doble tilde en XP(Solucionado)

**agusrr** · 08/11/11, 13:27:52

hola
este es mi primer mensaje en este foro, pero reconocer que ojalá lo hubiera encontrado antes. el caso es el siguiente:

- no puedo poner los acentos, en el momento que escribo por ejemplo "camión" , me sale cami´´on. solo me pasa en aplicaciones de windows, word, bloc de notas... aqui en el el foro puedo ponerlos y se escriben bien.
he revisado el idioma y esta en español internacional, he restaurado el sistema días antes, he desistalado el teclado.... y todo igual.
que ha pasado?

ya se que se ha tratado en otros post, pero abro este porque no todos los casos seran iguales y deberé exponer aqui los logs pertinentes.

saludos

**Xtreme Hero** · 08/11/11, 13:39:31

Hola agusrr Bienvenido a infospyware

Realiza lo siguiente:

Descargar DDS.pif desde aquí y guardarla en su escritorio de Windows.

Si usas Firefox dale clic derecho y selecciona Guardar Como
Si falla lo anterior --> descarga DDS.scr

Haga doble clic en dds.pif para ejecutar la herramienta y espere pacientemente el reporte.

Cuando haya terminado, DDS, se abrirá dos (2) los reportes:

DDS.txt
Attach.txt

En la próxima respuesta:
Pega el reporte llamado DDS.txt

Salu2

**agusrr** · 08/11/11, 14:00:25

cabe decir anteriormente que tengo problemas con el archivo ping.exe de system32 que cada varios minutos salta y se inicia el proceso dejando el procesador seco. asi que he optado por quitarlo de dicho directorio para que el proceso no se active. claro está, no puedo usar el proceso ping en msdos. a ver si con estos reports podeis sacar tambien algo en claro con respecto a esto que comento:

DDS:
.
DDS (Ver_2011-06-23.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Agustín Reyes Ruiz at 19:41:43 on 2011-11-08
Microsoft Windows XP Professional 5.1.2600.2.1252.34.3082.18.3327.2079 [GMT 1:00]
.
AV: ESET NOD32 antivirus system 2.70 *Enabled/Outdated* {E5E70D32-0101-4F12-8FB0-D96ACA4F34C0}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
c:\archivos de programa\archivos comunes\logishrd\lvmvfm\LVPrcSrv.exe
svchost.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Archivos de programa\Eset\nod32krn.exe
C:\WINDOWS\system32\svchost.exe -k imgsvc
C:\Archivos de programa\Common Files\VMware\USB\vmware-usbarbitrator.exe
C:\WINDOWS\system32\vmnat.exe
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Archivos de programa\VMware\VMware Workstation\vmware-authd.exe
C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\rundll32.exe
C:\Archivos de programa\Eset\nod32kui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Everest Ultimate Edition 4.20.1170 (Standalone) + Serial\everest.exe
C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe
C:\Archivos de programa\Nokia\Nokia PC Suite 7\PCSuite.exe
C:\Documents and Settings\Agustín Reyes Ruiz\lmsxqcbysw.exe
C:\Archivos de programa\PC Connectivity Solution\Transports\NclUSBSrv.exe
C:\Archivos de programa\PC Connectivity Solution\Transports\NclRSSrv.exe
C:\Archivos de programa\Windows Live\Contacts\wlcomm.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\Archivos de programa\Eset\nod32.exe
C:\Documents and Settings\Agustín Reyes Ruiz\Escritorio\dds.pif
.
============== Pseudo HJT Report ===============
.
uStart Page = hxxp://www.google.es/
BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\archivos de programa\archivos comunes\adobe\acrobat\activex\AcroIEHelper.dll
BHO: {5C255C8A-E604-49b4-9D64-90988571CECB} - No File
BHO: Windows Live Aplicación auxiliar de inicio de sesión: {9030d464-4c02-4abf-8ecc-5164760863c6} - c:\archivos de programa\archivos comunes\microsoft shared\windows live\WindowsLiveLogin.dll
BHO: Skype Browser Helper: {ae805869-2e5c-4ed4-8f7b-f1f7851a4497} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
BHO: Java(tm) Plug-In 2 SSV Helper: {dbc80044-a445-435b-bc74-9c25c1c588a9} - c:\archivos de programa\java\jre6\bin\jp2ssv.dll
BHO: JQSIEStartDetectorImpl Class: {e7e6f031-17ce-4c07-bc86-eabfe594f69c} - c:\archivos de programa\java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
EB: &ATI TV: {44226dff-747e-4edc-b30c-78752e50cd0c} - c:\archivos de programa\ati multimedia\tv\EXPLBAR.DLL
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [EVEREST AutoStart] c:\archivos de programa\everest ultimate edition 4.20.1170 (standalone) + serial\everest.exe
uRun: [MessengerPlus3] "c:\archivos de programa\messengerplus! 3\MsgPlus.exe" /WinStart
uRun: [msnmsgr] "c:\archivos de programa\windows live\messenger\msnmsgr.exe" /background
uRun: [u21703v62h] c:\documents and settings\agustín reyes ruiz\u21703v62h.exe
uRun: [PC Suite Tray] "c:\archivos de programa\nokia\nokia pc suite 7\PCSuite.exe" -onlytray
uRun: [{D436B15A-9955-AD7F-C921-7DA0FB555EB2}] "c:\documents and settings\agustín reyes ruiz\datos de programa\axalnu\ruce.exe"
uRun: [lmsxqcbysw] c:\documents and settings\agustín reyes ruiz\lmsxqcbysw.exe
mRun: [RTHDCPL] RTHDCPL.EXE
mRun: [SkyTel] SkyTel.EXE
mRun: [Alcmtr] ALCMTR.EXE
mRun: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
mRun: [Regedit32] c:\windows\system32\regedit.exe
mRun: [nod32kui] "c:\archivos de programa\eset\nod32kui.exe" /WAITSERVICE
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
IE: E&xportar a Microsoft Excel - c:\archiv~1\micros~2\office11\EXCEL.EXE/3000
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\archivos de programa\messenger\msmsgs.exe
IE: {44226DFF-747E-4edc-B30C-78752E50CD0C} - {44226DFF-747E-4edc-B30C-78752E50CD0C} - c:\archivos de programa\ati multimedia\tv\EXPLBAR.DLL
IE: {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\archiv~1\micros~2\office11\REFIEBAR.DLL
LSP: c:\windows\system32\imon.dll
LSP: c:\archivos de programa\vmware\vmware workstation\vsocklib.dll
DPF: {166B1BCA-3F9C-11CF-8075-444553540000} - hxxp://download.macromedia.com/pub/shockwave/cabs/director/sw.cab
TCP: Interfaces\{82526E52-CFCA-4B04-8A6C-D87F8545948A} : NameServer = 87.216.1.65,87.216.1.66
Handler: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - c:\archivos de programa\skype\toolbars\internet explorer\skypeieplugin.dll
Notify: AtiExtEvent - Ati2evxx.dll
SSODL: WPDShServiceObj - {AAA288BA-9A4C-45B0-95D7-94D524869DB5} - c:\windows\system32\WPDShServiceObj.dll
.
============= SERVICES / DRIVERS ===============
.
R0 a347bus;a347bus;c:\windows\system32\drivers\a347bus.sys [2010-11-3 160640]
R0 a347scsi;a347scsi;c:\windows\system32\drivers\a347scsi.sys [2010-11-3 5248]
R1 nod32drv;nod32drv;c:\windows\system32\drivers\nod32drv.sys [2011-10-25 15424]
R2 MBAMService;MBAMService;c:\archivos de programa\malwarebytes' anti-malware\mbamservice.exe [2011-10-11 366152]
R2 NOD32krn;NOD32 Kernel Service;c:\archivos de programa\eset\nod32krn.exe [2011-10-25 552064]
R2 vmci;VMware vmci;c:\windows\system32\drivers\vmci.sys [2010-8-1 70704]
R2 VMUSBArbService;VMware USB Arbitration Service;c:\archivos de programa\common files\vmware\usb\vmware-usbarbitrator.exe [2010-8-1 539184]
R3 EverestDriver;Lavalys EVEREST Kernel Driver;\??\c:\docume~1\agustn~1\config~1\temp\everestdriver.sys --> c:\docume~1\agustn~1\config~1\temp\EverestDriver.sys [?]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2011-10-11 22216]
S3 ALSysIO;ALSysIO;\??\c:\docume~1\agustn~1\config~1\temp\alsysio.sys --> c:\docume~1\agustn~1\config~1\temp\ALSysIO.sys [?]
S3 nmwcdnsu;Nokia USB Flashing Phone Parent;c:\windows\system32\drivers\nmwcdnsu.sys [2011-2-9 137600]
S3 nmwcdnsuc;Nokia USB Flashing Generic;c:\windows\system32\drivers\nmwcdnsuc.sys [2011-2-9 8576]
S3 PSSDK42;PSSDK42;c:\windows\system32\drivers\pssdk42.sys [2010-11-5 38976]
S3 PSSDKLBF;PSSDKLBF;c:\windows\system32\drivers\pssdklbf.sys [2010-11-5 53312]
S3 RTL2832U_IRHID;HID Infrared Remote Receiver;c:\windows\system32\drivers\RTL2832U_IRHID.sys [2011-2-11 31872]
S3 RTL2832UBDA;REALTEK 2832U BDA Driver;c:\windows\system32\drivers\RTL2832UBDA.sys [2011-2-11 93344]
S3 RTL2832UUSB;REALTEK 2832U USB Driver;c:\windows\system32\drivers\RTL2832UUSB.sys [2011-2-11 32800]
S3 WinRing0_1_2_0;WinRing0_1_2_0;c:\documents and settings\agustín reyes ruiz\escritorio\pen\temperatura\realtemp_340\WinRing0.sys [2010-9-13 14416]
.
=============== Created Last 30 ================
.
2013-02-20 21:40:57 -------- d-----w- c:\archivos de programa\Yuna Software
2011-11-08 17:24:29 -------- d-----w- c:\windows\system32\wbem\repository\FS
2011-11-08 17:24:29 -------- d-----w- c:\windows\system32\wbem\Repository
2011-11-05 09:59:07 16896 ----a-w- c:\documents and settings\agustín reyes ruiz\lmsxqcbysw.exe
2011-11-05 09:48:48 -------- d-----w- c:\documents and settings\agustín reyes ruiz\datos de programa\Axalnu
2011-11-05 09:48:48 -------- d-----w- c:\documents and settings\agustín reyes ruiz\datos de programa\Acwei
2011-10-25 21:58:42 414368 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2011-10-25 13:46:29 22528 ----a-w- c:\windows\system32\pathping.exe
2011-10-25 12:58:58 512096 ----a-w- c:\windows\system32\drivers\amon.sys
2011-10-25 12:58:58 298104 ----a-w- c:\windows\system32\imon.dll
2011-10-25 12:58:58 15424 ----a-w- c:\windows\system32\drivers\nod32drv.sys
2011-10-25 12:58:50 1754 ----a-w- c:\windows\system32\CHOICE.COM
2011-10-25 10:40:49 19456 -c--a-w- c:\windows\system32\dllcache\ping.exe
2011-10-11 08:22:27 388096 ----a-r- c:\documents and settings\agustín reyes ruiz\datos de programa\microsoft\installer\{45a66726-69bc-466b-a7a4-12fcba4883d7}\HiJackThis.exe
2011-10-11 08:22:26 -------- d-----w- c:\archivos de programa\Trend Micro
2011-10-11 08:12:09 -------- d-----w- c:\documents and settings\agustín reyes ruiz\datos de programa\Malwarebytes
2011-10-11 08:12:01 -------- d-----w- c:\documents and settings\all users\datos de programa\Malwarebytes
2011-10-11 08:11:58 22216 ----a-w- c:\windows\system32\drivers\mbam.sys
2011-10-11 08:11:58 -------- d-----w- c:\archivos de programa\Malwarebytes' Anti-Malware
.
==================== Find3M ====================
.
.
=================== ROOTKIT ====================
.
Stealth MBR rootkit/Mebroot/Sinowal/TDL4 detector 0.4.2 by Gmer, http://www.gmer.net
Windows 5.1.2600 Disk: ST3200822A rev.3.01 -> Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-4
.
device: opened successfully
user: MBR read successfully
.
Disk trace:
called modules: ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll >>UNKNOWN [0x8AD914D0]<<
_asm { PUSH EBP; MOV EBP, ESP; PUSH ECX; MOV EAX, [EBP+0x8]; CMP EAX, [0x8ad977d0]; MOV EAX, [0x8ad9784c]; PUSH EBX; PUSH ESI; MOV ESI, [EBP+0xc]; MOV EBX, [ESI+0x60]; PUSH EDI; JNZ 0x20; MOV [EBP+0x8], EAX; }
1 ntkrnlpa!IofCallDriver[0x804EF16A] -> \Device\Harddisk0\DR0[0x8B091788]
3 CLASSPNP[0xBA90905B] -> ntkrnlpa!IofCallDriver[0x804EF16A] -> \Device\00000081[0x8B109218]
5 ACPI[0xBA756620] -> ntkrnlpa!IofCallDriver[0x804EF16A] -> [0x8B090D98]
\Driver\atapi[0x8B08F530] -> IRP_MJ_CREATE -> 0x8AD914D0
error: Read Uno de los dispositivos vinculados al sistema no funciona.
kernel: MBR read successfully
_asm { XOR AX, AX; MOV SS, AX; MOV SP, 0x7c00; STI ; PUSH AX; POP ES; PUSH AX; POP DS; CLD ; MOV SI, 0x7c1b; MOV DI, 0x61b; PUSH AX; PUSH DI; MOV CX, 0x1e5; REP MOVSB ; RETF ; MOV BP, 0x7be; MOV CL, 0x4; CMP [BP+0x0], CH; JL 0x2e; JNZ 0x3a; }
detected disk devices:
detected hooks:
\Driver\atapi DriverStartIo -> 0x8AD9131B
user & kernel MBR OK
Warning: possible TDL3 rootkit infection !
.
============= FINISH: 19:43:25,54 ===============

