Hotmail envia mensajes sin estar conectado (Solucionado)

Hola, mi hotmail envia mensajes sin estar yo conectado.

En unos me pone: "Mail delivery failed: returning message to sender"

Y en otros pone: "Delivery Status Notification (Failure)

He pasado el Nod32, Superantispyware, malware bytes, Spybot, y el MSNCleaner y no encuentran nada.

Perdon por haber tardado tanto, pero he estado unos dias fuera.
TDSSkiller no ha encontrado nada. Ahora estoy pasando Glary Utilities.
Me faltará pasar Combo Fix.

Bueno, pues combofix tampoco me ha encontrado nada. Que hago?

El de TDSSkiller

2011/02/22 12:41:37.0203 2872 TDSS rootkit removing tool 2.4.18.0 Feb 21 2011 11:08:08
2011/02/22 12:41:37.0703 2872 ================================================================================
2011/02/22 12:41:37.0703 2872 SystemInfo:
2011/02/22 12:41:37.0703 2872
2011/02/22 12:41:37.0703 2872 OS Version: 5.1.2600 ServicePack: 3.0
2011/02/22 12:41:37.0703 2872 Product type: Workstation
2011/02/22 12:41:37.0703 2872 ComputerName: WINDOWS-P4VT8
2011/02/22 12:41:37.0703 2872 UserName: owner
2011/02/22 12:41:37.0703 2872 Windows directory: C:\WINDOWS
2011/02/22 12:41:37.0703 2872 System windows directory: C:\WINDOWS
2011/02/22 12:41:37.0703 2872 Processor architecture: Intel x86
2011/02/22 12:41:37.0718 2872 Number of processors: 2
2011/02/22 12:41:37.0718 2872 Page size: 0x1000
2011/02/22 12:41:37.0718 2872 Boot type: Normal boot
2011/02/22 12:41:37.0718 2872 ================================================================================
2011/02/22 12:41:37.0937 2872 Initialize success

Y el de ComboFix:

ComboFix 11-02-20.03 - owner 22/02/2011 12:47:24.3.2 - x86
Microsoft Windows XP Home Edition 5.1.2600.3.1252.34.3082.18.2047.1346 [GMT 1:00]
Running from: c:\documents and settings\owner\Mis documentos\Downloads\ComboFix.exe
AV: ESET Smart Security 3.0 *Enabled/Updated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
FW: Cortafuegos personal de ESET *Enabled* {E5E70D32-0101-4340-86A3-A7B0F1C8FFE0}
.

((((((((((((((((((((((((( Files Created from 2011-01-22 to 2011-02-22 )))))))))))))))))))))))))))))))
.

