Google me redirecciona a paginas de publicidad (Solucionado)

Buenas tardes,

Cuando utilizo el buscador Google me pasa lo siguiente: una vez hecha la búsqueda, le doy al link que me interesa, y entonces me redirecciona siempre a otros links con contenido publicitario.
Hasta ahora lo que he hecho es pasarle el programa Ad-Aware, pero no se ha solucionado el problema.

Adjunto el informe de HijackThis, gracias de antemano!!


Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 16:21:13, on 14/11/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\Norman\Npm\Bin\Elogsvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Archivos de programa\Bonjour\mDNSResponder.exe
C:\Archivos de programa\eXist\tools\wrapper\bin\wrapper.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\Archivos de programa\LogMeIn\x86\LMIGuardianSvc.exe
C:\Archivos de programa\Java\jre6\bin\java.exe
C:\Archivos de programa\LogMeIn\x86\LogMeIn.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Archivos comunes\VMware\VMware Virtual Image Editing\vmount2.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\vmnetdhcp.exe
C:\Archivos de programa\VMware\VMware Player\vmware-authd.exe
C:\Archivos de programa\TortoiseSVN\bin\TSVNCache.exe
C:\WINDOWS\RTHDCPL.EXE
C:\WINDOWS\system32\RUNDLL32.EXE
C:\Archivos de programa\LogMeIn\x86\LogMeInSystray.exe
C:\Archivos de programa\VMware\VMware Player\hqtray.exe
C:\Archivos de programa\iTunes\iTunesHelper.exe
C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
C:\Documents and Settings\All Users\Datos de programa\Ad-Aware Browsing Protection\adawarebp.exe
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Archivos de programa\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\Archivos comunes\Java\Java Update\jucheck.exe
C:\WINDOWS\system32\msiexec.exe
C:\Archivos de programa\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.google.es/
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyServer = proxy.viavansi.com:3128
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O1 - Hosts: 172.18.24.196 pcalterian
O1 - Hosts: 172.18.24.253 pcalterian2
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Archivos de programa\adawaretb\adawareDx.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Archivos de programa\Yahoo!\Companion\Installs\cpn\yt.dll
O3 - Toolbar: Ad-Aware Security Toolbar - {6c97a91e-4524-4019-86af-2aa2d567bf5c} - C:\Archivos de programa\adawaretb\adawareDx.dll
O4 - HKLM\..\Run: [Norman ZANDA] "C:\Archivos de programa\Norman\Npm\bin\ZLH.EXE" /LOAD /SPLASH
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [HPUsageTracking] "c:\Archivos de programa\HP\HP UT\bin\hppusg.exe" "c:\Archivos de programa\HP\HP UT\"
O4 - HKLM\..\Run: [LogMeIn GUI] "C:\Archivos de programa\LogMeIn\x86\LogMeInSystray.exe"
O4 - HKLM\..\Run: [VMware hqtray] "C:\Archivos de programa\VMware\VMware Player\hqtray.exe"
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [iTunesHelper] "C:\Archivos de programa\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [RegistrarUsrDNIeCertStoreDLL] E:\DNIe\udcs.exe
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Archivos de programa\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKLM\..\Run: [Ad-Aware Browsing Protection] "C:\Documents and Settings\All Users\Datos de programa\Ad-Aware Browsing Protection\adawarebp.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [googletalk] "C:\Archivos de programa\Google\Google Talk\googletalk.exe" /autostart
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: Referencia - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~2\OFFICE11\REFIEBAR.DLL
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Archivos de programa\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {915B4CF8-B58E-4CA5-88BE-E21799DB75F2} (BBVADNIe_CE.BBVASignCtl) - https://www.bbva.es/DFAUTH/mult/BBVASign.CAB
O16 - DPF: {CAFECAFE-0013-0001-0022-ABCDEFABCDEF} (JInitiator 1.3.1.22) - http://taurus:7778/forms/jinitiator/jinit.exe
O16 - DPF: {CAFECAFE-0013-0001-0026-ABCDEFABCDEF} (JInitiator 1.3.1.26) - http://10.229.36.25:7778/forms/jinitiator/jinit.exe
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O16 - DPF: {FD0B6769-6490-4A91-AA0A-B5AE0DC75AC9} (Performance Viewer Activex Control) - https://secure.logmein.com/activex/ractrl.cab?lmi=100
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = sadiel.es
O17 - HKLM\Software\..\Telephony: DomainName = sadiel.es
O17 - HKLM\System\CCS\Services\Tcpip\..\{F8EF7232-A55F-48B2-89C4-F94505C115D6}: NameServer = 192.168.2.242
O17 - HKLM\System\CS1\Services\Tcpip\Parameters: Domain = sadiel.es
O17 - HKLM\System\CS2\Services\Tcpip\Parameters: Domain = sadiel.es
O18 - Protocol: qvp - {4BA78E3D-CA25-4BFF-B8F0-8A3359E4B520} - C:\Archivos de programa\QlikView\QvProtocol\qvp.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Inc. - C:\Archivos de programa\Bonjour\mDNSResponder.exe
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Norman eLogger service 6 (eLoggerSvc6) - Norman ASA - C:\Archivos de programa\Norman\Npm\Bin\Elogsvc.exe
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: eXist Native XML Database (eXist) - Unknown owner - C:\Archivos de programa\eXist\tools\wrapper\bin\wrapper.exe
O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Servicio del iPod (iPod Service) - Apple Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
O23 - Service: Lavasoft Ad-Aware Service - Lavasoft Limited - C:\Archivos de programa\Lavasoft\Ad-Aware\AAWService.exe
O23 - Service: LMIGuardianSvc - LogMeIn, Inc. - C:\Archivos de programa\LogMeIn\x86\LMIGuardianSvc.exe
O23 - Service: LogMeIn Maintenance Service (LMIMaint) - Unknown owner - C:\Archivos de programa\LogMeIn\x86\RaMaint.exe (file missing)
O23 - Service: LogMeIn - LogMeIn, Inc. - C:\Archivos de programa\LogMeIn\x86\LogMeIn.exe
O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Norman NJeeves - Norman ASA - C:\Archivos de programa\Norman\Npm\bin\NJEEVES.EXE
O23 - Service: Norman ZANDA - Unknown owner - C:\Archivos de programa\Norman\Npm\Bin\Zanda.exe (file missing)
O23 - Service: Norman Scanner Engine Service (nsesvc) - Norman ASA - C:\Archivos de programa\Norman\nse\bin\NSESVC.EXE
O23 - Service: Norman Virus Control on-access component (nvcoas) - Norman ASA - C:\Archivos de programa\Norman\Nvc\bin\nvcoas.exe
O23 - Service: Norman Virus Control Scheduler (NVCScheduler) - Norman ASA - C:\Archivos de programa\Norman\Nvc\BIN\NVCSCHED.EXE
O23 - Service: NVIDIA Display Driver Service (nvsvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
O23 - Service: OracleOra92ClientCache - Unknown owner - E:\oracle\ora92\BIN\ONRSD.EXE
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Archivos de programa\VMware\VMware Player\vmware-authd.exe
O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\WINDOWS\system32\vmnetdhcp.exe
O23 - Service: VMware Virtual Mount Manager Extended (vmount2) - VMware, Inc. - C:\Archivos de programa\Archivos comunes\VMware\VMware Virtual Image Editing\vmount2.exe
O23 - Service: VMware NAT Service - Unknown owner - C:\WINDOWS\system32\vmnat.exe (file missing)
O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 12160 bytes

