• Registrarse
  • Iniciar sesión


  • Resultados 1 al 6 de 6

    Problemas con abnow, mediashifting, AVG 2012 (Solucionado)

    Resumen del tema: Problemas con abnow, mediashifting, AVG 2012 (Solucionado) - Hola, estoy intentando eliminar el dichoso problema de abnow y mediashifting de un PC, y la verdad, me es imposible. Primero, tuve que desinstalar con el remover el AVG 2012 porque el PC llegó a ...

      
    1. #1
      Usuario Avatar de ilarranaga
      Registrado
      feb 2012
      Ubicación
      Euskal Herria
      Mensajes
      4

      Problemas con abnow, mediashifting, AVG 2012 (Solucionado)

      Hola,

      estoy intentando eliminar el dichoso problema de abnow y mediashifting de un PC, y la verdad, me es imposible.
      Primero, tuve que desinstalar con el remover el AVG 2012 porque el PC llegó a un punto de no arrancar si se actualizaba el AVG 2012. Conseguí eliminarlo y ahora tengo instalado el Malwarebytes.
      Tampoco puedo activar el Firewall de Windows, está en un estado que no sé cómo está pero no me deja activarlo, me salta un error.
      He pasado el Malwarebytes y TDSSKiller (no me detecta nada) y aquí dejo los logs que he guardado. Consiguen eliminar ficheros de Windows\Temp, de Windows\assembly\temp, pero hay un ¿fichero? en C:\Users\Manolo\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Se eliminarán al reiniciar, que no consigo eliminar de ninguna de las formas.
      En todos los foros he visto que se ha ejecutado el ComboFix, así que voy a por ello.
      A continuación dejo los logs, a ver si me podéis echar una mano. Gracias!!

