: gtbicycles.com\www
Trusted Zone: guiaroji.com.mx\mapas
Trusted Zone: handdrawngames.com\www
Trusted Zone: headphonesolutions.com\www
Trusted Zone: homelinux.org\trapananda
Trusted Zone: hotmail.com\www
Trusted Zone: hoytecnologia.com\www
Trusted Zone: hp.com\bizsupport2.austin
Trusted Zone: hp.com\h10025.www1
Trusted Zone: hp.com\h20000.www2
Trusted Zone: hp.com\h71016.www7
Trusted Zone: hp.com\www.shopping
Trusted Zone: htcmania.com\www
Trusted Zone: ibm.com\www.pc
Trusted Zone: icarito.cl\www
Trusted Zone: iisfaq.com\www
Trusted Zone: iminlikewithyou.com\www
Trusted Zone: imsupport.im.se
Trusted Zone: ine.cl\www
Trusted Zone: infospyware.com\www
Trusted Zone: instructables.com\www
Trusted Zone: intecar.cl\app
Trusted Zone: intel.com\www
Trusted Zone: io.us.es
Trusted Zone: itesm.mx\informatica.sin
Trusted Zone: ittoolbox.com\businessintelligence
Trusted Zone: izismile.com
Trusted Zone: jcyl.es\www.artehistoria
Trusted Zone: jdownloader.org
Trusted Zone: jogosjogos.com\www
Trusted Zone: jr.com\www
Trusted Zone: juegosfan.com\www
Trusted Zone: jumbo.cl\www
Trusted Zone: justin.tv\es
Trusted Zone: kaspersky.com\www
Trusted Zone: kioskea.net\es
Trusted Zone: knop.cl\www
Trusted Zone: ladiscusion.cl\web
Trusted Zone: ladiscusion.cl\www
Trusted Zone: laespadatoledana.com\www
Trusted Zone: laeuropeatiendavirtual.com.mx\www
Trusted Zone: lan.com\plane
Trusted Zone: lan.com\ssl
Trusted Zone: lan.com\www
Trusted Zone: lapapa.cl\www
Trusted Zone: lasegunda.com\www
Trusted Zone: last.fm\www
Trusted Zone: latercera.com\www
Trusted Zone: lawebdelprogramador.com\www
Trusted Zone: lenovo.com\shop
Trusted Zone: lenovo.com\www
Trusted Zone: lhcountdown.com\www
Trusted Zone: linksys.com\www
Trusted Zone: lippioutdoor.com
Trusted Zone: live.com\bl116w.blu116.mail
Trusted Zone: live.com\login
Trusted Zone: live.com\sn139w.snt139.mail
Trusted Zone: livemeeting.com\www
Trusted Zone: livemeeting.com\www112
Trusted Zone: llegalemapas.com\www
Trusted Zone: llnwd.net\bioware.vo
Trusted Zone: logmein.com\contab-uhexelwalu.app56
Trusted Zone: logmein.com\secure
Trusted Zone: logmein.com\swl001--base-de-datos--nsbfvqidka.app02-14
Trusted Zone: logmein.com\yennyast-sgtdodobou.app59
Trusted Zone: loteria.cl\www
Trusted Zone: lsf.com.ar\www
Trusted Zone: lun.cl\www
Trusted Zone: lun.com\www
Trusted Zone: mac.com\web
Trusted Zone: mallsport.cl\www
Trusted Zone: mapcity.cl\www
Trusted Zone: mapcity.com\mapa2
Trusted Zone: mapcity.com\new
Trusted Zone: masoportunidades.com.ar\www
Trusted Zone: maxim.com\www
Trusted Zone: mcafee.com\us
Trusted Zone: mcafee.com\www
Trusted Zone: mediafire.com\www
Trusted Zone: megaupload.com\www
Trusted Zone: mer.cl\www
Trusted Zone: mercadolibre.com.mx\www
Trusted Zone: meristation.com\www
Trusted Zone: merrell.com\www
Trusted Zone: metacafe.com\www
Trusted Zone: mforos.com\laleyendadesw
Trusted Zone: mibandaancha.cl\www
Trusted Zone: micorsoft.com\windowsupdate
Trusted Zone: microsoft.com\download
Trusted Zone: microsoft.com\msdn
Trusted Zone: microsoft.com\msdn2
Trusted Zone: microsoft.com\partners
Trusted Zone: microsoft.com\support
Trusted Zone: microsoft.com\technet
Trusted Zone: microsoft.com\update
Trusted Zone: microsoft.com\v4.windowsupdate
Trusted Zone: microsoft.com\www
Trusted Zone: mikeportnoy.com\www
Trusted Zone: mirax.cl\www
Trusted Zone: mobilitysite.com\www
Trusted Zone: motricity.com\wap.umg
Trusted Zone: movequip.com.mx\www