Buenas!

Le pasé a mi ordenador todos los programas que me indicastéis, pero he tenido problemas para obtener el reporte del Combofix.

Para empezar tengo el Antivirus "Norman Virus Control". Para ejecutar el ComboFix intenté desactivarlo, pero no aparecía el icono en el area de notificación (no sé si es cosa del virus que tengo), así que desactivé los servicios del Normal desde el administrador de servicios. Sin embargo el Centro de Seguridad de Windows indica que la protección antivirus del Norman sigue Activa. ¿sabéis cómo puedo desactivarlo?

A continuación os pongo los reportes de TDSSKiller y Malwarebytes por si sirve de algo:

TDSS Killer

08:59:17.0531 1568 TDSS rootkit removing tool 2.6.18.0 Nov 11 2011 15:47:15
08:59:17.0890 1568 ============================================================
08:59:17.0890 1568 Current date / time: 2011/11/15 08:59:17.0890
08:59:17.0890 1568 SystemInfo:
08:59:17.0890 1568
08:59:17.0890 1568 OS Version: 5.1.2600 ServicePack: 3.0
08:59:17.0890 1568 Product type: Workstation
08:59:17.0890 1568 ComputerName: PCJAYLLON2
08:59:17.0890 1568 UserName: jayllon
08:59:17.0890 1568 Windows directory: C:\WINDOWS
08:59:17.0890 1568 System windows directory: C:\WINDOWS
08:59:17.0890 1568 Processor architecture: Intel x86
08:59:17.0890 1568 Number of processors: 2
08:59:17.0890 1568 Page size: 0x1000
08:59:17.0890 1568 Boot type: Normal boot
08:59:17.0890 1568 ============================================================
08:59:19.0078 1568 Initialize success
09:00:27.0968 3256 ============================================================
09:00:27.0968 3256 Scan started
09:00:27.0968 3256 Mode: Manual;
09:00:27.0968 3256 ============================================================
09:00:28.0234 3256 Abiosdsk - ok
09:00:28.0250 3256 abp480n5 - ok
09:00:28.0281 3256 ACPI (cf2a07e1751a2d612d7e13aa431ab057) C:\WINDOWS\system32\DRIVERS\ACPI.sys
09:00:28.0281 3256 ACPI - ok
09:00:28.0312 3256 ACPIEC (1c905333c0b9f3d7c68ddf25e54b00f9) C:\WINDOWS\system32\drivers\ACPIEC.sys
09:00:28.0312 3256 ACPIEC - ok
09:00:28.0328 3256 adpu160m - ok
09:00:28.0359 3256 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
09:00:28.0359 3256 aec - ok
09:00:28.0390 3256 AFD (1e44bc1e83d8fd2305f8d452db109cf9) C:\WINDOWS\System32\drivers\afd.sys
09:00:28.0390 3256 AFD - ok
09:00:28.0406 3256 Aha154x - ok
09:00:28.0406 3256 aic78u2 - ok
09:00:28.0406 3256 aic78xx - ok
09:00:28.0421 3256 AliIde - ok
09:00:28.0421 3256 amsint - ok
09:00:28.0453 3256 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
09:00:28.0453 3256 Arp1394 - ok
09:00:28.0453 3256 asc - ok
09:00:28.0468 3256 asc3350p - ok
09:00:28.0468 3256 asc3550 - ok
09:00:28.0484 3256 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
09:00:28.0500 3256 AsyncMac - ok
09:00:28.0500 3256 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
09:00:28.0500 3256 atapi - ok
09:00:28.0515 3256 Atdisk - ok
09:00:28.0546 3256 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
09:00:28.0546 3256 Atmarpc - ok
09:00:28.0562 3256 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
09:00:28.0562 3256 audstub - ok
09:00:28.0593 3256 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
09:00:28.0593 3256 Beep - ok
09:00:28.0625 3256 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
09:00:28.0625 3256 cbidf2k - ok
09:00:28.0640 3256 cd20xrnt - ok
09:00:28.0656 3256 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
09:00:28.0656 3256 Cdaudio - ok
09:00:28.0687 3256 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
09:00:28.0687 3256 Cdfs - ok
09:00:28.0687 3256 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
09:00:28.0687 3256 Cdrom - ok
09:00:28.0703 3256 Changer - ok