2011-02-14 20:11 . 2011-02-14 20:11 -------- d-----w- c:\archivos de programa\Spybot - Search & Destroy
2011-02-06 20:43 . 2011-02-14 19:25 -------- d-----w- c:\documents and settings\owner\Datos de programa\GlarySoft
2011-02-06 20:34 . 2011-02-06 20:34 -------- d-----w- c:\archivos de programa\Glary Utilities
2011-02-04 18:29 . 2011-02-04 18:29 -------- d-----w- c:\documents and settings\sara
2011-02-04 18:12 . 2011-02-04 18:12 -------- d-----w- c:\documents and settings\Invitado\Datos de programa\ESET
2011-02-03 22:28 . 2009-06-30 09:37 28552 ----a-w- c:\windows\system32\drivers\pavboot.sys
2011-02-03 22:28 . 2011-02-03 22:28 -------- d-----w- c:\archivos de programa\Panda Security
2011-02-03 16:06 . 2011-02-03 16:25 -------- d-----w- C:\MSNCleaner
2011-02-03 15:48 . 2011-02-03 15:48 -------- d-----w- c:\archivos de programa\Navilog1
2011-02-03 15:44 . 2011-02-03 15:55 -------- d---a-w- C:\Navilog1
2011-02-01 18:14 . 2011-02-01 18:14 -------- d-----w- c:\documents and settings\LocalService\Configuración local\Datos de programa\ESET
2011-02-01 16:29 . 2011-02-01 16:29 -------- d-----w- c:\documents and settings\owner\Datos de programa\SUPERAntiSpyware.com
2011-02-01 16:29 . 2011-02-01 16:29 -------- d-----w- c:\documents and settings\All Users\Datos de programa\SUPERAntiSpyware.com
2011-02-01 16:29 . 2011-02-22 09:07 -------- d-----w- c:\archivos de programa\SUPERAntiSpyware
2011-02-01 16:28 . 2011-02-01 16:28 -------- d-----w- c:\archivos de programa\CCleaner
2011-02-01 14:41 . 2011-02-06 09:31 -------- d-----w- c:\documents and settings\owner\Datos de programa\ESET
2011-02-01 14:38 . 2011-02-01 14:38 -------- d-----w- c:\documents and settings\All Users\Datos de programa\ESET
2011-02-01 14:31 . 2011-02-01 14:31 -------- d-----w- c:\windows\system32\wbem\Repository
2011-01-31 23:46 . 2011-01-31 23:46 -------- d-----w- c:\documents and settings\owner\Configuración local\Datos de programa\ESET
2011-01-31 20:12 . 2011-01-31 20:12 -------- d-----w- c:\documents and settings\owner\Datos de programa\Malwarebytes
2011-01-31 20:12 . 2011-01-31 20:12 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Malwarebytes
2011-01-31 20:12 . 2010-12-20 17:09 38224 ----a-w- c:\windows\system32\drivers\mbamswissarmy.sys
2011-01-31 20:12 . 2011-02-01 14:31 -------- d-----w- c:\archivos de programa\Malwarebytes' Anti-Malware
2011-01-31 20:12 . 2010-12-20 17:08 20952 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-01-31 13:32 . 2011-01-31 13:32 -------- d-----w- c:\archivos de programa\TomTom International B.V
2011-01-31 13:32 . 2011-01-31 13:32 -------- d-----w- c:\documents and settings\owner\Datos de programa\InstallShield
2011-01-30 15:45 . 2011-01-30 15:45 135568 ----a-w- c:\archivos de programa\Internet Explorer\PLUGINS\nppdf32.dll

.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-01-21 14:44 . 2008-08-25 19:37 441344 ----a-w- c:\windows\system32\shimgvw.dll
2011-01-07 14:09 . 2008-08-25 19:38 290048 ----a-w- c:\windows\system32\atmfd.dll
2010-12-31 14:03 . 2008-08-25 19:37 1855104 ----a-w- c:\windows\system32\win32k.sys
2010-12-22 12:34 . 2008-08-25 19:38 301568 ----a-w- c:\windows\system32\kerberos.dll
2010-12-20 23:07 . 2008-08-25 19:39 78336 ----a-w- c:\windows\system32\ieencode.dll
2010-12-20 23:07 . 2006-02-24 13:21 832512 ----a-w- c:\windows\system32\wininet.dll
2010-12-20 23:07 . 2003-04-24 12:00 1830912 ----a-w- c:\windows\system32\inetcpl.cpl
2010-12-20 23:07 . 2008-08-25 19:38 17408 ----a-w- c:\windows\system32\corpol.dll
2010-12-20 17:25 . 2008-08-25 19:37 734720 ----a-w- c:\windows\system32\lsasrv.dll
2010-12-20 12:55 . 2008-08-25 19:39 389120 ----a-w- c:\windows\system32\html.iec
2010-12-09 15:15 . 2008-08-25 19:37 742912 ----a-w- c:\windows\system32\ntdll.dll
2010-12-09 15:13 . 2008-08-25 19:37 2029568 ----a-w- c:\windows\system32\ntkrnlpa.exe
2010-12-09 15:13 . 2008-08-25 19:37 2151424 ----a-w- c:\windows\system32\ntoskrnl.exe
2010-12-09 14:29 . 2008-08-25 19:37 33280 ----a-w- c:\windows\system32\csrsrv.dll
2004-08-09 21:30 . 2006-04-26 11:31 40960 ----a-w- c:\archivos de programa\Uninstall_CDS.exe
.