Trusted Zone: movistar.cl\autoservicio
Trusted Zone: movistar.cl\hogar
Trusted Zone: movistar.cl\mihogar
Trusted Zone: movistar.cl\www
Trusted Zone: mslatam.com\www
Trusted Zone: mtaonline.net\help
Trusted Zone: mueblesgavisuarez.cl\www
Trusted Zone: mundotelme.com\www
Trusted Zone: musicosclasicos.com\www
Trusted Zone: nasa.gov\antwrp.gsfc
Trusted Zone: nasa.gov\earthobservatory
Trusted Zone: nasa.gov\mars.jpl
Trusted Zone: nasa.gov\neo.jpl
Trusted Zone: nasa.gov\www
Trusted Zone: natura.net\www
Trusted Zone: natura.net\www2
Trusted Zone: naturesongs.com\www
Trusted Zone: nav4all.com\www
Trusted Zone: nectar.cl
Trusted Zone: nectar.cl\www
Trusted Zone: needish.cl\www
Trusted Zone: needish.com\facebook
Trusted Zone: neoteo.com\www
Trusted Zone: netpointar.com.ar\www
Trusted Zone: netretina.com\www
Trusted Zone: nic.cl\www
Trusted Zone: noaa.gov\wcatwc.arh
Trusted Zone: noaa.gov\www.prh
Trusted Zone: noganet.net\www
Trusted Zone: nokia.cl\www
Trusted Zone: nordyne-intl.com\www
Trusted Zone: notebookcenter.cl\www
Trusted Zone: officedepot.com\www
Trusted Zone: ogconsulting.cl
Trusted Zone: ovi.com\mail
Trusted Zone: oxford.cl\www
Trusted Zone: p2poo.net\www
Trusted Zone: panasonic.cl\www
Trusted Zone: pandasecurity.com\www
Trusted Zone: pandasoftware.com\www
Trusted Zone: parafernaliaoutdoor.cl
Trusted Zone: paris.cl\programas
Trusted Zone: paris.cl\www
Trusted Zone: pasajes.cl\www
Trusted Zone: patologiaveterinaria.cl\www
Trusted Zone: paypal.com\www
Trusted Zone: pcfactory.cl\www
Trusted Zone: pcmag.com\www
Trusted Zone: pconline.cl\www
Trusted Zone: polla.cl\www
Trusted Zone: polykon04
Trusted Zone: portalinmobiliario.com\www
Trusted Zone: previred.cl\www
Trusted Zone: previred.com\www
Trusted Zone: preyproject.com\control
Trusted Zone: prochile.cl\www
Trusted Zone: programacion.com\www
Trusted Zone: promoyoplait.cl\www
Trusted Zone: proyectoroma.org
Trusted Zone: psicofxp.com\www
Trusted Zone: puc.cl\www.rcia
Trusted Zone: puntaarenas.cl\www
Trusted Zone: puntadelanza.net\www
Trusted Zone: puntomio.com\www
Trusted Zone: rae.es\buscon
Trusted Zone: reebok.com\www
Trusted Zone: registrocivil.cl\www
Trusted Zone: rin.ru\cash
Trusted Zone: ripley.cl\www
Trusted Zone: rolandgarros.com\www
Trusted Zone: rossinc.com\sales
Trusted Zone: rossinc.com\www
Trusted Zone: safp.cl\www
Trusted Zone: samsung.com\www
Trusted Zone: santander-investment.cl\www
Trusted Zone: santander.cl\www
Trusted Zone: santandersantiago.cl\www
Trusted Zone: sap.com\help
Trusted Zone: sbif.cl\www
Trusted Zone: scat.cl\www
Trusted Zone: scene7.com\s7d2
Trusted Zone: sciam.com\oascentral
Trusted Zone: sciam.com\www
Trusted Zone: scielo.cl\www
Trusted Zone: scientificamerican.com\www
Trusted Zone: scifi.com\www
Trusted Zone: scribd.com\www
Trusted Zone: sernac.cl\www
Trusted Zone: serplacrm.cl\www
Trusted Zone: server-aplic
Trusted Zone: serviubiobio.cl\www
Trusted Zone: sherpalife.cl\www
Trusted Zone: shu-qi.com\www
Trusted Zone: shure.com\store
Trusted Zone: shure.com\www
Trusted Zone: sii.cl\alerce
Trusted Zone: sii.cl\home
Trusted Zone: sii.cl\loa
Trusted Zone: sii.cl\misii
Trusted Zone: sii.cl\www
Trusted Zone: sii.cl\zeus
Trusted Zone: simpsonizeme.com
Trusted Zone: skyairline.cl\www
Trusted Zone: skype.com\forum
Trusted Zone: skype.com\secure
Trusted Zone: skype.com\support
Trusted Zone: skype.com\www
Trusted Zone: slashdot.org
Trusted Zone: slashdot.org\tech
Trusted Zone: sodimac.cl\www