09:00:28.0703 3256 CmdIde - ok
09:00:28.0718 3256 Cpqarray - ok
09:00:28.0718 3256 dac2w2k - ok
09:00:28.0734 3256 dac960nt - ok
09:00:28.0843 3256 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
09:00:28.0843 3256 Disk - ok
09:00:28.0875 3256 dmboot (c252a99c0a78b39faa2e2d1d048b1050) C:\WINDOWS\system32\drivers\dmboot.sys
09:00:28.0890 3256 dmboot - ok
09:00:28.0906 3256 dmio (33b4d4039cd2cb25351a7bf13b2988d9) C:\WINDOWS\system32\drivers\dmio.sys
09:00:28.0921 3256 dmio - ok
09:00:28.0937 3256 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
09:00:28.0937 3256 dmload - ok
09:00:28.0968 3256 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
09:00:28.0968 3256 DMusic - ok
09:00:28.0984 3256 dpti2o - ok
09:00:29.0000 3256 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
09:00:29.0000 3256 drmkaud - ok
09:00:29.0015 3256 dtscsi (12aca694b50ea53563c1e7c99e7bb27d) C:\WINDOWS\System32\Drivers\dtscsi.sys
09:00:29.0015 3256 Suspicious file (NoAccess): C:\WINDOWS\System32\Drivers\dtscsi.sys. md5: 12aca694b50ea53563c1e7c99e7bb27d
09:00:29.0015 3256 dtscsi ( LockedFile.Multi.Generic ) - warning
09:00:29.0015 3256 dtscsi - detected LockedFile.Multi.Generic (1)
09:00:29.0046 3256 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
09:00:29.0046 3256 Fastfat - ok
09:00:29.0062 3256 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
09:00:29.0062 3256 Fdc - ok
09:00:29.0062 3256 Fips (e5e61f2c07344e91dbfb7eafde549ab4) C:\WINDOWS\system32\drivers\Fips.sys
09:00:29.0062 3256 Fips - ok
09:00:29.0078 3256 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
09:00:29.0078 3256 Flpydisk - ok
09:00:29.0109 3256 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
09:00:29.0109 3256 FltMgr - ok
09:00:29.0156 3256 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
09:00:29.0156 3256 Fs_Rec - ok
09:00:29.0156 3256 Ftdisk (cc5f3af5711a1c7c8fa1d43bb16b401a) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
09:00:29.0156 3256 Ftdisk - ok
09:00:29.0187 3256 GEARAspiWDM (8182ff89c65e4d38b2de4bb0fb18564e) C:\WINDOWS\system32\DRIVERS\GEARAspiWDM.sys
09:00:29.0187 3256 GEARAspiWDM - ok
09:00:29.0218 3256 GemCCID (499b5de36d1a4ebf7ee7daaf9cc29f30) C:\WINDOWS\system32\Drivers\GemCCID.sys
09:00:29.0218 3256 GemCCID - ok
09:00:29.0250 3256 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
09:00:29.0250 3256 Gpc - ok
09:00:29.0281 3256 hcmon (af12db6b6d45b6ea9af3e38757095495) C:\WINDOWS\system32\Drivers\hcmon.sys
09:00:29.0281 3256 hcmon - ok
09:00:29.0312 3256 HDAudBus (573c7d0a32852b48f3058cfd8026f511) C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
09:00:29.0328 3256 HDAudBus - ok
09:00:29.0359 3256 hidusb (ccf82c5ec8a7326c3066de870c06daf1) C:\WINDOWS\system32\DRIVERS\hidusb.sys
09:00:29.0359 3256 hidusb - ok
09:00:29.0359 3256 hpn - ok
09:00:29.0453 3256 HTTP (f80a415ef82cd06ffaf0d971528ead38) C:\WINDOWS\system32\Drivers\HTTP.sys
09:00:29.0468 3256 HTTP - ok
09:00:29.0468 3256 i2omgmt - ok
09:00:29.0468 3256 i2omp - ok
09:00:29.0500 3256 i8042prt (4a2490a66e8271901e89dd5fb79748ae) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
09:00:29.0515 3256 i8042prt - ok
09:00:29.0546 3256 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
09:00:29.0546 3256 Imapi - ok
09:00:29.0546 3256 InCDFs - ok
09:00:29.0562 3256 InCDPass - ok
09:00:29.0562 3256 InCDRm - ok
09:00:29.0562 3256 ini910u - ok
09:00:29.0671 3256 IntcAzAudAddService (fdf0e3a5e9f269ab0ed9c8ba1c89e5b2) C:\WINDOWS\system32\drivers\RtkHDAud.sys
09:00:29.0734 3256 IntcAzAudAddService - ok
09:00:29.0750 3256 IntelIde - ok
09:00:29.0765 3256 intelppm (49a060498c09db18c3ea9939789005ab) C:\WINDOWS\system32\DRIVERS\intelppm.sys
09:00:29.0781 3256 intelppm - ok