((((((((((((((((((((((((((((( SnapShot@2011-02-14_19.46.51 )))))))))))))))))))))))))))))))))))))))))
.
+ 2011-02-22 08:42 . 2011-02-22 08:42 16384 c:\windows\Temp\Perflib_Perfdata_254.dat
- 2005-01-30 18:26 . 2010-01-01 12:16 69120 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\xlicons.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 69120 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\xlicons.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 35328 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\wordicon.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 35328 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\wordicon.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 30208 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\pptico.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 30208 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\pptico.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 11264 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\PEicons.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 11264 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\PEicons.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 28160 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\misc.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 28160 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\misc.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 73216 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\fpicon.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 73216 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\fpicon.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 22528 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\bindico.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 22528 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\bindico.exe
+ 2011-02-16 11:29 . 2011-02-16 11:29 234656 c:\windows\system32\Macromed\Flash\FlashUtil10m_Plugin.exe
+ 2011-02-15 16:29 . 2011-02-15 16:29 234656 c:\windows\system32\Macromed\Flash\FlashUtil10m_ActiveX.exe
+ 2011-02-15 16:29 . 2011-02-15 16:29 311456 c:\windows\system32\Macromed\Flash\FlashUtil10m_ActiveX.dll
+ 2005-01-30 18:26 . 2011-02-19 08:19 104960 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\outicon.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 104960 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\outicon.exe
+ 2005-01-30 18:26 . 2011-02-19 08:19 155136 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\accicons.exe
- 2005-01-30 18:26 . 2010-01-01 12:16 155136 c:\windows\Installer\{00010C0A-78E1-11D2-B60F-006097C998E7}\accicons.exe
+ 2011-02-16 11:29 . 2011-02-16 11:29 6053536 c:\windows\system32\Macromed\Flash\NPSWF32.dll
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{2BEFBCCE-46A6-4950-BCB5-7062EAC6C9C9}]
2010-08-19 12:48 135840 ----a-w- c:\archivos de programa\Widestream6\spointer\extensions\widestream6_air_ie.dll

[HKEY_LOCAL_MACHINE\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
2010-10-18 10:26 3908192 ----a-w- c:\archivos de programa\ConduitEngine\ConduitEngine.dll

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"MsnMsgr"="c:\archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" [2010-04-16 3872080]
"TomTomHOME.exe"="c:\archivos de programa\TomTom HOME 2\TomTomHOMERunner.exe" [2010-08-24 247144]
"NokiaOviSuite2"="c:\archivos de programa\Nokia\Nokia Ovi Suite\NokiaOviSuite.exe" [2010-09-02 672632]
"swg"="c:\archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-10-26 39408]
"SUPERAntiSpyware"="c:\archivos de programa\SUPERAntiSpyware\SUPERAntiSpyware.exe" [2011-02-22 2423752]
"SpybotSD TeaTimer"="c:\archivos de programa\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NokiaMServer"="c:\archivos de programa\Archivos comunes\Nokia\MPlatform\NokiaMServer" [X]
"CARPService"="carpserv.exe" [2003-01-27 4608]
"NvCplDaemon"="c:\windows\System32\NvCpl.dll" [2003-06-03 4640768]
"nwiz"="nwiz.exe" [2003-06-03 323584]
"iTunesHelper"="c:\archivos de programa\iTunes\iTunesHelper.exe" [2004-10-13 278528]
"PinnacleDriverCheck"="c:\windows\System32\PSDrvCheck.exe" [2004-03-10 406016]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\archivos de programa\Archivos comunes\Java\Java Update\jusched.exe" [2010-05-14 248552]
"egui"="c:\archivos de programa\ESET\ESET Smart Security\egui.exe" [2008-03-13 1443072]
"Adobe Reader Speed Launcher"="c:\archivos de programa\Adobe\Reader 10.0\Reader\Reader_sl.exe" [2011-01-30 35736]
"Adobe ARM"="c:\archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe" [2010-11-15 932288]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\System32\CTFMON.EXE" [2008-04-14 15360]

c:\documents and settings\All Users\Men£ Inicio\Programas\Inicio\
Microsoft Office.lnk - c:\archivos de programa\Microsoft Office\Office\OSA9.EXE [1999-2-17 65588]

[hkey_local_machine\software\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
"{56F9679E-7826-4C84-81F3-532071A8BCC5}"= "c:\archivos de programa\Windows Desktop Search\MSNLNamespaceMgr.dll" [2006-03-13 233472]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= "c:\archivos de programa\SUPERAntiSpyware\SASSEH.DLL" [2008-05-13 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
2009-09-03 22:21 548352 ----a-w- c:\archivos de programa\SUPERAntiSpyware\SASWINLO.DLL

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\Wdf01000.sys]
@="Driver"

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\WudfSvc]
@="Service"

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)

[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\system32\\sessmgr.exe"=
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"c:\\Archivos de programa\\Telefonica\\KitAIM\\AimExDll.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Sync\\WindowsLiveSync.exe"=
"c:\\Archivos de programa\\Nokia\\Nokia Ovi Suite\\NokiaOviSuite.exe"=
"c:\\Archivos de programa\\Archivos comunes\\Nokia\\Service Layer\\A\\nsl_host_process.exe"=