      TDSSKILLER:
      19:00:18.0921 4028 TDSS rootkit removing tool 2.7.12.0 Feb 11 2012 16:58:52
      19:00:19.0076 4028 ============================================================
      19:00:19.0076 4028 Current date / time: 2012/02/14 19:00:19.0076
      19:00:19.0076 4028 SystemInfo:
      19:00:19.0076 4028
      19:00:19.0076 4028 OS Version: 6.1.7601 ServicePack: 1.0
      19:00:19.0076 4028 Product type: Workstation
      19:00:19.0077 4028 ComputerName: SOBREMESA
      19:00:19.0077 4028 UserName: Manolo
      19:00:19.0077 4028 Windows directory: C:\Windows
      19:00:19.0077 4028 System windows directory: C:\Windows
      19:00:19.0077 4028 Running under WOW64
      19:00:19.0077 4028 Processor architecture: Intel x64
      19:00:19.0077 4028 Number of processors: 4
      19:00:19.0077 4028 Page size: 0x1000
      19:00:19.0077 4028 Boot type: Normal boot
      19:00:19.0077 4028 ============================================================
      19:00:20.0349 4028 Drive \Device\Harddisk0\DR0 - Size: 0x950B056000 (596.17 Gb), SectorSize: 0x200, Cylinders: 0x13001, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
      19:00:20.0365 4028 \Device\Harddisk0\DR0:
      19:00:20.0365 4028 MBR used
      19:00:20.0365 4028 \Device\Harddisk0\DR0\Partition0: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
      19:00:20.0365 4028 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x48EDE000
      19:00:20.0365 4028 \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x48F10800, BlocksNum 0x1947000
      19:00:20.0495 4028 Initialize success
      19:00:20.0495 4028 ============================================================
      19:00:30.0613 2152 ============================================================
      19:00:30.0614 2152 Scan started
      19:00:30.0614 2152 Mode: Manual; SigCheck; TDLFS;
      19:00:30.0614 2152 ============================================================
      19:00:30.0917 2152 1394ohci (a87d604aea360176311474c87a63bb88) C:\Windows\system32\drivers\1394ohci.sys
      19:00:31.0021 2152 1394ohci - ok
      19:00:31.0109 2152 ACPI (d81d9e70b8a6dd14d42d7b4efa65d5f2) C:\Windows\system32\drivers\ACPI.sys
      19:00:31.0135 2152 ACPI - ok
      19:00:31.0199 2152 AcpiPmi (99f8e788246d495ce3794d7e7821d2ca) C:\Windows\system32\drivers\acpipmi.sys
      19:00:31.0269 2152 AcpiPmi - ok
      19:00:31.0349 2152 adp94xx (2f6b34b83843f0c5118b63ac634f5bf4) C:\Windows\system32\DRIVERS\adp94xx.sys
      19:00:31.0389 2152 adp94xx - ok
      19:00:31.0459 2152 adpahci (597f78224ee9224ea1a13d6350ced962) C:\Windows\system32\DRIVERS\adpahci.sys
      19:00:31.0489 2152 adpahci - ok
      19:00:31.0509 2152 adpu320 (e109549c90f62fb570b9540c4b148e54) C:\Windows\system32\DRIVERS\adpu320.sys
      19:00:31.0529 2152 adpu320 - ok
      19:00:31.0626 2152 AFD (d5b031c308a409a0a576bff4cf083d30) C:\Windows\system32\drivers\afd.sys
      19:00:31.0699 2152 AFD - ok
      19:00:31.0764 2152 agp440 (608c14dba7299d8cb6ed035a68a15799) C:\Windows\system32\drivers\agp440.sys
      19:00:31.0780 2152 agp440 - ok
      19:00:31.0841 2152 aliide (5812713a477a3ad7363c7438ca2ee038) C:\Windows\system32\drivers\aliide.sys
      19:00:31.0857 2152 aliide - ok
      19:00:31.0914 2152 amdide (1ff8b4431c353ce385c875f194924c0c) C:\Windows\system32\drivers\amdide.sys
      19:00:31.0924 2152 amdide - ok
      19:00:31.0953 2152 AmdK8 (7024f087cff1833a806193ef9d22cda9) C:\Windows\system32\DRIVERS\amdk8.sys
      19:00:32.0004 2152 AmdK8 - ok
      19:00:32.0025 2152 AmdPPM (1e56388b3fe0d031c44144eb8c4d6217) C:\Windows\system32\DRIVERS\amdppm.sys
      19:00:32.0053 2152 AmdPPM - ok
      19:00:32.0120 2152 amdsata (d4121ae6d0c0e7e13aa221aa57ef2d49) C:\Windows\system32\drivers\amdsata.sys
      19:00:32.0139 2152 amdsata - ok
      19:00:32.0208 2152 amdsbs (f67f933e79241ed32ff46a4f29b5120b) C:\Windows\system32\DRIVERS\amdsbs.sys
      19:00:32.0228 2152 amdsbs - ok
      19:00:32.0242 2152 amdxata (540daf1cea6094886d72126fd7c33048) C:\Windows\system32\drivers\amdxata.sys
      19:00:32.0256 2152 amdxata - ok
      19:00:32.0369 2152 AppID (89a69c3f2f319b43379399547526d952) C:\Windows\system32\drivers\appid.sys
      19:00:32.0546 2152 AppID - ok
      19:00:32.0703 2152 arc (c484f8ceb1717c540242531db7845c4e) C:\Windows\system32\DRIVERS\arc.sys