Trusted Zone: sofofa.cl\www
Trusted Zone: solucionesdell.com\www
Trusted Zone: sonyericsson.com\www
Trusted Zone: sourceforge.net
Trusted Zone: spdigital.cl\www
Trusted Zone: speedtest.net\www
Trusted Zone: spore.es\www
Trusted Zone: sql-server-performance.com
Trusted Zone: sql-server-performance.com\www
Trusted Zone: sqlaccessories.com\www
Trusted Zone: sqlservercentral.com\www
Trusted Zone: stanmetalcomputacion.cl\www
Trusted Zone: starcraft2.com\www
Trusted Zone: subdivx.com\www
Trusted Zone: sunysb.edu\www.math
Trusted Zone: superpages.com\mapserver
Trusted Zone: sur-propiedades.cl\www
Trusted Zone: taringa.net
Trusted Zone: taringa.net\www
Trusted Zone: tarjetamas.cl\www
Trusted Zone: tarjetasmas.cl\www
Trusted Zone: taximetro.cl\www
Trusted Zone: tchile.com\at6410
Trusted Zone: tchile.com\panel
Trusted Zone: tdlc.cl\www
Trusted Zone: teamviewer.com\www
Trusted Zone: techforless.com\www
Trusted Zone: techtarget.com\searchsqlserver
Trusted Zone: tecmark.cl\www
Trusted Zone: tecnocentro.cl\www
Trusted Zone: teleequipo.cl\www
Trusted Zone: telefonica.cl\www
Trusted Zone: telefonicachile.cl\formularios
Trusted Zone: telefonicachile.cl\www
Trusted Zone: telefonicadelsur.cl\www
Trusted Zone: televisadeportes.com\www
Trusted Zone: telmex.cl\www
Trusted Zone: tematika.com\www
Trusted Zone: terra-sur.cl\www
Trusted Zone: terra.cl\speedtest
Trusted Zone: terrabike.com\www
Trusted Zone: tesoreria.cl\www
Trusted Zone: ticketmaster.cl\ticketing
Trusted Zone: ticketmaster.cl\www
Trusted Zone: tie.cl\www.bryo
Trusted Zone: todo13.13.cl
Trusted Zone: todopocketpc.com\foro
Trusted Zone: todopocketpc.com\www
Trusted Zone: tomshardware.com\www
Trusted Zone: tplink.cl\www
Trusted Zone: trailerspy.com\www
Trusted Zone: transantiago.cl\www
Trusted Zone: transantiagoinforma.cl\www
Trusted Zone: transbank.cl\webpay3g
Trusted Zone: traverso.cl\www
Trusted Zone: tubecityims.com\portal
Trusted Zone: tubecityims.com\www
Trusted Zone: turboupload.com\d
Trusted Zone: turbus.cl\www
Trusted Zone: tvn.cl\www
Trusted Zone: twitter.com
Trusted Zone: ubb.cl\www
Trusted Zone: ubiobio.cl\alumnos
Trusted Zone: ubiobio.cl\pva.face
Trusted Zone: ubiobio.cl\www
Trusted Zone: ubiobio.cl\www.alumnos
Trusted Zone: uca.es\www2
Trusted Zone: uchile.cl\automatica.li2
Trusted Zone: uchile.cl\www.dim
Trusted Zone: ucsc.cl\ccm2010
Trusted Zone: udec.cl\www2
Trusted Zone: ueubiobio.cl\www
Trusted Zone: universitaria.cl\www
Trusted Zone: uploading.com
Trusted Zone: urjc.es\www.fcjs
Trusted Zone: usanotebook.com\www
Trusted Zone: usgs.gov\earthquake
Trusted Zone: usgs.gov\neic
Trusted Zone: utalca.cl\dspace
Trusted Zone: utalca.cl\dta
Trusted Zone: utfsm.cl\docencia.mat
Trusted Zone: utfsm.cl\ozono.dcsc
Trusted Zone: vagos.es\www
Trusted Zone: ventapasajes.cl\www
Trusted Zone: vharo.com.mx\www
Trusted Zone: victoriassecret.com\www
Trusted Zone: virtuallythere.com\www
Trusted Zone: visitchile.com\www
Trusted Zone: vmesquita.com\www
Trusted Zone: vmware.com\register
Trusted Zone: vtr.com
Trusted Zone: wamba.com\vagos
Trusted Zone: weather.com\www
Trusted Zone: webco.cl\www2
Trusted Zone: webex.com\cdcsoftware
Trusted Zone: webex.com.mx\www
Trusted Zone: wikipedia.org\es
Trusted Zone: windowsecurity.com\www
Trusted Zone: windowsupdate.com\download
Trusted Zone: wolverineworldwide.com\img
Trusted Zone: worldwidetelescope.org\www
Trusted Zone: www.13.cl
Trusted Zone: www.hl.cl
Trusted Zone: www.yr.no
Trusted Zone: x-caleta.com\www