ATTACH

.
UNLESS SPECIFICALLY INSTRUCTED, DO NOT POST THIS LOG.
IF REQUESTED, ZIP IT UP & ATTACH IT
.
DDS (Ver_2011-06-23.01)
.
Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 30/09/2010 10:39:04
System Uptime: 08/11/2011 18:46:16 (1 hours ago)
.
Motherboard: ASUSTeK Computer INC. | | P5K-VM
Processor: Procesador Intel Pentium III Xeon | LGA775 | 2999/333mhz
Processor: Procesador Intel Pentium III Xeon | LGA775 | 2999/333mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 86 GiB total, 7,524 GiB free.
D: is FIXED (NTFS) - 100 GiB total, 4,182 GiB free.
E: is CDROM ()
F: is FIXED (NTFS) - 37 GiB total, 0,111 GiB free.
G: is CDROM ()
Z: is CDROM (CDFS)
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E96B-E325-11CE-BFC1-08002BE10318}
Description: Teclado estándar de 101/102 teclas o Microsoft Natural PS/2 Keyboard
Device ID: ACPI\PNP0303\4&1400782C&0
Manufacturer: (Teclados estándar)
Name: Teclado estándar de 101/102 teclas o Microsoft Natural PS/2 Keyboard
PNP Device ID: ACPI\PNP0303\4&1400782C&0
Service: i8042prt
.
Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A}
Description: Nokia Windows Portable Device Driver
Device ID: ROOT\WPD\0000
Manufacturer: Nokia
Name: Nokia 6670
PNP Device ID: ROOT\WPD\0000
Service: WUDFRd
.
Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A}
Description: Nokia Windows Portable Device Driver
Device ID: ROOT\WPD\0001
Manufacturer: Nokia
Name: Nokia 6280
PNP Device ID: ROOT\WPD\0001
Service: WUDFRd
.
Class GUID: {EEC5AD98-8080-425F-922A-DABF3DE3F69A}
Description: Nokia E65
Device ID: ROOT\WPD\0002
Manufacturer: Nokia
Name: Nokia E65
PNP Device ID: ROOT\WPD\0002
Service: WUDFRd
.
==== System Restore Points ===================
.
RP284: 01/09/2011 12:50:40 - Punto de control del sistema
RP285: 02/09/2011 12:56:04 - Punto de control del sistema
RP286: 03/09/2011 21:30:57 - Punto de control del sistema
RP287: 05/09/2011 0:03:06 - Punto de control del sistema
RP288: 06/09/2011 1:09:34 - Punto de control del sistema
RP289: 07/09/2011 13:07:40 - Punto de control del sistema
RP290: 09/09/2011 10:41:39 - Punto de control del sistema
RP291: 10/09/2011 11:44:09 - Punto de control del sistema
RP292: 11/09/2011 22:07:23 - Punto de control del sistema
RP293: 12/09/2011 23:28:31 - Punto de control del sistema
RP294: 13/09/2011 23:45:52 - Punto de control del sistema
RP295: 15/09/2011 1:30:01 - Punto de control del sistema
RP296: 16/09/2011 15:46:07 - Punto de control del sistema
RP297: 18/09/2011 15:18:39 - Punto de control del sistema
RP298: 19/09/2011 16:07:35 - Punto de control del sistema
RP299: 20/09/2011 17:08:23 - Punto de control del sistema
RP300: 21/09/2011 2:09:42 - Installed Camtasia Studio 5
RP301: 22/09/2011 11:07:48 - Punto de control del sistema
RP302: 25/09/2011 23:44:11 - Punto de control del sistema
RP303: 27/09/2011 10:26:10 - Punto de control del sistema
RP304: 28/09/2011 12:30:41 - Punto de control del sistema
RP305: 29/09/2011 12:52:56 - Punto de control del sistema
RP306: 30/09/2011 12:56:16 - Punto de control del sistema
RP307: 01/10/2011 1:23:05 - Removed Camtasia Studio 5
RP308: 03/10/2011 22:33:40 - Punto de control del sistema
RP309: 04/10/2011 23:47:08 - Punto de control del sistema
RP310: 06/10/2011 11:16:45 - Punto de control del sistema
RP311: 07/10/2011 12:01:34 - Punto de control del sistema
RP312: 08/10/2011 19:54:48 - Punto de control del sistema
RP313: 09/10/2011 22:28:40 - Punto de control del sistema
RP314: 11/10/2011 1:07:26 - Operación de restauración
RP315: 11/10/2011 1:18:23 - Operación de restauración
RP316: 11/10/2011 10:22:25 - Installed HiJackThis
RP317: 15/10/2011 16:54:43 - Punto de control del sistema
RP318: 16/10/2011 17:30:44 - Punto de control del sistema
RP319: 17/10/2011 17:34:52 - Punto de control del sistema
RP320: 18/10/2011 23:43:47 - Punto de control del sistema
RP321: 20/10/2011 12:08:26 - Punto de control del sistema
RP322: 22/10/2011 10:49:03 - Punto de control del sistema
RP323: 23/10/2011 23:27:57 - Punto de control del sistema
RP324: 25/10/2011 1:54:55 - Instalado ESET NOD32 Antivirus
RP325: 25/10/2011 12:45:39 - Eliminado ESET NOD32 Antivirus
RP326: 26/10/2011 16:25:00 - Punto de control del sistema
RP327: 27/10/2011 23:35:05 - Punto de control del sistema
RP328: 29/10/2011 13:50:16 - Punto de control del sistema
RP329: 30/10/2011 22:37:32 - Punto de control del sistema
RP330: 01/11/2011 18:13:58 - Punto de control del sistema
RP331: 02/11/2011 19:35:30 - Punto de control del sistema
RP332: 04/11/2011 0:40:15 - Punto de control del sistema
RP333: 05/11/2011 15:00:17 - Punto de control del sistema
RP334: 07/11/2011 11:49:04 - Punto de control del sistema
RP335: 08/11/2011 0:11:03 - Software Distribution Service 3.0
RP336: 08/11/2011 18:23:45 - Operación de restauración
RP337: 08/11/2011 19:02:20 - Software Distribution Service 3.0
.
==== Installed Programs ======================
.