R0 pavboot;pavboot;c:\windows\system32\drivers\pavboot.sys [03/02/2011 23:28 28552]
R0 viasraid;viasraid;c:\windows\system32\drivers\viasraid.sys [27/11/2003 15:56 77056]
R1 SASKUTIL;SASKUTIL;c:\archivos de programa\SUPERAntiSpyware\SASKUTIL.SYS [10/05/2010 19:41 67656]
R2 ekrn;Eset Service;c:\archivos de programa\ESET\ESET Smart Security\ekrn.exe [13/03/2008 16:49 472320]
R2 TomTomHOMEService;TomTomHOMEService;c:\archivos de programa\TomTom HOME 2\TomTomHOMEService.exe [24/08/2010 10:38 92008]
S1 SASDIFSV;SASDIFSV;c:\archivos de programa\SUPERAntiSpyware\sasdifsv.sys [17/02/2010 19:25 12872]
S2 gupdate;Servicio Google Update (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [26/10/2010 14:48 135664]
S3 MTK;Media Technology Kernel Driver;c:\windows\system32\drivers\FIDE.SYS [24/07/2004 8:11 14601]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [26/10/2010 13:33 137344]

--- Other Services/Drivers In Memory ---

*Deregistered* - klmd25
.
Contents of the 'Scheduled Tasks' folder

2011-02-22 c:\windows\Tasks\GlaryInitialize.job
- c:\archivos de programa\Glary Utilities\initialize.exe [2011-02-06 13:13]

2011-02-22 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2010-10-26 13:48]

2011-02-22 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2010-10-26 13:48]
.
.
------- Supplementary Scan -------
.
uStart Page = www.Google.com
uSearchMigratedDefaultURL = hxxp://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
mStart Page = hxxp://www.infospyware.com
mWindow Title =
uInternet Settings,ProxyOverride = *.local
IE: &MSN Search - c:\archivos de programa\MSN Toolbar Suite\TB\02.05.0000.1082\es-es\msntb.dll/search.htm
IE: Abrir en nueva ficha de fondo - c:\archivos de programa\Windows Live Toolbar\Components\es-es\msntabres.dll.mui/229?c635f061190c49a4ae1388a6ad7bb7c2
IE: Abrir en nueva ficha en primer plano - c:\archivos de programa\Windows Live Toolbar\Components\es-es\msntabres.dll.mui/230?c635f061190c49a4ae1388a6ad7bb7c2
IE: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx
IE: Google Sidewiki... - c:\archivos de programa\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_E11712C84EA7E12B.dll/cmsidewiki.html
DPF: {525019DF-8282-40DC-A0E0-13C076889F66} - hxxp://www.softonic.com/sinespias/installer.cab
DPF: {C77CAABC-48C9-4F92-854E-0A6CE300E9B1} - hxxp://www.onlyyou.es/es/actualizaciones/bin/DEMAC_GPS.cab
FF - ProfilePath - c:\documents and settings\owner\Datos de programa\Mozilla\Firefox\Profiles\3yxi7vj7.default\
FF - Ext: Default: {972ce4c6-7e08-4474-a285-3208198ce6fd} - c:\archivos de programa\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF - Ext: Interest Recognizer for Widestream6: [email protected] - c:\archivos de programa\Widestream6\spointer\extensions\[email protected]
FF - Ext: Firefox Synchronisation Extension: {A27F3FEF-1113-4cfb-A032-8E12D7D8EE70} - c:\archivos de programa\Nokia\Nokia Ovi Suite\Connectors\Bookmarks Connector\FirefoxExtension
FF - Ext: Java Quick Starter: [email protected] - c:\archivos de programa\Java\jre6\lib\deploy\jqs\ff
FF - Ext: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - %profile%\extensions\{20a82645-c095-46ed-80e3-08825760534b}
.