Trusted Zone: yahoo.com\ar.games
Trusted Zone: yahoo.com\es.play
Trusted Zone: yahoo.com\espanol.groups
Trusted Zone: younoodle.com
Trusted Zone: youtube.com\www
Trusted Zone: zebra.com\www
Trusted Zone: ziddu.com\downloads
Trusted Zone: zonaemule.com\www
DPF: Microsoft XML Parser for Java - file://c:\windows\Java\classes\xmldso.cab
DPF: {0005BC3F-AC4E-4278-8BF6-7CAD5C44E75F} - hxxp://demo/ePower/cab/RDACHART.CAB
DPF: {0047388F-51E3-4F3C-B343-D4C2C6F47E72} - hxxp://demo/ePower/cab/RDAPRTL.CAB
DPF: {00479453-31F5-4870-A0FD-BA078BFA789B} - hxxp://demo/ePower/cab/RDARES.CAB
DPF: {00499C34-6952-45AD-9697-241B90292833} - hxxp://demo/ePower/cab/RDARPRT.CAB
DPF: {00A40008-7D21-4F26-A9D7-A2EFC3771C5F} - hxxp://demo/ePower/cab/RDASHARE.CAB
DPF: {00FF182B-B4C8-4C76-812F-D24B9A11F242} - hxxp://demo/ePower/cab/RdaUI.cab
DPF: {0111DD06-6BC6-4696-A634-993A068BAA63} - hxxp://demo/ePower/cab/RDAUISTATICLISTS.CAB
DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} - hxxp://downloads.ewido.net/ewidoOnlineScan.cab
DPF: {28E4BE08-1C25-4CE4-A9AA-3495A9D08C8E} - hxxp://demo/ePower/cab/RSHORTCUT.CAB
DPF: {3814B215-C77A-4EDB-BE3B-F6CB92DD33C5} - hxxp://demo/ePower/cab/RdaObjCreate.cab
DPF: {3E410F8E-7EDC-4E91-B7A8-BFA00E3803D2} - hxxp://www.e-rol.com/cabs/EROLProj1.cab
DPF: {8FEED82A-42A6-4117-A803-7EC3EB9339E0} - hxxp://192.168.0.99/plugin/client.cab
DPF: {A4BD9732-328D-11D4-BB89-00A0C9843488} - hxxp://demo/ePower/cab/RN1SENDX.CAB
DPF: {AE4F48D0-6A0A-11D3-9FB0-005004A79108} - hxxp://demo/ePower/cab/DFOUTILS.CAB
DPF: {C45056F0-B4BC-4A65-85F0-2A131563795B} - hxxp://demo/ePower/cab/RDACLNT.CAB
DPF: {CD883B96-F640-4B89-BA88-F6AE1E72B65B} - hxxp://demo/ePower/cab/RDAEMAIL.CAB
FF - ProfilePath - c:\documents and settings\claudio\Datos de programa\Mozilla\Firefox\Profiles\rhy2btj8.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.cl/
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\archivos de programa\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA} - c:\archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0020-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA} - c:\archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0021-ABCDEFFEDCBA}
FF - Ext: Java Console: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA} - c:\archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Java Quick Starter: [email protected] - c:\archivos de programa\Java\jre6\lib\deploy\jqs\ff
FF - Ext: ZoneAlarm Toolbar: {FFB96CC1-7EB3-449D-B827-DB661701C6BB} - c:\archivos de programa\CheckPoint\ZAForceField\TrustChecker
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
FF - Ext: Adobe DLM (powered by getPlus(R)): {E2883E8F-472F-4fb0-9522-AC9BF37916A7} - %profile%\extensions\{E2883E8F-472F-4fb0-9522-AC9BF37916A7}
FF - Ext: LogMeIn, Inc. Remote Access Plugin: [email protected] - %profile%\extensions\[email protected]
FF - Ext: BitDefender QuickScan: {e001c731-5e37-4538-a5cb-8168736a2360} - %profile%\extensions\{e001c731-5e37-4538-a5cb-8168736a2360}
FF - Ext: <?xmlversion=1.0?><RDF xmlns=http://www.w3.org/1999/02/22-rdf-syntax-ns# xmlns:em=http://www.mozilla.org/2004/em-rdf#><Description about=urn:mozilla:install-manifest><em:id>{a3a5c777-f583-4fef-9380-ab4add1bc2a8}: {a3a5c777-f583-4fef-9380-ab4add1bc2a8} - %profile%\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a8}
.
.
------- File Associations -------
.
JSEFile=NOTEPAD.EXE %1
.
- - - - ORPHANS REMOVED - - - -