7-Zip 4.65
Actualización de seguridad para Windows Internet Explorer 8 (KB982381)
Actualización de seguridad para Windows XP (KB923689)
Actualización de seguridad para Windows XP (KB923789)
Actualización de seguridad para Windows XP (KB932168)
Actualización de seguridad para Windows XP (KB941569)
Actualización para Windows XP (KB932823-v3)
Adobe Flash Player 11 ActiveX
Adobe Reader 8.1.2 - Español
Adobe Reader 8.2.6 - Español
Adobe Shockwave Player 11.6
Ares 2.1.6
ATI - Utilidad de desinstalación de software
ATI AVIVO Codecs
ATI Catalyst Control Center
ATI Decoder
ATI Display Driver
ATI Multimedia Center
ATI Multimedia Center 9.09
ATI Parental Control
ATI Problem Report Wizard
ATI Remote Wonder
ATI Remote Wonder 3.02
Click to Call with Skype
Compresor WinRAR
Controlador de Logitech® Camera
Core Temp version 0.99.8
CoreAVC Pro 1.8.5.0
CoreAVC Professional Edition (remove only)
CutePDF Writer 2.8
DAO
DirectVobSub (remove only)
DVB Dream version 1.4i
EA Network Play System
Elecard AVC HD Player
FormatFactory 2.60
Google Chrome
HD Pack 2.0
Herramienta de carga de Windows Live
High Definition Audio Driver Package - KB888111
HiJackThis
Hotfix for Windows XP (KB926239)
hp deskjet 840c series (Quitar sólo)
Instalación de DivX
Internet Explorer
Java Auto Updater
Java(TM) 6 Update 22
K-Lite Codec Pack 6.3.0 (Full)
Korean Fonts Support For Adobe Reader 8
Logitech Audio Echo Cancellation Component
Logitech QuickCam
Logitech Video Enumerator
Malwarebytes' Anti-Malware versión 1.51.2.1300
Marvell Miniport Driver
Messenger Plus! 3
Messenger Plus! 5
Microsoft .NET Framework 1.1
Microsoft .NET Framework 2.0
Microsoft .NET Framework 3.0
Microsoft Application Error Reporting
Microsoft Choice Guard
Microsoft Kernel-Mode Driver Framework Feature Pack 1.9
Microsoft Office Professional Edition 2003
Microsoft Silverlight
Microsoft User-Mode Driver Framework Feature Pack 1.9
Microsoft Visual C++ 2005 Redistributable
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
MSVC80_x86_v2
MSVC90_x86
MSVCRT
MSXML 6.0 Parser
MVision
Nano 1.1.2
Need For Speed
Nero 6 Ultra Edition
NOD32 Antivirus System
NOD32 FiX v2.1
Nokia Connectivity Cable Driver
Nokia Map Loader
Nokia Ovi Suite
Nokia Ovi Suite Software Updater
Nokia PC Suite
Nokia Software Updater
Ovi Desktop Sync Engine
OviMPlatform
Panel de Control de ATI
Paquete de compatibilidad para 2007 Office system
Paquete de controladores de Windows - Advanced Micro Devices, Inc. (USB28xxBGA) Media (08/31/2007 5.7.0831.0)
Paquete de controladores de Windows - eMPIA Technology Inc, (emAudio) MEDIA (08/31/2007 5.7.0831.0)
Paquete de controladores de Windows - Nokia Modem (06/09/2010 7.01.0.8)
Paquete de controladores de Windows - Nokia Modem (10/07/2010 4.6)
Paquete de controladores de Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
PC Connectivity Solution
ProgDVB
Realtek High Definition Audio Driver
Segoe UI
Seven Remix XP 2.0
Skype™ 5.5
swMSM
TitanTV Client components for ATI
tools-freebsd
tools-linux
tools-netware
tools-solaris
tools-windows
tools-winPre2k
Update Service
USB Video Driver
VC80CRTRedist - 8.0.50727.4053
VLC media player 1.1.11
VMware Workstation
WebFldrs XP
Winamp (remove only)
WinAVI MP4 Converter 3.1.0.1
Windows Communication Foundation
Windows Genuine Advantage Validation Tool (KB892130)
Windows Imaging Component
Windows Internet Explorer 8
Windows Live Asistente para el inicio de sesión
Windows Live Call
Windows Live Communications Platform
Windows Live Essentials
Windows Live Messenger
Windows Media Encoder 9 Series
Windows Media Format 11 runtime
Windows Presentation Foundation
Windows Workflow Foundation
XML Paper Specification Shared Components Pack 1.0
.
==== End Of File ===========================

**Xtreme Hero** · 08/11/11, 14:14:03

Hola de nuevo,

Realiza lo siguiente:

Descarga OTM:OTM by OldTimer (anteriormente OTMoveIt3) | InfoSpyware

º Haz doble clic sobre OTM.exe para ejecutarlo.
º Copia el texto que se encuentra dentro del recuadrado de abajo, y pegalo en el marco izquierdo de OTMoveIt llamado "Paste instruccions for items to be moved ".(No pongas la palabra código)

Código:

[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]
"Regedit32"=-

[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]
"lmsxqcbysw"=-
"{D436B15A-9955-AD7F-C921-7DA0FB555EB2}"=-
"u21703v62h"=-
:Files
c:\windows\system32\regedit.exe
c:\documents and settings\agustín reyes ruiz\datos de programa\axalnu\ruce.exe
c:\documents and settings\agustín reyes ruiz\u21703v62h.exe
c:\documents and settings\agustín reyes ruiz\lmsxqcbysw.exe



:commands
[emptytemp]
[purity]
[Reboot]

Haces click en Moveit!, para lanzar la supresión, en el cudro de la derecha se verán los resultados, luego haces click en exit. Y reinicias para que la supresión tenga efecto. (Este paso es muy importante, no lo omitas o saltes)

-Envía el informe (reporte) de OTM situado sobre C: \ _ OTM\MovedFiles\***_***.log

Descarga y ejecuta TDSSKiller:Manual de TDSSKiller. siguiendo las instrucciones de su manual.

Nota importante:Antes de realizar el paso del TDSSKiller es muy importante que desconectes tu pc de internet(apaga el modem o quita el cable)

-Cuando la Herramienta termine Su trabajo, Reinicia el ordenador y conectate nuevamente a Internet.

-Después de terminar la búsqueda y eliminación, se generará un reporte en un archivo llamado TDSSKiller.txt, que puedes localizar en la raiz del disco C.