09:00:29.0812 3256 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
09:00:29.0812 3256 Ip6Fw - ok
09:00:29.0828 3256 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
09:00:29.0828 3256 IpFilterDriver - ok
09:00:29.0843 3256 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
09:00:29.0843 3256 IpInIp - ok
09:00:29.0875 3256 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
09:00:29.0890 3256 IpNat - ok
09:00:29.0890 3256 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
09:00:29.0890 3256 IPSec - ok
09:00:29.0906 3256 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
09:00:29.0906 3256 IRENUM - ok
09:00:29.0937 3256 isapnp (0f3d281b0410fe5d482aada37d20524b) C:\WINDOWS\system32\DRIVERS\isapnp.sys
09:00:29.0968 3256 isapnp - ok
09:00:30.0000 3256 Kbdclass (188ddd286bc0daea6984858c6a4d7bbf) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
09:00:30.0000 3256 Kbdclass - ok
09:00:30.0015 3256 kbdhid (72efebecf76eb1dccc5ba9ea746d90e8) C:\WINDOWS\system32\DRIVERS\kbdhid.sys
09:00:30.0015 3256 kbdhid - ok
09:00:30.0046 3256 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
09:00:30.0046 3256 kmixer - ok
09:00:30.0078 3256 KSecDD (b467646c54cc746128904e1654c750c1) C:\WINDOWS\system32\drivers\KSecDD.sys
09:00:30.0078 3256 KSecDD - ok
09:00:30.0156 3256 Lavasoft Kernexplorer (6c4a3804510ad8e0f0c07b5be3d44ddb) C:\Archivos de programa\Lavasoft\Ad-Aware\KernExplorer.sys
09:00:30.0156 3256 Lavasoft Kernexplorer - ok
09:00:30.0234 3256 Lbd (336abe8721cbc3110f1c6426da633417) C:\WINDOWS\system32\DRIVERS\Lbd.sys
09:00:30.0234 3256 Lbd - ok
09:00:30.0250 3256 lbrtfdc - ok
09:00:30.0312 3256 LMIInfo (4f69faaabb7db0d43e327c0b6aab40fc) C:\Archivos de programa\LogMeIn\x86\RaInfo.sys
09:00:30.0312 3256 LMIInfo - ok
09:00:30.0328 3256 lmimirr (4477689e2d8ae6b78ba34c9af4cc1ed1) C:\WINDOWS\system32\DRIVERS\lmimirr.sys
09:00:30.0328 3256 lmimirr - ok
09:00:30.0343 3256 LMIRfsClientNP - ok
09:00:30.0359 3256 LMIRfsDriver (3faa563ddf853320f90259d455a01d79) C:\WINDOWS\system32\drivers\LMIRfsDriver.sys
09:00:30.0359 3256 LMIRfsDriver - ok
09:00:30.0390 3256 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
09:00:30.0406 3256 mnmdd - ok
09:00:30.0437 3256 Modem (9024556e739b8469d2b8f5f0e4c9bc9f) C:\WINDOWS\system32\drivers\Modem.sys
09:00:30.0437 3256 Modem - ok
09:00:30.0468 3256 Mouclass (6fd36b4994a2363659a65c9f970cfdb7) C:\WINDOWS\system32\DRIVERS\mouclass.sys
09:00:30.0468 3256 Mouclass - ok
09:00:30.0500 3256 mouhid (8ee532e516b2d23d686cfc1cc0a15c25) C:\WINDOWS\system32\DRIVERS\mouhid.sys
09:00:30.0500 3256 mouhid - ok
09:00:30.0515 3256 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
09:00:30.0515 3256 MountMgr - ok
09:00:30.0515 3256 mraid35x - ok
09:00:30.0531 3256 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
09:00:30.0531 3256 MRxDAV - ok
09:00:30.0578 3256 MRxSmb (7d304a5eb4344ebeeab53a2fe3ffb9f0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
09:00:30.0593 3256 MRxSmb - ok
09:00:30.0625 3256 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
09:00:30.0625 3256 Msfs - ok
09:00:30.0671 3256 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
09:00:30.0671 3256 MSKSSRV - ok
09:00:30.0671 3256 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
09:00:30.0671 3256 MSPCLOCK - ok
09:00:30.0671 3256 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
09:00:30.0687 3256 MSPQM - ok
09:00:30.0718 3256 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
09:00:30.0718 3256 mssmbios - ok
09:00:30.0734 3256 Mup (de6a75f5c270e756c5508d94b6cf68f5) C:\WINDOWS\system32\drivers\Mup.sys
09:00:30.0734 3256 Mup - ok
09:00:30.0781 3256 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
09:00:30.0796 3256 NDIS - ok