Toolbar-Locked - (no file)
ShellExecuteHooks-{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - (no file)



**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-01-20 09:23
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************

[HKEY_LOCAL_MACHINE\System\ControlSet001\Services\msftesql]
"ImagePath"="\"c:\archivos de programa\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\msftesql.exe\" -s:MSSQL.1 -f:MSSQLSERVER"
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\.ogg\OpenWithList]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Classes\.ogg\ShellEx]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{85862EDA-F507-4d5b-ACA9-BB2C34A85682}\LocalServer32]
@DACL=(02 0000)
@=expand:"%SystemRoot%\\System32\\XpsRchVw.exe"
"ThreadingModel"="Apartment"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{85862EDA-F507-4d5b-ACA9-BB2C34A85682}\ProgID]
@DACL=(02 0000)
@="Windows.XPSRichPreview.1"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10l_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F07-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F07-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F07-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F08-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F08-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F08-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0B-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0B-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0B-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0C-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0C-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0C-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0F-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0F-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F0F-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F10-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F10-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F10-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F13-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F13-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F13-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F14-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F14-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F14-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F16-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F16-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F16-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F18-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F18-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F18-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1A-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1A-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1A-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1C-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1C-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1C-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1E-B939-11DC-AF58-0013D350667C}\ProxyStubClsid]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1E-B939-11DC-AF58-0013D350667C}\ProxyStubClsid32]
@DACL=(02 0000)
@="{00020420-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{15A32F1E-B939-11DC-AF58-0013D350667C}\TypeLib]
@DACL=(02 0000)
@="{15A32F00-B939-11DC-AF58-0013D350667C}"
"Version"="1.9"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E6F787C2-C759-4403-B1BD-9359CB96EB04}\TypeLib]
@DACL=(02 0000)
@="{DCB43485-19FB-4D6D-BB3D-73C7F48D5F00}"