Nos traes el reporte de OTM,el de TDSSKiller y cómo funciona todo

Salu2

**agusrr** · 08/11/11, 15:37:18

ok
-ahora hago lo que me dices.
-con respecto al problema que tambien tengo con ping, con esto se soluciona?
-y una última cosa. en el Administrador de Dispositivos de windows me ha desaparecido como unidad de disco duro, el que tengo instalado el sistema operativo. tengo otro disco como esclavo que ese es el único que tengo reconocido. el pc lógicamente arranca, pero no se si es sintoma de que tengo algo malintencionado en el pc que me lo está volviendo medio loco.

saludos

**Xtreme Hero** · 08/11/11, 15:38:18

Hola,

No podemos saber todo eso hasta que desinfectemos,asique luego veremos como se comporta el pc

Salu2

**jpnazrat** · 08/11/11, 15:49:10

podria ser la configuracion del teclado

**agusrr** · 08/11/11, 15:57:11

OTM
All processes killed
Error: Unable to interpret <[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]> in the current context!
Error: Unable to interpret <"Regedit32"=-> in the current context!
Error: Unable to interpret <[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]> in the current context!
Error: Unable to interpret <"lmsxqcbysw"=-> in the current context!
Error: Unable to interpret <"{D436B15A-9955-AD7F-C921-7DA0FB555EB2}"=-> in the current context!
Error: Unable to interpret <"u21703v62h"=-> in the current context!
========== FILES ==========
File/Folder c:\windows\system32\regedit.exe not found.
c:\documents and settings\agustín reyes ruiz\datos de programa\axalnu\ruce.exe moved successfully.
File/Folder c:\documents and settings\agustín reyes ruiz\u21703v62h.exe not found.
c:\documents and settings\agustín reyes ruiz\lmsxqcbysw.exe moved successfully.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrador
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 5094837 bytes
->Flash cache emptied: 456 bytes

User: Agustín Reyes Ruiz
->Temp folder emptied: 1393347 bytes
->Temporary Internet Files folder emptied: 13715336 bytes
->Java cache emptied: 2966251 bytes
->Google Chrome cache emptied: 251755376 bytes
->Flash cache emptied: 516 bytes

User: Agust�n Reyes Ruiz

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 863426 bytes
->Flash cache emptied: 562 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 48229726 bytes
->Flash cache emptied: 915 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 2114656 bytes
%systemroot%\System32 .tmp files removed: 3590493 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 734923 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 315,00 mb

OTM by OldTimer - Version 3.1.18.0 log created on 11082011_213944

Files moved on Reboot...
C:\WINDOWS\temp\vmware-SYSTEM\vmware-usbarb-SYSTEM-1540.log moved successfully.

Registry entries deleted on Reboot...