09:00:30.0890 3256 Ndiskio (0bc1739dc0553548b7920acd8b61389d) C:\Archivos de programa\Norman\Nse\bin\NDISKIO.SYS
09:00:30.0890 3256 Ndiskio - ok
09:00:30.0937 3256 NdisTapi (0109c4f3850dfbab279542515386ae22) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
09:00:30.0937 3256 NdisTapi - ok
09:00:30.0937 3256 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
09:00:30.0937 3256 Ndisuio - ok
09:00:30.0953 3256 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
09:00:30.0953 3256 NdisWan - ok
09:00:30.0984 3256 NDProxy (9282bd12dfb069d3889eb3fcc1000a9b) C:\WINDOWS\system32\drivers\NDProxy.sys
09:00:30.0984 3256 NDProxy - ok
09:00:31.0000 3256 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
09:00:31.0000 3256 NetBIOS - ok
09:00:31.0015 3256 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
09:00:31.0015 3256 NetBT - ok
09:00:31.0093 3256 NGS (9d34a4697d035cf829d869831bab4958) c:\archivos de programa\norman\nvc\bin\ngs.sys
09:00:31.0093 3256 NGS - ok
09:00:31.0109 3256 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
09:00:31.0109 3256 NIC1394 - ok
09:00:31.0125 3256 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
09:00:31.0125 3256 Npfs - ok
09:00:31.0140 3256 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
09:00:31.0156 3256 Ntfs - ok
09:00:31.0187 3256 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
09:00:31.0187 3256 Null - ok
09:00:31.0328 3256 nv (4c3696c1ed1a36629ebb348bf745a328) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
09:00:31.0421 3256 nv - ok
09:00:31.0468 3256 NvcMFlt (ca7d649203aa8472bbdb07ee1f9c7612) C:\WINDOWS\system32\DRIVERS\nvcw32mf.sys
09:00:31.0468 3256 NvcMFlt - ok
09:00:31.0484 3256 NVENETFD (d314fe034d68c09d412727886e24f5fb) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
09:00:31.0484 3256 NVENETFD - ok
09:00:31.0515 3256 NVHDA (0ba72d1d0b83e1e5500c5dc4c7bafc32) C:\WINDOWS\system32\drivers\nvhda32.sys
09:00:31.0515 3256 NVHDA - ok
09:00:31.0531 3256 nvnetbus (f99fbb623ed78367574ee461b5b32c2c) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
09:00:31.0531 3256 nvnetbus - ok
09:00:31.0562 3256 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
09:00:31.0562 3256 NwlnkFlt - ok
09:00:31.0578 3256 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
09:00:31.0578 3256 NwlnkFwd - ok
09:00:31.0609 3256 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
09:00:31.0609 3256 ohci1394 - ok
09:00:31.0640 3256 Parport (e7855cbd8bd1fda085a3f92cff7906e2) C:\WINDOWS\system32\drivers\Parport.sys
09:00:31.0640 3256 Parport - ok
09:00:31.0656 3256 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
09:00:31.0656 3256 PartMgr - ok
09:00:31.0671 3256 ParVdm (fad44d704ecd7d39ad01415b8bb34204) C:\WINDOWS\system32\drivers\ParVdm.sys
09:00:31.0687 3256 ParVdm - ok
09:00:31.0703 3256 PCI (f11bc84ae6c7b003b5e0c8eeb4a1f444) C:\WINDOWS\system32\DRIVERS\pci.sys
09:00:31.0703 3256 PCI - ok
09:00:31.0703 3256 PCIDump - ok
09:00:31.0734 3256 PCIIde (33d63f0a9021acb4d75d83b646b93a30) C:\WINDOWS\system32\DRIVERS\pciide.sys
09:00:31.0734 3256 PCIIde - ok
09:00:31.0750 3256 Pcmcia (f50c27cca56dc97b3a45e7f0059bd2ba) C:\WINDOWS\system32\drivers\Pcmcia.sys
09:00:31.0750 3256 Pcmcia - ok
09:00:31.0765 3256 PDCOMP - ok
09:00:31.0765 3256 PDFRAME - ok
09:00:31.0765 3256 PDRELI - ok
09:00:31.0781 3256 PDRFRAME - ok
09:00:31.0781 3256 perc2 - ok
09:00:31.0796 3256 perc2hib - ok
09:00:31.0828 3256 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
09:00:31.0828 3256 PptpMiniport - ok
09:00:31.0828 3256 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
09:00:31.0828 3256 PSched - ok
09:00:31.0859 3256 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
09:00:31.0859 3256 Ptilink - ok
09:00:31.0890 3256 PxHelp20 (d86b4a68565e444d76457f14172c875a) C:\WINDOWS\system32\Drivers\PxHelp20.sys