**************************************************************************

catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-02-22 12:53
Windows 5.1.2600 Service Pack 3 NTFS

scanning hidden processes ...

scanning hidden autostart entries ...

scanning hidden files ...

scan completed successfully
hidden files: 0

**************************************************************************
.
--------------------- LOCKED REGISTRY KEYS ---------------------

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
@Denied: (A 2) (Everyone)
@="FlashBroker"
"LocalizedString"="@c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe,-101"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
"Enabled"=dword:00000001

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
@="c:\\WINDOWS\\system32\\Macromed\\Flash\\FlashUtil10m_ActiveX.exe"

[HKEY_LOCAL_MACHINE\software\Classes\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
@Denied: (A 2) (Everyone)
@="IFlashBroker4"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
@="{00020424-0000-0000-C000-000000000046}"

[HKEY_LOCAL_MACHINE\software\Classes\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
@="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
"Version"="1.0"

[HKEY_LOCAL_MACHINE\software\Ulead Systems\UserInfo]
@DACL=(02 0000)
"UserName"="owner"
"UserEmail"=""
"CompanyName"=""
.
--------------------- DLLs Loaded Under Running Processes ---------------------

- - - - - - - > 'winlogon.exe'(896)
c:\archivos de programa\SUPERAntiSpyware\SASWINLO.DLL
c:\windows\system32\WININET.dll

- - - - - - - > 'explorer.exe'(2632)
c:\windows\system32\WININET.dll
c:\archivos de programa\Windows Media Player\wmpband.dll
c:\windows\system32\WPDShServiceObj.dll
c:\windows\system32\PortableDeviceTypes.dll
c:\windows\system32\PortableDeviceApi.dll
.
Completion time: 2011-02-22 12:56:01
ComboFix-quarantined-files.txt 2011-02-22 11:55
ComboFix2.txt 2011-02-14 19:48

Pre-Run: 81.946.255.360 bytes libres
Post-Run: 81.927.786.496 bytes libres

- - End Of File - - A9AAFC398A283B211F54D5687F0789C4

Si, esque el reporte de la primera pasada no me salió y no lo supe encontrar.
No me deja desinstalarlo, no encuentra ese archivo!

He encontrado esto:


2011-02-14 19:48:11 . 2011-02-14 19:48:11 275 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM_ActiveSetup-{7DCF52A7-EB94-BCD3-9289-8138961643C1}.reg.dat
2011-02-14 19:48:09 . 2011-02-14 19:48:09 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfRd.reg.dat
2011-02-14 19:48:09 . 2011-02-14 19:48:09 534 ----a-w- C:\Qoobox\Quarantine\Registry_backups\SafeBoot-WudfPf.reg.dat
2011-02-14 19:48:01 . 2011-02-14 19:48:01 125 ----a-w- C:\Qoobox\Quarantine\Registry_backups\HKLM-Run-Cmaudio.reg.dat
2011-02-14 19:47:58 . 2011-02-14 19:47:58 171 ----a-w- C:\Qoobox\Quarantine\Registry_backups\WebBrowser-{56DAD8FB-415B-4F9A-86E8-C17D58BCA7C3}.reg.dat
2011-02-14 19:47:57 . 2011-02-14 19:47:57 132 ----a-w- C:\Qoobox\Quarantine\Registry_backups\Toolbar-{56dad8fb-415b-4f9a-86e8-c17d58bca7c3}.reg.dat
2011-02-14 19:47:56 . 2011-02-14 19:47:56 192 ----a-w- C:\Qoobox\Quarantine\Registry_backups\BHO-{56dad8fb-415b-4f9a-86e8-c17d58bca7c3}.reg.dat
2011-02-14 19:45:06 . 2011-02-22 11:52:29 6,051 ----a-w- C:\Qoobox\Quarantine\Registry_backups\tcpip.reg
2011-02-14 19:39:15 . 2011-02-22 11:46:03 357 ----a-w- C:\Qoobox\Quarantine\catchme.log
2010-10-24 10:55:39 . 2010-11-21 15:09:44 72 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\mru.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\1.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\a.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\b.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\c.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\d.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\e.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\f.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\g.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\h.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\i.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\J.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\k.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\l.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\m.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\n.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\o.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\p.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\q.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\r.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\s.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\t.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\u.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\v.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\w.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\x.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\y.xml.vir
2010-05-24 06:08:18 . 2010-05-24 06:08:18 64 ----a-w- C:\Qoobox\Quarantine\C\Documents and Settings\Invitado\Datos de programa\PriceGong\Data\z.xml.vir
2008-08-25 19:37:48 . 2008-04-14 02:18:24 1,042,944 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system32\_000007_.tmp.dll.vir
2003-11-27 14:14:30 . 2003-01-23 16:57:48 607 ----a-w- C:\Qoobox\Quarantine\C\WINDOWS\system\OEMINFO.INI.vir