TDSSKiller
21:52:01.0046 2028 TDSS rootkit removing tool 2.6.16.0 Nov 7 2011 16:26:51
21:52:01.0062 2028 ============================================================
21:52:01.0062 2028 Current date / time: 2011/11/08 21:52:01.0062
21:52:01.0062 2028 SystemInfo:
21:52:01.0062 2028
21:52:01.0062 2028 OS Version: 5.1.2600 ServicePack: 2.0
21:52:01.0062 2028 Product type: Workstation
21:52:01.0062 2028 ComputerName: CASA
21:52:01.0062 2028 UserName: Agustín Reyes Ruiz
21:52:01.0062 2028 Windows directory: C:\WINDOWS
21:52:01.0062 2028 System windows directory: C:\WINDOWS
21:52:01.0062 2028 Processor architecture: Intel x86
21:52:01.0062 2028 Number of processors: 2
21:52:01.0062 2028 Page size: 0x1000
21:52:01.0062 2028 Boot type: Normal boot
21:52:01.0062 2028 ============================================================
21:52:01.0203 2028 Initialize success
21:52:02.0671 2684 ============================================================
21:52:02.0671 2684 Scan started
21:52:02.0671 2684 Mode: Manual;
21:52:02.0671 2684 ============================================================
21:52:03.0156 2684 a347bus (1f61cacacb521215f39061789147968c) C:\WINDOWS\system32\DRIVERS\a347bus.sys
21:52:03.0156 2684 a347bus - ok
21:52:03.0171 2684 a347scsi (113e4b318bbaa7483ca4e582a4d63f49) C:\WINDOWS\system32\Drivers\a347scsi.sys
21:52:03.0171 2684 a347scsi - ok
21:52:03.0187 2684 Abiosdsk - ok
21:52:03.0187 2684 abp480n5 - ok
21:52:03.0234 2684 ACPI (33d1373ee875ce8b063777f7e77815b7) C:\WINDOWS\system32\DRIVERS\ACPI.sys
21:52:03.0234 2684 ACPI - ok
21:52:03.0281 2684 ACPIEC (1c905333c0b9f3d7c68ddf25e54b00f9) C:\WINDOWS\system32\drivers\ACPIEC.sys
21:52:03.0281 2684 ACPIEC - ok
21:52:03.0281 2684 adpu160m - ok
21:52:03.0328 2684 aec (1ee7b434ba961ef845de136224c30fec) C:\WINDOWS\system32\drivers\aec.sys
21:52:03.0328 2684 aec - ok
21:52:03.0359 2684 Afc (fe3ea6e9afc1a78e6edca121e006afb7) C:\WINDOWS\system32\drivers\Afc.sys
21:52:03.0359 2684 Afc - ok
21:52:03.0375 2684 AFD (5ac495f4cb807b2b98ad2ad591e6d92e) C:\WINDOWS\System32\drivers\afd.sys
21:52:03.0375 2684 AFD - ok
21:52:03.0390 2684 Aha154x - ok
21:52:03.0390 2684 aic78u2 - ok
21:52:03.0406 2684 aic78xx - ok
21:52:03.0406 2684 AliIde - ok
21:52:03.0531 2684 ALSysIO - ok
21:52:03.0562 2684 AMON (687c3f2e78aeb209ade1cc265a2560bb) C:\WINDOWS\system32\drivers\amon.sys
21:52:03.0578 2684 AMON - ok
21:52:03.0578 2684 amsint - ok
21:52:03.0625 2684 Arp1394 (f0d692b0bffb46e30eb3cea168bbc49f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
21:52:03.0625 2684 Arp1394 - ok
21:52:03.0625 2684 asc - ok
21:52:03.0640 2684 asc3350p - ok
21:52:03.0656 2684 asc3550 - ok
21:52:03.0671 2684 AsyncMac (02000abf34af4c218c35d257024807d6) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
21:52:03.0671 2684 AsyncMac - ok
21:52:03.0703 2684 atapi (cdfe4411a69c224bd1d11b2da92dac51) C:\WINDOWS\system32\DRIVERS\atapi.sys
21:52:03.0703 2684 Suspicious file (NoAccess): C:\WINDOWS\system32\DRIVERS\atapi.sys. md5: cdfe4411a69c224bd1d11b2da92dac51
21:52:03.0703 2684 atapi ( LockedFile.Multi.Generic ) - warning
21:52:03.0703 2684 atapi - detected LockedFile.Multi.Generic (1)
21:52:03.0718 2684 Atdisk - ok
21:52:03.0765 2684 ATI Remote Wonder II (368be3db3a6b9621df51216d323cda23) C:\WINDOWS\system32\drivers\ATIRWVD.SYS
21:52:03.0765 2684 ATI Remote Wonder II - ok
21:52:03.0828 2684 ati2mtag (575cb903e3652498371c65b95dc99825) C:\WINDOWS\system32\DRIVERS\ati2mtag.sys
21:52:03.0828 2684 ati2mtag - ok
21:52:03.0875 2684 ATIAVAIW (5dccc1b5d6c22479c536b52b76a19086) C:\WINDOWS\system32\DRIVERS\atinavt2.sys
21:52:03.0875 2684 ATIAVAIW - ok
21:52:03.0906 2684 Atmarpc (ec88da854ab7d7752ec8be11a741bb7f) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
21:52:03.0906 2684 Atmarpc - ok
21:52:03.0937 2684 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
21:52:03.0937 2684 audstub - ok
21:52:03.0984 2684 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
21:52:03.0984 2684 Beep - ok
21:52:04.0000 2684 Bridge (e4e6a0922e3d983728c9ad4e8d466954) C:\WINDOWS\system32\DRIVERS\bridge.sys
21:52:04.0000 2684 Bridge - ok
21:52:04.0000 2684 BridgeMP (e4e6a0922e3d983728c9ad4e8d466954) C:\WINDOWS\system32\DRIVERS\bridge.sys
21:52:04.0000 2684 BridgeMP - ok
21:52:04.0031 2684 BthEnum (d24b8d1784c68a25060fffbe8ed34b76) C:\WINDOWS\system32\DRIVERS\BthEnum.sys
21:52:04.0031 2684 BthEnum - ok
21:52:04.0062 2684 BthPan (10355270be12641b9764235da39dcf0f) C:\WINDOWS\system32\DRIVERS\bthpan.sys
21:52:04.0062 2684 BthPan - ok
21:52:04.0109 2684 BTHPORT (7deb334536e21679ad3f061bb4e366ff) C:\WINDOWS\system32\Drivers\BTHport.sys
21:52:04.0109 2684 BTHPORT - ok
21:52:04.0140 2684 BTHUSB (f06d4cb9918b462a84d9ac00027efc30) C:\WINDOWS\system32\Drivers\BTHUSB.sys
21:52:04.0140 2684 BTHUSB - ok
21:52:04.0171 2684 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
21:52:04.0171 2684 cbidf2k - ok
21:52:04.0203 2684 CCDECODE (6163ed60b684bab19d3352ab22fc48b2) C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
21:52:04.0203 2684 CCDECODE - ok
21:52:04.0203 2684 cd20xrnt - ok
21:52:04.0234 2684 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
21:52:04.0234 2684 Cdaudio - ok
21:52:04.0281 2684 Cdfs (cd7d5152df32b47f4e36f710b35aae02) C:\WINDOWS\system32\drivers\Cdfs.sys
21:52:04.0281 2684 Cdfs - ok
21:52:04.0296 2684 Cdrom (af9c19b3100fe010496b1a27181fbf72) C:\WINDOWS\system32\DRIVERS\cdrom.sys
21:52:04.0296 2684 Cdrom - ok
21:52:04.0296 2684 Changer - ok
21:52:04.0312 2684 CmdIde - ok
21:52:04.0328 2684 Cpqarray - ok
21:52:04.0328 2684 dac2w2k - ok
21:52:04.0343 2684 dac960nt - ok
21:52:04.0375 2684 Disk (00ca44e4534865f8a3b64f7c0984bff0) C:\WINDOWS\system32\DRIVERS\disk.sys
21:52:04.0375 2684 Disk - ok
21:52:04.0406 2684 dmboot (9fb634a0ed429aa64de57c53dd10ccf9) C:\WINDOWS\system32\drivers\dmboot.sys
21:52:04.0406 2684 dmboot - ok
21:52:04.0421 2684 dmio (67decfaf3b6cdb34b3fa77d965281bb5) C:\WINDOWS\system32\drivers\dmio.sys
21:52:04.0421 2684 dmio - ok
21:52:04.0437 2684 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
21:52:04.0437 2684 dmload - ok
21:52:04.0484 2684 DMusic (a6f881284ac1150e37d9ae47ff601267) C:\WINDOWS\system32\drivers\DMusic.sys
21:52:04.0484 2684 DMusic - ok
21:52:04.0484 2684 dpti2o - ok
21:52:04.0500 2684 drmkaud (1ed4dbbae9f5d558dbba4cc450e3eb2e) C:\WINDOWS\system32\drivers\drmkaud.sys
21:52:04.0500 2684 drmkaud - ok
21:52:04.0531 2684 DSDrv4 - ok
21:52:04.0562 2684 EverestDriver (708c29170f6beaa1592a78198bd6b50e) C:\Archivos de programa\Everest Ultimate Edition 4.20.1170 (Standalone) + Serial\kerneld.wnt
21:52:04.0562 2684 EverestDriver - ok
21:52:04.0609 2684 Fastfat (3117f595e9615e04f05a54fc15a03b20) C:\WINDOWS\system32\drivers\Fastfat.sys
21:52:04.0609 2684 Fastfat - ok
21:52:04.0625 2684 Fdc (ced2e8396a8838e59d8fd529c680e02c) C:\WINDOWS\system32\DRIVERS\fdc.sys
21:52:04.0625 2684 Fdc - ok
21:52:04.0656 2684 FilterService (5c329e2ab8dd62310213cbfac0178539) C:\WINDOWS\system32\DRIVERS\lvuvcflt.sys
21:52:04.0656 2684 FilterService - ok
21:52:04.0703 2684 Fips (6e9d149cfae2af4783f85dbd6cedf7a1) C:\WINDOWS\system32\drivers\Fips.sys
21:52:04.0703 2684 Fips - ok
21:52:04.0718 2684 Flpydisk (0dd1de43115b93f4d85e889d7a86f548) C:\WINDOWS\system32\DRIVERS\flpydisk.sys
21:52:04.0718 2684 Flpydisk - ok
21:52:04.0765 2684 FltMgr (5a85cd3d07273e3f6fe72ee9c6431632) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
21:52:04.0765 2684 FltMgr - ok
21:52:04.0765 2684 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
21:52:04.0765 2684 Fs_Rec - ok
21:52:04.0781 2684 Ftdisk (cc5f3af5711a1c7c8fa1d43bb16b401a) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
21:52:04.0781 2684 Ftdisk - ok
21:52:04.0828 2684 Gpc (c0f1d4a21de5a415df8170616703debf) C:\WINDOWS\system32\DRIVERS\msgpc.sys
21:52:04.0828 2684 Gpc - ok
21:52:04.0859 2684 hcmon (5e01dbaeee09122a758a1f818cf13e3a) C:\WINDOWS\system32\drivers\hcmon.sys
21:52:04.0859 2684 hcmon - ok
21:52:04.0875 2684 HDAudBus (3fcc124b6e08ee0e9351f717dd136939) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
21:52:04.0875 2684 HDAudBus - ok
21:52:04.0921 2684 hidusb (1de6783b918f540149aa69943bdfeba8) C:\WINDOWS\system32\DRIVERS\hidusb.sys
21:52:04.0921 2684 hidusb - ok
21:52:04.0921 2684 hpn - ok
21:52:04.0968 2684 HTTP (909d110c9634b0f1487eaaea837317d9) C:\WINDOWS\system32\Drivers\HTTP.sys
21:52:04.0968 2684 HTTP - ok
21:52:04.0968 2684 i2omgmt - ok
21:52:04.0984 2684 i2omp - ok
21:52:05.0015 2684 i8042prt (0cab3ee361cfeab260b3906c8b6fb2be) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
21:52:05.0015 2684 i8042prt - ok
21:52:05.0031 2684 Imapi (f8aa320c6a0409c0380e5d8a99d76ec6) C:\WINDOWS\system32\DRIVERS\imapi.sys
21:52:05.0031 2684 Imapi - ok
21:52:05.0046 2684 ini910u - ok
21:52:05.0171 2684 IntcAzAudAddService (b29781b9a90cd55fc5d859c0b1c243bc) C:\WINDOWS\system32\drivers\RtkHDAud.sys
21:52:05.0187 2684 IntcAzAudAddService - ok
21:52:05.0203 2684 IntelIde - ok
21:52:05.0234 2684 intelppm (98bbc0e8efa90fff1ec9456ee7b0b1f1) C:\WINDOWS\system32\DRIVERS\intelppm.sys
21:52:05.0234 2684 intelppm - ok
21:52:05.0265 2684 Ip6Fw (4448006b6bc60e6c027932cfc38d6855) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
21:52:05.0265 2684 Ip6Fw - ok
21:52:05.0296 2684 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
21:52:05.0296 2684 IpFilterDriver - ok
21:52:05.0312 2684 IpInIp (e1ec7f5da720b640cd8fb8424f1b14bb) C:\WINDOWS\system32\DRIVERS\ipinip.sys
21:52:05.0312 2684 IpInIp - ok
21:52:05.0343 2684 IpNat (5191673215c91ff13ceaa83ef8e9653f) C:\WINDOWS\system32\DRIVERS\ipnat.sys
21:52:05.0343 2684 IpNat - ok
21:52:05.0359 2684 IPSec (64537aa5c003a6afeee1df819062d0d1) C:\WINDOWS\system32\DRIVERS\ipsec.sys