09:00:31.0890 3256 PxHelp20 - ok
09:00:31.0890 3256 ql1080 - ok
09:00:31.0906 3256 Ql10wnt - ok
09:00:31.0906 3256 ql12160 - ok
09:00:31.0921 3256 ql1240 - ok
09:00:31.0921 3256 ql1280 - ok
09:00:31.0937 3256 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
09:00:31.0937 3256 RasAcd - ok
09:00:31.0937 3256 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
09:00:31.0937 3256 Rasl2tp - ok
09:00:31.0953 3256 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
09:00:31.0953 3256 RasPppoe - ok
09:00:31.0968 3256 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
09:00:31.0968 3256 Raspti - ok
09:00:31.0968 3256 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
09:00:31.0968 3256 Rdbss - ok
09:00:31.0984 3256 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
09:00:31.0984 3256 RDPCDD - ok
09:00:32.0015 3256 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
09:00:32.0015 3256 rdpdr - ok
09:00:32.0046 3256 RDPWD (fc105dd312ed64eb66bff111e8ec6eac) C:\WINDOWS\system32\drivers\RDPWD.sys
09:00:32.0046 3256 RDPWD - ok
09:00:32.0062 3256 redbook (20950948970a0ea329b4254052bcf093) C:\WINDOWS\system32\DRIVERS\redbook.sys
09:00:32.0062 3256 redbook - ok
09:00:32.0093 3256 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
09:00:32.0093 3256 Secdrv - ok
09:00:32.0109 3256 serenum (0f29512ccd6bead730039fb4bd2c85ce) C:\WINDOWS\system32\DRIVERS\serenum.sys
09:00:32.0109 3256 serenum - ok
09:00:32.0140 3256 Serial (94bb8f352d71959b6015ccab50fa7331) C:\WINDOWS\system32\DRIVERS\serial.sys
09:00:32.0140 3256 Serial - ok
09:00:32.0171 3256 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
09:00:32.0171 3256 Sfloppy - ok
09:00:32.0187 3256 Simbad - ok
09:00:32.0203 3256 Sparrow - ok
09:00:32.0234 3256 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
09:00:32.0234 3256 splitter - ok
09:00:32.0265 3256 sptd (70049cc584d37934bf1564b354a02272) C:\WINDOWS\system32\Drivers\sptd.sys
09:00:32.0265 3256 Suspicious file (NoAccess): C:\WINDOWS\system32\Drivers\sptd.sys. md5: 70049cc584d37934bf1564b354a02272
09:00:32.0265 3256 sptd ( LockedFile.Multi.Generic ) - warning
09:00:32.0265 3256 sptd - detected LockedFile.Multi.Generic (1)
09:00:32.0296 3256 sr (ccb3065c3ee63a4515fe84af9e78d1dd) C:\WINDOWS\system32\DRIVERS\sr.sys
09:00:32.0312 3256 sr - ok
09:00:32.0328 3256 Srv (47ddfc2f003f7f9f0592c6874962a2e7) C:\WINDOWS\system32\DRIVERS\srv.sys
09:00:32.0328 3256 Srv - ok
09:00:32.0359 3256 StillCam (4e634ba97c122f84a6c2595af4d2dc62) C:\WINDOWS\system32\DRIVERS\serscan.sys
09:00:32.0359 3256 StillCam - ok
09:00:32.0390 3256 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
09:00:32.0390 3256 swenum - ok
09:00:32.0421 3256 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
09:00:32.0421 3256 swmidi - ok
09:00:32.0421 3256 symc810 - ok
09:00:32.0437 3256 symc8xx - ok
09:00:32.0437 3256 sym_hi - ok
09:00:32.0437 3256 sym_u3 - ok
09:00:32.0468 3256 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
09:00:32.0468 3256 sysaudio - ok
09:00:32.0484 3256 Tcpip (9aefa14bd6b182d61e3119fa5f436d3d) C:\WINDOWS\system32\DRIVERS\tcpip.sys
09:00:32.0484 3256 Tcpip - ok
09:00:32.0515 3256 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
09:00:32.0515 3256 TDPIPE - ok
09:00:32.0546 3256 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
09:00:32.0546 3256 TDTCP - ok
09:00:32.0578 3256 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
09:00:32.0578 3256 TermDD - ok
09:00:32.0578 3256 TosIde - ok
09:00:32.0609 3256 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
09:00:32.0609 3256 Udfs - ok
09:00:32.0625 3256 ultra - ok
09:00:32.0718 3256 UnlockerDriver5 (b2af2ba8a3205a8458b61f638fb431dd) C:\Archivos de programa\Unlocker\UnlockerDriver5.sys