[HKEY_LOCAL_MACHINE\software\Classes\MCADVAPI.IMcUIConfigMgr\CLSID]
@DACL=(02 0000)
@="{4928379D-88CC-45DD-BEDC-FB5B51A4C8C3}"

[HKEY_LOCAL_MACHINE\software\Classes\MCADVAPI.IMcUIConfigMgr\CurVer]
@DACL=(02 0000)
@="MCADVAPI.IMcUIConfigMgr.1"

[HKEY_LOCAL_MACHINE\software\Classes\MCADVAPI.IMcUIConfigMgr.1\CLSID]
@DACL=(02 0000)
@="{4928379D-88CC-45DD-BEDC-FB5B51A4C8C3}"

[HKEY_LOCAL_MACHINE\software\Classes\McAfee.Shredder.PingObj\CLSID]
@DACL=(02 0000)
@="{657324E9-5E6E-4559-9E0D-1B0110462D61}"

[HKEY_LOCAL_MACHINE\software\Classes\McAfee.Shredder.PingObj\CurVer]
@DACL=(02 0000)
@="McAfee.Shredder.PingObj"

[HKEY_LOCAL_MACHINE\software\Classes\McScIndx.McSecurityIndex\CLSID]
@DACL=(02 0000)
@="{9ECF572B-8638-4FEB-BBAC-D6A9631B4D98}"

[HKEY_LOCAL_MACHINE\software\Classes\McScIndx.McSecurityIndex\CurVer]
@DACL=(02 0000)
@="McScIndx.McSecurityIndex.1"

[HKEY_LOCAL_MACHINE\software\Classes\McScIndx.McSecurityIndex.1\CLSID]
@DACL=(02 0000)
@="{9ECF572B-8638-4FEB-BBAC-D6A9631B4D98}"

[HKEY_LOCAL_MACHINE\software\Classes\McSubMgr.McSubMgr\CLSID]
@DACL=(02 0000)
@="{9BE8D7B2-329C-442A-A4AC-ABA9D7572602}"

[HKEY_LOCAL_MACHINE\software\Classes\McSubMgr.McSubMgr\CurVer]
@DACL=(02 0000)
@="McSubMgr.McSubMgr.1"

[HKEY_LOCAL_MACHINE\software\Classes\McSubMgr.McSubMgr.1\CLSID]
@DACL=(02 0000)
@="{9BE8D7B2-329C-442A-A4AC-ABA9D7572602}"

[HKEY_LOCAL_MACHINE\software\Classes\MSWC.PageCounter\CLSID]
@DACL=(02 0000)
@="{EF88CA72-B840-11D0-8B40-00C0F00AE35A}"

[HKEY_LOCAL_MACHINE\software\Classes\PKMSA.AddStartAddress\CurVer]
@DACL=(02 0000)
@="PKMSA.AddStartAddress.1"

[HKEY_LOCAL_MACHINE\software\Classes\PKMSA.CatalogCommands\CurVer]
@DACL=(02 0000)
@="PKMSA.CatalogCommands.1"

[HKEY_LOCAL_MACHINE\software\Classes\PKMSA.StartAddressCommands\CurVer]
@DACL=(02 0000)
@="PKMSA.StartAddressCommands.1"

[HKEY_LOCAL_MACHINE\software\Classes\Tahoe.CCMenu\CurVer]
@DACL=(02 0000)
@="Tahoe.CCMenu.1"

[HKEY_LOCAL_MACHINE\software\Classes\Tahoe.FolderControl\CurVer]
@DACL=(02 0000)
@="Tahoe.FolderControl.1"

[HKEY_LOCAL_MACHINE\software\Classes\Tahoe.NewCCWizardMenu\CurVer]
@DACL=(02 0000)
@="Tahoe.NewCCWizardMenu.1"

[HKEY_LOCAL_MACHINE\software\Classes\Tahoe.SchManMenu\CurVer]
@DACL=(02 0000)
@="Tahoe.SchManMenu.1"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{15DC5743-EE5E-43F8-8DA8-70FA2922E3CD}\1.0]
@DACL=(02 0000)
@="McAfee.com Update Manager Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{1D57FBB7-F5AE-4FDC-BB82-C4F5AF6C3A1A}\1.0]
@DACL=(02 0000)
@="McScIndx 1.0 Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{3A78B247-8014-4A8B-A9B6-9A2C5F13FFEB}\1.0]
@DACL=(02 0000)
@="McSubMgr 1.0 Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{4C77FEB0-14B3-11D2-9240-0060979B22D3}\2.69]
@DACL=(02 0000)
@="Generic 2.105 Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{63246B6B-0837-478E-A2EF-7C5D1D31E28B}\a.0]
@DACL=(02 0000)
@="ConvertDoc"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{A73B6F3D-FD35-4992-AB4B-4AD729BB20E7}\1.0]
@DACL=(02 0000)
@="McAfee.com mcinfo TypeLib"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{B072F8B1-B349-11D1-916C-0060979B22D3}\1.2]
@DACL=(02 0000)
@="QueryEditor 1.2 Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{CDECC4C0-7377-11D3-9A6C-00C04FF40D52}\1.0]
@DACL=(02 0000)
@="McAfee Clinic Html Dialog Type Library"