21:52:05.0359 2684 IPSec - ok
21:52:05.0406 2684 IRENUM (50708daa1b1cbb7d6ac1cf8f56a24410) C:\WINDOWS\system32\DRIVERS\irenum.sys
21:52:05.0406 2684 IRENUM - ok
21:52:05.0437 2684 isapnp (90bc6118193b4e8a76f0fc0d4a3572de) C:\WINDOWS\system32\DRIVERS\isapnp.sys
21:52:05.0437 2684 isapnp - ok
21:52:05.0468 2684 Kbdclass (71bfdda7b3006b45b18d8bac92bc9993) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
21:52:05.0468 2684 Kbdclass - ok
21:52:05.0515 2684 kbdhid (24334eb02603262309f648ef9e06496e) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
21:52:05.0515 2684 kbdhid - ok
21:52:05.0562 2684 kmixer (8531438246ce9474e41ee1599904c0c7) C:\WINDOWS\system32\drivers\kmixer.sys
21:52:05.0562 2684 kmixer - ok
21:52:05.0593 2684 KSecDD (eb7ffe87fd367ea8fca0506f74a87fbb) C:\WINDOWS\system32\drivers\KSecDD.sys
21:52:05.0593 2684 KSecDD - ok
21:52:05.0609 2684 lbrtfdc - ok
21:52:05.0687 2684 LVcKap (9a3d4fc6b86e7e36473079ab76ac703d) C:\WINDOWS\system32\DRIVERS\LVcKap.sys
21:52:05.0703 2684 LVcKap - ok
21:52:05.0750 2684 LVMVDrv (0acbc11f19320af6c19f2e20013d9095) C:\WINDOWS\system32\DRIVERS\LVMVDrv.sys
21:52:05.0765 2684 LVMVDrv - ok
21:52:05.0828 2684 lvpopflt (e8acf6dd83956fb63ceb058d5f51b18a) C:\WINDOWS\system32\DRIVERS\lvpopflt.sys
21:52:05.0843 2684 lvpopflt - ok
21:52:05.0875 2684 LVPr2Mon (12866641284ebb41e627bb53c04da959) C:\WINDOWS\system32\DRIVERS\LVPr2Mon.sys
21:52:05.0875 2684 LVPr2Mon - ok
21:52:05.0921 2684 LVUSBSta (64bc29c3a0388bfc580bb8b1346f7659) C:\WINDOWS\system32\drivers\LVUSBSta.sys
21:52:05.0921 2684 LVUSBSta - ok
21:52:06.0000 2684 LVUVC (922be6770499220dc27b529ca236815a) C:\WINDOWS\system32\DRIVERS\lvuvc.sys
21:52:06.0015 2684 LVUVC - ok
21:52:06.0046 2684 MBAMProtector (69a6268d7f81e53d568ab4e7e991caf3) C:\WINDOWS\system32\drivers\mbam.sys
21:52:06.0046 2684 MBAMProtector - ok
21:52:06.0156 2684 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
21:52:06.0156 2684 mnmdd - ok
21:52:06.0343 2684 Modem (b65f57d37e8d43089b701ed16e22d0e9) C:\WINDOWS\system32\drivers\Modem.sys
21:52:06.0343 2684 Modem - ok
21:52:06.0453 2684 Mouclass (05e9c75c6797145a4983e9d0a4778bc3) C:\WINDOWS\system32\DRIVERS\mouclass.sys
21:52:06.0453 2684 Mouclass - ok
21:52:06.0484 2684 mouhid (8ee532e516b2d23d686cfc1cc0a15c25) C:\WINDOWS\system32\DRIVERS\mouhid.sys
21:52:06.0484 2684 mouhid - ok
21:52:06.0500 2684 MountMgr (65653f3b4477f3c63e68a9659f85ee2e) C:\WINDOWS\system32\drivers\MountMgr.sys
21:52:06.0500 2684 MountMgr - ok
21:52:06.0531 2684 MPE (55a9a7e6bb297bf0f5b144029dcb79cc) C:\WINDOWS\system32\DRIVERS\MPE.sys
21:52:06.0531 2684 MPE - ok
21:52:06.0531 2684 mraid35x - ok
21:52:06.0562 2684 MRxDAV (46edcc8f2db2f322c24f48785cb46366) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
21:52:06.0562 2684 MRxDAV - ok
21:52:06.0578 2684 MRxSmb (7412ce77c6fd823f8889b4df420c680b) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
21:52:06.0593 2684 MRxSmb - ok
21:52:06.0609 2684 Msfs (561b3a4333ca2dbdba28b5b956822519) C:\WINDOWS\system32\drivers\Msfs.sys
21:52:06.0609 2684 Msfs - ok
21:52:06.0640 2684 MSKSSRV (ae431a8dd3c1d0d0610cdbac16057ad0) C:\WINDOWS\system32\drivers\MSKSSRV.sys
21:52:06.0640 2684 MSKSSRV - ok
21:52:06.0671 2684 MSPCLOCK (13e75fef9dfeb08eeded9d0246e1f448) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
21:52:06.0671 2684 MSPCLOCK - ok
21:52:06.0703 2684 MSPQM (1988a33ff19242576c3d0ef9ce785da7) C:\WINDOWS\system32\drivers\MSPQM.sys
21:52:06.0703 2684 MSPQM - ok
21:52:06.0734 2684 mssmbios (469541f8bfd2b32659d5d463a6714bce) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
21:52:06.0734 2684 mssmbios - ok
21:52:06.0750 2684 MSTEE (bf13612142995096ab084f2db7f40f77) C:\WINDOWS\system32\drivers\MSTEE.sys
21:52:06.0750 2684 MSTEE - ok
21:52:06.0796 2684 MTsensor (d48659bb24c48345d926ecb45c1ebdf5) C:\WINDOWS\system32\DRIVERS\ASACPI.sys
21:52:06.0796 2684 MTsensor - ok
21:52:06.0812 2684 Mup (82035e0f41c2dd05ae41d27fe6cf7de1) C:\WINDOWS\system32\drivers\Mup.sys
21:52:06.0812 2684 Mup - ok
21:52:06.0843 2684 NABTSFEC (5c8dc6429c43dc6177c1fa5b76290d1a) C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
21:52:06.0843 2684 NABTSFEC - ok
21:52:06.0890 2684 NDIS (558635d3af1c7546d26067d5d9b6959e) C:\WINDOWS\system32\drivers\NDIS.sys
21:52:06.0890 2684 NDIS - ok
21:52:06.0906 2684 NdisIP (520ce427a8b298f54112857bcf6bde15) C:\WINDOWS\system32\DRIVERS\NdisIP.sys
21:52:06.0906 2684 NdisIP - ok
21:52:06.0953 2684 NdisTapi (08d43bbdacdf23f34d79e44ed35c1b4c) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
21:52:06.0953 2684 NdisTapi - ok
21:52:06.0968 2684 Ndisuio (34d6cd56409da9a7ed573e1c90a308bf) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
21:52:06.0968 2684 Ndisuio - ok
21:52:06.0984 2684 NdisWan (0b90e255a9490166ab368cd55a529893) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
21:52:06.0984 2684 NdisWan - ok
21:52:06.0984 2684 NDProxy (59fc3fb44d2669bc144fd87826bb571f) C:\WINDOWS\system32\drivers\NDProxy.sys
21:52:06.0984 2684 NDProxy - ok
21:52:07.0000 2684 NetBIOS (3a2aca8fc1d7786902ca434998d7ceb4) C:\WINDOWS\system32\DRIVERS\netbios.sys
21:52:07.0000 2684 NetBIOS - ok
21:52:07.0031 2684 NetBT (0c80e410cd2f47134407ee7dd19cc86b) C:\WINDOWS\system32\DRIVERS\netbt.sys
21:52:07.0031 2684 NetBT - ok
21:52:07.0046 2684 NIC1394 (5c5c53db4fef16cf87b9911c7e8c6fbc) C:\WINDOWS\system32\DRIVERS\nic1394.sys
21:52:07.0046 2684 NIC1394 - ok
21:52:07.0093 2684 nmwcd (48fb907b069524f2dc7ba62a0762850c) C:\WINDOWS\system32\drivers\ccdcmb.sys
21:52:07.0093 2684 nmwcd - ok
21:52:07.0093 2684 nmwcdc (2914ceb789964141ac6e22c6bc980c42) C:\WINDOWS\system32\drivers\ccdcmbo.sys
21:52:07.0093 2684 nmwcdc - ok
21:52:07.0125 2684 nmwcdnsu (28d40797bcb050321fa6674b08a620c0) C:\WINDOWS\system32\drivers\nmwcdnsu.sys
21:52:07.0125 2684 nmwcdnsu - ok
21:52:07.0140 2684 nmwcdnsuc (7804e9747bc27eddc6a8382bbf35cf25) C:\WINDOWS\system32\drivers\nmwcdnsuc.sys
21:52:07.0140 2684 nmwcdnsuc - ok
21:52:07.0171 2684 nod32drv (b4ea8cba9a69d0921b7bd89c8cf9e032) C:\WINDOWS\system32\drivers\nod32drv.sys
21:52:07.0171 2684 nod32drv - ok
21:52:07.0218 2684 Npfs (4f601bcb8f64ea3ac0994f98fed03f8e) C:\WINDOWS\system32\drivers\Npfs.sys
21:52:07.0218 2684 Npfs - ok
21:52:07.0265 2684 Ntfs (05ab81909514bfd69cbb1f2c147cf6b9) C:\WINDOWS\system32\drivers\Ntfs.sys
21:52:07.0265 2684 Ntfs - ok
21:52:07.0296 2684 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
21:52:07.0296 2684 Null - ok
21:52:07.0328 2684 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
21:52:07.0328 2684 NwlnkFlt - ok
21:52:07.0359 2684 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
21:52:07.0359 2684 NwlnkFwd - ok
21:52:07.0390 2684 ohci1394 (0951db8e5823ea366b0e408d71e1ba2a) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
21:52:07.0390 2684 ohci1394 - ok
21:52:07.0437 2684 Parport (0df0b83c90473ccfdc3dc882cbb6e4a9) C:\WINDOWS\system32\DRIVERS\parport.sys
21:52:07.0437 2684 Parport - ok
21:52:07.0437 2684 PartMgr (3334430c29dc338092f79c38ef7b4cd0) C:\WINDOWS\system32\drivers\PartMgr.sys
21:52:07.0437 2684 PartMgr - ok
21:52:07.0484 2684 ParVdm (fad44d704ecd7d39ad01415b8bb34204) C:\WINDOWS\system32\drivers\ParVdm.sys
21:52:07.0484 2684 ParVdm - ok
21:52:07.0515 2684 pccsmcfd (fd2041e9ba03db7764b2248f02475079) C:\WINDOWS\system32\DRIVERS\pccsmcfd.sys
21:52:07.0515 2684 pccsmcfd - ok
21:52:07.0546 2684 PCI (a566b8da5e70b3237274d418853a87e0) C:\WINDOWS\system32\DRIVERS\pci.sys
21:52:07.0562 2684 PCI - ok
21:52:07.0562 2684 PCIDump - ok
21:52:07.0578 2684 PCIIde (33d63f0a9021acb4d75d83b646b93a30) C:\WINDOWS\system32\DRIVERS\pciide.sys
21:52:07.0578 2684 PCIIde - ok
21:52:07.0609 2684 Pcmcia (6374a34b03aea7971c976982a391ad07) C:\WINDOWS\system32\drivers\Pcmcia.sys
21:52:07.0609 2684 Pcmcia - ok
21:52:07.0625 2684 PDCOMP - ok
21:52:07.0625 2684 PDFRAME - ok
21:52:07.0640 2684 PDRELI - ok
21:52:07.0640 2684 PDRFRAME - ok
21:52:07.0656 2684 perc2 - ok
21:52:07.0656 2684 perc2hib - ok
21:52:07.0687 2684 PptpMiniport (1c5cc65aac0783c344f16353e60b72ac) C:\WINDOWS\system32\DRIVERS\raspptp.sys
21:52:07.0687 2684 PptpMiniport - ok
21:52:07.0703 2684 PSched (48671f327553dcf1d27f6197f622a668) C:\WINDOWS\system32\DRIVERS\psched.sys
21:52:07.0703 2684 PSched - ok
21:52:07.0734 2684 PSSDK42 (c8eb36910d3bd582891977e80925e21e) C:\WINDOWS\system32\Drivers\pssdk42.sys
21:52:07.0750 2684 PSSDK42 - ok
21:52:07.0765 2684 PSSDKLBF (0bec7b42f4093400509821c63f13f1d5) C:\WINDOWS\system32\Drivers\pssdklbf.sys
21:52:07.0765 2684 PSSDKLBF - ok
21:52:07.0796 2684 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
21:52:07.0796 2684 Ptilink - ok
21:52:07.0796 2684 ql1080 - ok
21:52:07.0812 2684 Ql10wnt - ok
21:52:07.0828 2684 ql12160 - ok
21:52:07.0828 2684 ql1240 - ok
21:52:07.0843 2684 ql1280 - ok
21:52:07.0859 2684 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
21:52:07.0859 2684 RasAcd - ok
21:52:07.0859 2684 Rasl2tp (98faeb4a4dcf812ba1c6fca4aa3e115c) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
21:52:07.0859 2684 Rasl2tp - ok
21:52:07.0875 2684 RasPppoe (7306eeed8895454cbed4669be9f79faa) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
21:52:07.0875 2684 RasPppoe - ok
21:52:07.0890 2684 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
21:52:07.0890 2684 Raspti - ok
21:52:07.0906 2684 Rdbss (ed375ce745c42a14f10753f7022ecd6a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
21:52:07.0906 2684 Rdbss - ok
21:52:07.0921 2684 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
21:52:07.0921 2684 RDPCDD - ok
21:52:07.0937 2684 rdpdr (a2cae2c60bc37e0751ef9dda7ceaf4ad) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
21:52:07.0953 2684 rdpdr - ok