09:00:32.0718 3256 UnlockerDriver5 - ok
09:00:32.0796 3256 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
09:00:32.0812 3256 Update - ok
09:00:32.0843 3256 USBAAPL (4b8a9c16b6d9258ed99c512aecb8c555) C:\WINDOWS\system32\Drivers\usbaapl.sys
09:00:32.0843 3256 USBAAPL - ok
09:00:32.0875 3256 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
09:00:32.0890 3256 usbccgp - ok
09:00:32.0921 3256 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
09:00:32.0921 3256 usbehci - ok
09:00:32.0937 3256 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
09:00:32.0953 3256 usbhub - ok
09:00:32.0968 3256 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
09:00:32.0968 3256 usbohci - ok
09:00:33.0000 3256 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
09:00:33.0000 3256 usbscan - ok
09:00:33.0031 3256 usbstor (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
09:00:33.0031 3256 usbstor - ok
09:00:33.0062 3256 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
09:00:33.0062 3256 VgaSave - ok
09:00:33.0078 3256 ViaIde - ok
09:00:33.0125 3256 vmkbd (0ce15330b987d6caa12559a94e93d1ce) C:\WINDOWS\system32\drivers\VMkbd.sys
09:00:33.0125 3256 vmkbd - ok
09:00:33.0171 3256 VMnetAdapter (f68c99f41c3cf6e1c3c542fadd2e20cf) C:\WINDOWS\system32\DRIVERS\vmnetadapter.sys
09:00:33.0171 3256 VMnetAdapter - ok
09:00:33.0203 3256 VMnetBridge (121fbda3a14f0744a8c213d3e9f14d63) C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys
09:00:33.0203 3256 VMnetBridge - ok
09:00:33.0234 3256 VMnetuserif (3c3097d2431c27075e034d0c0f2a2881) C:\WINDOWS\system32\drivers\vmnetuserif.sys
09:00:33.0234 3256 VMnetuserif - ok
09:00:33.0281 3256 vmusb (cd379a617fce2910a71a2dcca4f6b126) C:\WINDOWS\system32\Drivers\vmusb.sys
09:00:33.0296 3256 vmusb - ok
09:00:33.0359 3256 vmx86 (8dcc99832635404111111ef019e80952) C:\WINDOWS\system32\Drivers\vmx86.sys
09:00:33.0375 3256 vmx86 - ok
09:00:33.0421 3256 VolSnap (c41ffdc191e6c832e2e53c967eae0a16) C:\WINDOWS\system32\drivers\VolSnap.sys
09:00:33.0421 3256 VolSnap - ok
09:00:33.0468 3256 vstor2 (9e4ff401725fe6a26d8fe492bf0ea2b1) C:\Archivos de programa\Archivos comunes\VMware\VMware Virtual Image Editing\vstor2.sys
09:00:33.0468 3256 vstor2 - ok
09:00:33.0515 3256 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
09:00:33.0515 3256 Wanarp - ok
09:00:33.0531 3256 WDICA - ok
09:00:33.0578 3256 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
09:00:33.0578 3256 wdmaud - ok
09:00:33.0625 3256 WmiAcpi (c42584fd66ce9e17403aebca199f7bdb) C:\WINDOWS\system32\DRIVERS\wmiacpi.sys
09:00:33.0625 3256 WmiAcpi - ok
09:00:33.0640 3256 MBR (0x1B8) (792f61657fece3d17a9122b4ee282847) \Device\Harddisk0\DR0
09:00:33.0734 3256 \Device\Harddisk0\DR0 - ok
09:00:33.0734 3256 Boot (0x1200) (ef6a93db9424f32ba658c34bdd50d9ba) \Device\Harddisk0\DR0\Partition0
09:00:33.0734 3256 \Device\Harddisk0\DR0\Partition0 - ok
09:00:33.0750 3256 Boot (0x1200) (e025d03bec96de0ada68035448e6e72e) \Device\Harddisk0\DR0\Partition1
09:00:33.0812 3256 \Device\Harddisk0\DR0\Partition1 - ok
09:00:33.0812 3256 ============================================================
09:00:33.0812 3256 Scan finished
09:00:33.0812 3256 ============================================================
09:00:33.0812 2532 Detected object count: 2
09:00:33.0812 2532 Actual detected object count: 2
09:03:57.0187 2532 dtscsi ( LockedFile.Multi.Generic ) - skipped by user
09:03:57.0187 2532 dtscsi ( LockedFile.Multi.Generic ) - User select action: Skip
09:03:57.0187 2532 sptd ( LockedFile.Multi.Generic ) - skipped by user
09:03:57.0187 2532 sptd ( LockedFile.Multi.Generic ) - User select action: Skip
09:05:10.0078 3400 Deinitialize success