[HKEY_LOCAL_MACHINE\software\Classes\TypeLib\{D322BE70-BA80-11D1-9175-0060979B22D3}\1.8]
@DACL=(02 0000)
@="OleDbMd 1.8 Type Library"

[HKEY_LOCAL_MACHINE\software\DeterministicNetworks\DNE\Parameters]
"SymbolicLinkValue"=hex(6):5c,00,52,00,65,00,67,00,69,00,73,00,74,00,72,00,79,
00,5c,00,4d,00,41,00,43,00,48,00,49,00,4e,00,45,00,5c,00,53,00,79,00,73,00,\

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IE UserData NT\RegBackup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IE.HKCUZoneInfo\RegBackup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IE40.UserAgent\RegBackup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Advanced INF Setup\IEHomePageInfo\RegBackup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Java VM\MSDEBUG]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Java VM\RNIModuleFlags]
@DACL=(02 0000)
"mtxjava.dll"=hex:01,00,00,00
"jdbcdemo.dll"=hex:01,00,00,00

[HKEY_LOCAL_MACHINE\software\Microsoft\Java VM\Security]
@DACL=(02 0000)
"EditCustomPermissions"=hex:00,00,00,00

[HKEY_LOCAL_MACHINE\software\Microsoft\Java VM\System Properties]
@DACL=(02 0000)
"com.ms.applet.enable.serversockets"="false"

[HKEY_LOCAL_MACHINE\software\Microsoft\Updates\Windows XP\SP0\ie7\Filelist]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\AutomationProperties]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\CLSID]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Component Categories]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Editors]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\InstalledProducts]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\KeyBindingTables]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Languages]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Menus]
@DACL=(02 0000)
"{164B10B9-B200-11D0-8C61-00A0C91E29D5}"=""
"{DA9FB551-C724-11d0-AE1F-00A0C90FFFC3}"=", 1000, 1"
"{FA14BE31-AB8C-11d0-B12E-00A0C90F2732}"=", 1001, 1"
"{F5E7E720-1401-11d1-883B-0000F87579D2}"=", 1002, 1"
"{4F174C20-8C12-11D0-8340-0000F80270F8}"=""

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\NewProjectTemplates]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Packages]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Projects]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Redistributables]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Services]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\Setup]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\SolutionPersistence]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\SplashInfo]
@DACL=(02 0000)
"SplashInfo"=hex:43,6c,61,75,64,69,6f,20,54,6f,6c,65,64,6f,00,00,00,00,00,00,
00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,00,\

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\ToolboxPages]
@DACL=(02 0000)
"Package"="{DA9FB551-C724-11D0-AE1F-00A0C90FFFC3}"
@="#13538"

[HKEY_LOCAL_MACHINE\software\Microsoft\VisualStudio\6.0\ToolsOptionsPages]
@DACL=(02 0000)

[HKEY_LOCAL_MACHINE\software\Microsoft\Windows\CurrentVersion\Installer\UserData\LocalSystem\Components\Ø•€|ÿÿÿÿ•€|ù•9~*]
"A0C0110900063D11C8EF10054038389C"="C?\\WINDOWS\\system32\\FM20ENU.DLL"
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(1824)
c:\archivos de programa\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll
c:\windows\system32\Ati2evxx.dll
c:\windows\system32\LMIinit.dll
c:\archivos de programa\Broadcom\Security Platform Software\PSDNtfy.dll
c:\windows\system32\IfxWlxEN.dll
c:\archivos de programa\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'lsass.exe'(1880)
c:\archivos de programa\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll

- - - - - - - > 'explorer.exe'(5596)
c:\windows\system32\WININET.dll
c:\archivos de programa\CheckPoint\ZAForceField\Plugins\ISWSHEX.dll
c:\windows\system32\webcheck.dll
c:\windows\system32\LMIRfsClientNP.dll
c:\windows\system32\netprovcredman.dll
.
------------------------ Other Running Processes ------------------------
.
c:\windows\system32\Ati2evxx.exe
c:\archivos de programa\Intel\WiFi\bin\S24EvMon.exe
c:\windows\system32\basfipm.exe
c:\archivos de programa\Intel\WiFi\bin\EvtEng.exe
c:\windows\system32\Ati2evxx.exe
c:\windows\system32\IFXSPMGT.exe
c:\windows\system32\inetsrv\inetinfo.exe
c:\archivos de programa\Java\jre6\bin\jqs.exe
c:\archivos de programa\LogMeIn\x86\RaMaint.exe
c:\archivos de programa\LogMeIn\x86\LogMeIn.exe
c:\archivos de programa\LogMeIn\x86\LMIGuardian.exe
c:\archivos de programa\Dell\QuickSet\NICCONFIGSVC.exe
c:\windows\system32\NMSAccessU.exe
c:\archivos de programa\Eset\nod32krn.exe
c:\archivos de programa\Raxco\PerfectDisk10\PDAgent.exe
c:\archivos de programa\Broadcom\Security Platform Software\PSDsrvc.EXE
c:\archivos de programa\Archivos comunes\Intel\WirelessCommon\RegSrvc.exe
c:\windows\system32\wdfmgr.exe
c:\archivos de programa\RealVNC\VNC4\WinVNC4.exe
c:\rosslicenseservice\rossinc.exe
c:\archivos de programa\Intel\WiFi\bin\WLKeeper.exe
c:\archivos de programa\Raxco\PerfectDisk10\PDEngine.exe
c:\windows\system32\rundll32.exe
c:\archivos de programa\Apoint\Apntex.exe
c:\archivos de programa\LogMeIn\x86\LMIGuardian.exe
c:\archivos de programa\Microsoft ActiveSync\wcescomm.exe
c:\archiv~1\MICROS~4\rapimgr.exe
c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\TosBtMng.exe
c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\TosA2dp.exe
c:\windows\system32\wbem\unsecapp.exe
c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\TosBtHsp.exe
c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\tosOBEX.exe
c:\archivos de programa\Toshiba\Bluetooth Toshiba Stack\tosBtProc.exe
.
**************************************************************************
.
Completion time: 2011-01-20 09:35:03 - machine was rebooted
ComboFix-quarantined-files.txt 2011-01-20 12:34
ComboFix2.txt 2009-03-19 00:27

Pre-Run: 4.429.242.368 bytes libres
Post-Run: 5.444.091.904 bytes libres

WindowsXP-KB310994-SP2-Pro-BootDisk-ENU.exe
[boot loader]
timeout=2
default=multi(0)disk(0)rdisk(0)partition(2)\WINDOWS
[operating systems]
c:\cmdcons\BOOTSECT.DAT="Microsoft Windows Recovery Console" /cmdcons
UnsupportedDebug="do not select this" /debug
multi(0)disk(0)rdisk(0)partition(2)\WINDOWS="Microsoft Windows XP Professional" /noexecute=optin /fastdetect

- - End Of File - - 0748D770324BA7B633D3B1880907F629

ah, estimados

Al ejecutar el Combofix me indicó algo asi como que estaba caduco y por eso se ejecutaria en modo - REDUCED FUNCTIONALITY MODE -

Eso es normal o habra sido algun bicho?
Ademas tenia activado el ZoneAlarm que me mostro varias ventanas preguntando si autorizaba o no a programas a ejecutarse, a todos les indique que Si.


Saludos

Hice los pasos indicados.

Luego intenté nuevamente ejecutar los antivirus online, todos con el iExplorer de windows:

1) Kaspersky online
Update del programa sin problemas
Database update: Error, indica que la licencia a caducado.

2) Panda Online
Me da error al tratar de instalar el Control Activex, la ventana de error indica:
<La instruccion en "0x070a0068" hace referencia a la memoria en "0x070a0068". La memoria no se puede "written" >

3) Eset Online
Me aparece la ventana para Instalar el complemento, luego de indicar que SÍ, me aparece una ventana de error similar a la de Panda, indicando:
<La instruccion en 0x06b40068 hace referencia a la memoria en 0x06b40068. La memoria no se puede "written">


No se si será un problema de virus aun o algo de Windows que ha quedado mal luego de la infección.
¿como lo puedo solucionar sin reinstalar?


Saludos cordiales.

Hola M@co,
gracias por la ayuda.

Con la restauración de iExplorer ya me ha quedado operativo el Panda Online, al menos para mi era un indicador de que algo raro pasaba en mi equipo.

Ahora estoy corriendo una revisión con el Panda Online, ¿te parece si espero al termino de esta revisión para dar por cerrado este tema?

Saludos cordiales,