21:52:07.0968 2684 RDPWD (047bea21274c8a4a233674a76c958c2c) C:\WINDOWS\system32\drivers\RDPWD.sys
21:52:07.0968 2684 RDPWD - ok
21:52:08.0000 2684 redbook (28531a950381da67fc6412dfebcc8c5c) C:\WINDOWS\system32\DRIVERS\redbook.sys
21:52:08.0000 2684 redbook - ok
21:52:08.0046 2684 RFCOMM (99c4b74981a1413f142a3903130088cb) C:\WINDOWS\system32\DRIVERS\rfcomm.sys
21:52:08.0046 2684 RFCOMM - ok
21:52:08.0078 2684 RTL2832UBDA (9f9acc7e0c86d7f2e29fcb6f949173e1) C:\WINDOWS\system32\drivers\RTL2832UBDA.sys
21:52:08.0078 2684 RTL2832UBDA - ok
21:52:08.0093 2684 RTL2832UUSB (ad5774a01bd623b4e2ef42b82b13a3f0) C:\WINDOWS\system32\Drivers\RTL2832UUSB.sys
21:52:08.0093 2684 RTL2832UUSB - ok
21:52:08.0125 2684 RTL2832U_IRHID (636f046efd77b22f7c95716895d172e2) C:\WINDOWS\system32\DRIVERS\RTL2832U_IRHID.sys
21:52:08.0125 2684 RTL2832U_IRHID - ok
21:52:08.0156 2684 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
21:52:08.0156 2684 Secdrv - ok
21:52:08.0171 2684 serenum (a2d868aeeff612e70e213c451a70cafb) C:\WINDOWS\system32\DRIVERS\serenum.sys
21:52:08.0187 2684 serenum - ok
21:52:08.0187 2684 Serial (fa9c4c4ac544301fa13c5c00a270399f) C:\WINDOWS\system32\DRIVERS\serial.sys
21:52:08.0187 2684 Serial - ok
21:52:08.0218 2684 Sfloppy (0d13b6df6e9e101013a7afb0ce629fe0) C:\WINDOWS\system32\drivers\Sfloppy.sys
21:52:08.0218 2684 Sfloppy - ok
21:52:08.0250 2684 Simbad - ok
21:52:08.0281 2684 SLIP (5caeed86821fa2c6139e32e9e05ccdc9) C:\WINDOWS\system32\DRIVERS\SLIP.sys
21:52:08.0281 2684 SLIP - ok
21:52:08.0281 2684 Sparrow - ok
21:52:08.0312 2684 splitter (9bb1dd670cb7505a90fc4e61d4aa8227) C:\WINDOWS\system32\drivers\splitter.sys
21:52:08.0312 2684 splitter - ok
21:52:08.0359 2684 sr (3c151d50cf3ae1683c6e3ec201b2ad3d) C:\WINDOWS\system32\DRIVERS\sr.sys
21:52:08.0359 2684 sr - ok
21:52:08.0390 2684 Srv (5230953c21c811b5fc1ff31ae2b48097) C:\WINDOWS\system32\DRIVERS\srv.sys
21:52:08.0390 2684 Srv - ok
21:52:08.0437 2684 streamip (284c57df5dc7abca656bc2b96a667afb) C:\WINDOWS\system32\DRIVERS\StreamIP.sys
21:52:08.0437 2684 streamip - ok
21:52:08.0468 2684 swenum (03c1bae4766e2450219d20b993d6e046) C:\WINDOWS\system32\DRIVERS\swenum.sys
21:52:08.0468 2684 swenum - ok
21:52:08.0484 2684 swmidi (94abc808fc4b6d7d2bbf42b85e25bb4d) C:\WINDOWS\system32\drivers\swmidi.sys
21:52:08.0484 2684 swmidi - ok
21:52:08.0484 2684 symc810 - ok
21:52:08.0500 2684 symc8xx - ok
21:52:08.0515 2684 sym_hi - ok
21:52:08.0515 2684 sym_u3 - ok
21:52:08.0531 2684 sysaudio (650ad082d46bac0e64c9c0e0928492fd) C:\WINDOWS\system32\drivers\sysaudio.sys
21:52:08.0531 2684 sysaudio - ok
21:52:08.0593 2684 Tcpip (b2220c618b42a2212a59d91ebd6fc4b4) C:\WINDOWS\system32\DRIVERS\tcpip.sys
21:52:08.0593 2684 Tcpip - ok
21:52:08.0625 2684 TDPIPE (38d437cf2d98965f239b0abcd66dcb0f) C:\WINDOWS\system32\drivers\TDPIPE.sys
21:52:08.0625 2684 TDPIPE - ok
21:52:08.0640 2684 TDTCP (ed0580af02502d00ad8c4c066b156be9) C:\WINDOWS\system32\drivers\TDTCP.sys
21:52:08.0640 2684 TDTCP - ok
21:52:08.0671 2684 TermDD (a540a99c281d933f3d69d55e48727f47) C:\WINDOWS\system32\DRIVERS\termdd.sys
21:52:08.0671 2684 TermDD - ok
21:52:08.0687 2684 TosIde - ok
21:52:08.0718 2684 Udfs (12f70256f140cd7d52c58c7048fde657) C:\WINDOWS\system32\drivers\Udfs.sys
21:52:08.0718 2684 Udfs - ok
21:52:08.0734 2684 ultra - ok
21:52:08.0781 2684 Update (7b2170ee3d858ce8fbe503904cc9b663) C:\WINDOWS\system32\DRIVERS\update.sys
21:52:08.0781 2684 Update - ok
21:52:08.0812 2684 upperdev (e526a166e6acafd0a9b3841d3941669e) C:\WINDOWS\system32\DRIVERS\usbser_lowerflt.sys
21:52:08.0812 2684 upperdev - ok
21:52:08.0843 2684 usbaudio (45a0d14b26c35497ad93bce7e15c9941) C:\WINDOWS\system32\drivers\usbaudio.sys
21:52:08.0843 2684 usbaudio - ok
21:52:08.0875 2684 usbccgp (bffd9f120cc63bcbaa3d840f3eef9f79) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
21:52:08.0875 2684 usbccgp - ok
21:52:08.0921 2684 usbehci (15e993ba2f6946b2bfbbfcd30398621e) C:\WINDOWS\system32\DRIVERS\usbehci.sys
21:52:08.0921 2684 usbehci - ok
21:52:08.0953 2684 usbhub (c72f40947f92cea56a8fb532edf025f1) C:\WINDOWS\system32\DRIVERS\usbhub.sys
21:52:08.0953 2684 usbhub - ok
21:52:08.0984 2684 usbprint (a42369b7cd8886cd7c70f33da6fcbcf5) C:\WINDOWS\system32\DRIVERS\usbprint.sys
21:52:08.0984 2684 usbprint - ok
21:52:09.0015 2684 usbser (49106ee29074e6a3d3ac9e24c6d791d8) C:\WINDOWS\system32\drivers\usbser.sys
21:52:09.0015 2684 usbser - ok
21:52:09.0046 2684 UsbserFilt (6f3e3c6811b930d2414552a2e4a40f36) C:\WINDOWS\system32\DRIVERS\usbser_lowerfltj.sys
21:52:09.0046 2684 UsbserFilt - ok
21:52:09.0078 2684 USBSTOR (6cd7b22193718f1d17a47a1cd6d37e75) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
21:52:09.0078 2684 USBSTOR - ok
21:52:09.0109 2684 usbuhci (f8fd1400092e23c8f2f31406ef06167b) C:\WINDOWS\system32\DRIVERS\usbuhci.sys
21:52:09.0109 2684 usbuhci - ok
21:52:09.0125 2684 usbvideo (8968ff3973a883c49e8b564200f565b9) C:\WINDOWS\system32\Drivers\usbvideo.sys
21:52:09.0125 2684 usbvideo - ok
21:52:09.0171 2684 VgaSave (8a60edd72b4ea5aea8202daf0e427925) C:\WINDOWS\System32\drivers\vga.sys
21:52:09.0171 2684 VgaSave - ok
21:52:09.0171 2684 ViaIde - ok
21:52:09.0187 2684 viamraid (7dc3e1dc6e4f8be381c31bfea578412a) C:\WINDOWS\system32\DRIVERS\viamraid.sys
21:52:09.0187 2684 viamraid - ok
21:52:09.0250 2684 vmci (2b2c7c498d4c402ade2152f941af7d46) C:\WINDOWS\system32\Drivers\vmci.sys
21:52:09.0250 2684 vmci - ok
21:52:09.0281 2684 vmkbd (43e2019a879d2e923a3b09a60b904c8d) C:\WINDOWS\system32\drivers\VMkbd.sys
21:52:09.0281 2684 vmkbd - ok
21:52:09.0296 2684 VMnetAdapter (e41704d8149992107b333cc7a52c07cc) C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys
21:52:09.0296 2684 VMnetAdapter - ok
21:52:09.0312 2684 VMnetBridge (81e3a3d6038030bd2501687031a1e19f) C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys
21:52:09.0312 2684 VMnetBridge - ok
21:52:09.0343 2684 VMnetuserif (4c8424905161d437b05818e8c855292c) C:\WINDOWS\system32\drivers\vmnetuserif.sys
21:52:09.0343 2684 VMnetuserif - ok
21:52:09.0375 2684 VMparport (409557443bf6ea48e4fe394ec47ca3db) C:\WINDOWS\system32\Drivers\VMparport.sys
21:52:09.0375 2684 VMparport - ok
21:52:09.0406 2684 vmusb (afb10ad9aa91d2f70c9f0e6bda0d119b) C:\WINDOWS\system32\Drivers\vmusb.sys
21:52:09.0406 2684 vmusb - ok
21:52:09.0468 2684 vmx86 (0331901e989fea8485b6e4251936badf) C:\WINDOWS\system32\Drivers\vmx86.sys
21:52:09.0468 2684 vmx86 - ok
21:52:09.0515 2684 VolSnap (d6ec4aff061665a10f0b1a9517d338e3) C:\WINDOWS\system32\drivers\VolSnap.sys
21:52:09.0515 2684 VolSnap - ok
21:52:09.0593 2684 vstor2-ws60 (c40598b7708c6af55a629a4d349e33bb) C:\Archivos de programa\VMware\VMware Workstation\vstor2-ws60.sys
21:52:09.0593 2684 vstor2-ws60 - ok
21:52:09.0609 2684 Wanarp (984ef0b9788abf89974cfed4bfbaacbc) C:\WINDOWS\system32\DRIVERS\wanarp.sys
21:52:09.0609 2684 Wanarp - ok
21:52:09.0656 2684 Wdf01000 (d918617b46457b9ac28027722e30f647) C:\WINDOWS\system32\Drivers\wdf01000.sys
21:52:09.0656 2684 Wdf01000 - ok
21:52:09.0671 2684 WDICA - ok
21:52:09.0703 2684 wdmaud (0bfa8203b8148fb4e54bc212c41ce497) C:\WINDOWS\system32\drivers\wdmaud.sys
21:52:09.0703 2684 wdmaud - ok
21:52:09.0859 2684 WinRing0_1_2_0 (845af1ba23c8d5e64def61bcc441604c) C:\Documents and Settings\Agustín Reyes Ruiz\Escritorio\pen\TEMPERATURA\RealTemp_340\WinRing0.sys
21:52:09.0859 2684 WinRing0_1_2_0 - ok
21:52:10.0000 2684 WS2IFSL (6abe6e225adb5a751622a9cc3bc19ce8) C:\WINDOWS\System32\drivers\ws2ifsl.sys
21:52:10.0000 2684 WS2IFSL - ok
21:52:10.0062 2684 WSTCODEC (d5842484f05e12121c511aa93f6439ec) C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
21:52:10.0062 2684 WSTCODEC - ok
21:52:10.0109 2684 WudfPf (eaa6324f51214d2f6718977ec9ce0def) C:\WINDOWS\system32\DRIVERS\WudfPf.sys
21:52:10.0109 2684 WudfPf - ok
21:52:10.0125 2684 WudfRd (f91ff1e51fca30b3c3981db7d5924252) C:\WINDOWS\system32\DRIVERS\wudfrd.sys
21:52:10.0125 2684 WudfRd - ok
21:52:10.0171 2684 XUIF (41cf36a3cc7786575247ed456918e112) C:\WINDOWS\system32\Drivers\x10ufx2.sys
21:52:10.0171 2684 XUIF - ok
21:52:10.0203 2684 yukonwxp (05d48e56ea2612d39a4e7f0ecc17b917) C:\WINDOWS\system32\DRIVERS\yk51x86.sys
21:52:10.0203 2684 yukonwxp - ok
21:52:10.0250 2684 MBR (0x1B8) (5a0bd2a90d3af5e6af21be6be968aff1) \Device\Harddisk0\DR0
21:52:10.0250 2684 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - infected
21:52:10.0250 2684 \Device\Harddisk0\DR0 - detected Rootkit.Win32.TDSS.tdl4 (0)
21:52:10.0265 2684 MBR (0x1B8) (792f61657fece3d17a9122b4ee282847) \Device\Harddisk1\DR1
21:52:10.0390 2684 \Device\Harddisk1\DR1 - ok
21:52:10.0390 2684 Boot (0x1200) (01415c543475e8ce4ed85850de7129b5) \Device\Harddisk0\DR0\Partition0
21:52:10.0390 2684 \Device\Harddisk0\DR0\Partition0 - ok
21:52:10.0421 2684 Boot (0x1200) (c803b9e4acc655ee91d2f779f825df6a) \Device\Harddisk0\DR0\Partition1
21:52:10.0437 2684 \Device\Harddisk0\DR0\Partition1 - ok
21:52:10.0437 2684 Boot (0x1200) (a47f9e9b3714d6b002974a825c1571d2) \Device\Harddisk1\DR1\Partition0
21:52:10.0437 2684 \Device\Harddisk1\DR1\Partition0 - ok
21:52:10.0437 2684 ============================================================
21:52:10.0437 2684 Scan finished
21:52:10.0437 2684 ============================================================
21:52:10.0437 0524 Detected object count: 2
21:52:10.0437 0524 Actual detected object count: 2
21:52:12.0609 0524 atapi ( LockedFile.Multi.Generic ) - skipped by user
21:52:12.0609 0524 atapi ( LockedFile.Multi.Generic ) - User select action: Skip
21:52:12.0640 0524 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - will be cured on reboot
21:52:12.0640 0524 \Device\Harddisk0\DR0 - ok
21:52:12.0640 0524 \Device\Harddisk0\DR0 ( Rootkit.Win32.TDSS.tdl4 ) - User select action: Cure