Malwarebytes

Malwarebytes' Anti-Malware 1.51.2.1300
www.malwarebytes.org

Versión de la Base de Datos: 8165

Windows 5.1.2600 Service Pack 3
Internet Explorer 8.0.6001.18702

17/11/2011 9:20:33
mbam-log-2011-11-17 (09-20-33).txt

Tipos de Análisis: Análisis Completo (C:\|E:\|)
Objetos examinados: 423145
Tiempo transcurrido: 5 hora(s), 11 minuto(s), 33 segundo(s)

Procesos en Memoria Infectados: 0
Módulos de Memoria Infectados: 0
Claves del Registro Infectadas: 0
Valores del Registro Infectados: 0
Elementos de Datos del Registro Infectados: 1
Carpetas Infectadas: 0
Archivos Infectados: 2

Procesos en Memoria Infectados:
(No se han detectado elementos maliciosos)

Módulos de Memoria Infectados:
(No se han detectado elementos maliciosos)

Claves del Registro Infectadas:
(No se han detectado elementos maliciosos)

Valores del Registro Infectados:
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Infectados:
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\FirewallDisableNotify (PUM.Disabled.SecurityCenter) -> Bad: (1) Good: (0) -> Quarantined and deleted successfully.

Carpetas Infectadas:
(No se han detectado elementos maliciosos)

Archivos Infectados:
c:\system volume information\_restore{b1983e1f-01e1-43d9-a15f-197d527097aa}\RP556\A0070583.ini (Trojan.Agent) -> Quarantined and deleted successfully.
c:\WINDOWS\assembly\GAC_MSIL\Desktop.ini (Trojan.Agent) -> Delete on reboot.

Buenos días,

No he tenido el tiempo necesario para solucionar el problema, y este se ha agravado, ya que ahora además de redirigirme a páginas de publicidad, se me ha instalado otro malware: XP Home Securty 2012.

He arrancado el ordenador en modo seguro y creo que he conseguido parar el malware con el programa Rkill.exe ¿qué debería hacer a continuación para eliminarlo del todo?

Muchas gracias de antemano.

Mientras esperaba vuestra respuesta, probé a pasarle el Malwarebytes y parece haberse solucionado el problema:

- Ya no me redirecciona a páginas de publicidad.
- Ya no me aparecen ventanas del programa XP Home Security 2012.

Por lo que parece que todo vuelve a la normalidad... aún así, ¿me recomendáis que haga alguna cosa más?

Muchas gracias.