**Xtreme Hero** · 08/11/11, 16:00:14

Hola de nuevo,

Repite el paso de OTM,ya que ha habido fallos,y no sé si es porque los has copiado mal o no sé...

Salu2

**agusrr** · 08/11/11, 16:08:42

aquí está de nuevo:
OTM

All processes killed
Error: Unable to interpret <[HKLM\Software\Microsoft\Windows\CurrentVersion\Run]> in the current context!
Error: Unable to interpret <"Regedit32"=-> in the current context!
Error: Unable to interpret <[HKCU\Software\Microsoft\Windows\CurrentVersion\Run]> in the current context!
Error: Unable to interpret <"lmsxqcbysw"=-> in the current context!
Error: Unable to interpret <"{D436B15A-9955-AD7F-C921-7DA0FB555EB2}"=-> in the current context!
Error: Unable to interpret <"u21703v62h"=-> in the current context!
========== FILES ==========
File/Folder c:\windows\system32\regedit.exe not found.
File/Folder c:\documents and settings\agustín reyes ruiz\datos de programa\axalnu\ruce.exe not found.
File/Folder c:\documents and settings\agustín reyes ruiz\u21703v62h.exe not found.
File/Folder c:\documents and settings\agustín reyes ruiz\lmsxqcbysw.exe not found.
========== COMMANDS ==========

[EMPTYTEMP]

User: Administrador
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Agustín Reyes Ruiz
->Temp folder emptied: 1987642 bytes
->Temporary Internet Files folder emptied: 5335144 bytes
->Java cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 456 bytes

User: Agust�n Reyes Ruiz

User: All Users

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: LocalService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

User: NetworkService
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 33170 bytes
->Flash cache emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32\dllcache .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 19826 bytes
RecycleBin emptied: 123748 bytes

Total Files Cleaned = 7,00 mb

OTM by OldTimer - Version 3.1.18.0 log created on 11082011_220511

Files moved on Reboot...

Registry entries deleted on Reboot...

doble tilde en XP(Solucionado)

Herramientas

doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)

re: doble tilde en XP(Solucionado)