      19:00:32.0719 2152 arc - ok
      19:00:32.0752 2152 arcsas (019af6924aefe7839f61c830227fe79c) C:\Windows\system32\DRIVERS\arcsas.sys
      19:00:32.0768 2152 arcsas - ok
      19:00:32.0852 2152 AsyncMac (769765ce2cc62867468cea93969b2242) C:\Windows\system32\DRIVERS\asyncmac.sys
      19:00:33.0010 2152 AsyncMac - ok
      19:00:33.0087 2152 atapi (02062c0b390b7729edc9e69c680a6f3c) C:\Windows\system32\drivers\atapi.sys
      19:00:33.0103 2152 atapi - ok
      19:00:33.0186 2152 AtiHdmiService (fb7602c5c508be281368aae0b61b51c6) C:\Windows\system32\drivers\AtiHdmi.sys
      19:00:33.0222 2152 AtiHdmiService - ok
      19:00:33.0370 2152 atikmdag (c9f90fee4fdc829382b9130a92fb744c) C:\Windows\system32\DRIVERS\atikmdag.sys
      19:00:33.0675 2152 atikmdag - ok
      19:00:33.0758 2152 b06bdrv (3e5b191307609f7514148c6832bb0842) C:\Windows\system32\DRIVERS\bxvbda.sys
      19:00:33.0811 2152 b06bdrv - ok
      19:00:33.0894 2152 b57nd60a (b5ace6968304a3900eeb1ebfd9622df2) C:\Windows\system32\DRIVERS\b57nd60a.sys
      19:00:33.0960 2152 b57nd60a - ok
      19:00:34.0044 2152 Beep (16a47ce2decc9b099349a5f840654746) C:\Windows\system32\drivers\Beep.sys
      19:00:34.0102 2152 Beep - ok
      19:00:34.0176 2152 blbdrive (61583ee3c3a17003c4acd0475646b4d3) C:\Windows\system32\DRIVERS\blbdrive.sys
      19:00:34.0209 2152 blbdrive - ok
      19:00:34.0280 2152 bowser (6c02a83164f5cc0a262f4199f0871cf5) C:\Windows\system32\DRIVERS\bowser.sys
      19:00:34.0329 2152 bowser - ok
      19:00:34.0354 2152 BrFiltLo (f09eee9edc320b5e1501f749fde686c8) C:\Windows\system32\DRIVERS\BrFiltLo.sys
      19:00:34.0417 2152 BrFiltLo - ok
      19:00:34.0435 2152 BrFiltUp (b114d3098e9bdb8bea8b053685831be6) C:\Windows\system32\DRIVERS\BrFiltUp.sys
      19:00:34.0458 2152 BrFiltUp - ok
      19:00:34.0554 2152 BridgeMP (5c2f352a4e961d72518261257aae204b) C:\Windows\system32\DRIVERS\bridge.sys
      19:00:34.0619 2152 BridgeMP - ok
      19:00:34.0676 2152 Brserid (43bea8d483bf1870f018e2d02e06a5bd) C:\Windows\System32\Drivers\Brserid.sys
      19:00:34.0750 2152 Brserid - ok
      19:00:34.0772 2152 BrSerWdm (a6eca2151b08a09caceca35c07f05b42) C:\Windows\System32\Drivers\BrSerWdm.sys
      19:00:34.0802 2152 BrSerWdm - ok
      19:00:34.0860 2152 BrUsbMdm (b79968002c277e869cf38bd22cd61524) C:\Windows\System32\Drivers\BrUsbMdm.sys
      19:00:34.0897 2152 BrUsbMdm - ok
      19:00:34.0920 2152 BrUsbSer (a87528880231c54e75ea7a44943b38bf) C:\Windows\System32\Drivers\BrUsbSer.sys
      19:00:34.0962 2152 BrUsbSer - ok
      19:00:35.0014 2152 BTHMODEM (9da669f11d1f894ab4eb69bf546a42e8) C:\Windows\system32\DRIVERS\bthmodem.sys
      19:00:35.0052 2152 BTHMODEM - ok
      19:00:35.0091 2152 catchme - ok
      19:00:35.0141 2152 cdfs (b8bd2bb284668c84865658c77574381a) C:\Windows\system32\DRIVERS\cdfs.sys
      19:00:35.0201 2152 cdfs - ok
      19:00:35.0261 2152 cdrom (f036ce71586e93d94dab220d7bdf4416) C:\Windows\system32\drivers\cdrom.sys
      19:00:35.0311 2152 cdrom - ok
      19:00:35.0382 2152 circlass (d7cd5c4e1b71fa62050515314cfb52cf) C:\Windows\system32\DRIVERS\circlass.sys
      19:00:35.0414 2152 circlass - ok
      19:00:35.0463 2152 CLFS (fe1ec06f2253f691fe36217c592a0206) C:\Windows\system32\CLFS.sys
      19:00:35.0477 2152 CLFS - ok
      19:00:35.0556 2152 CmBatt (0840155d0bddf1190f84a663c284bd33) C:\Windows\system32\DRIVERS\CmBatt.sys
      19:00:35.0583 2152 CmBatt - ok
      19:00:35.0601 2152 cmdide (e19d3f095812725d88f9001985b94edd) C:\Windows\system32\drivers\cmdide.sys
      19:00:35.0612 2152 cmdide - ok
      19:00:35.0654 2152 CNG (c4943b6c962e4b82197542447ad599f4) C:\Windows\system32\Drivers\cng.sys
      19:00:35.0675 2152 CNG - ok
      19:00:35.0699 2152 Compbatt (102de219c3f61415f964c88e9085ad14) C:\Windows\system32\DRIVERS\compbatt.sys
      19:00:35.0707 2152 Compbatt - ok
      19:00:35.0763 2152 CompositeBus (03edb043586cceba243d689bdda370a8) C:\Windows\system32\drivers\CompositeBus.sys
      19:00:35.0804 2152 CompositeBus - ok
      19:00:35.0865 2152 crcdisk (1c827878a998c18847245fe1f34ee597) C:\Windows\system32\DRIVERS\crcdisk.sys
      19:00:35.0881 2152 crcdisk - ok
      19:00:35.0962 2152 DfsC (9bb2ef44eaa163b29c4a4587887a0fe4) C:\Windows\system32\Drivers\dfsc.sys
      19:00:36.0021 2152 DfsC - ok
      19:00:36.0080 2152 discache (13096b05847ec78f0977f2c0f79e9ab3) C:\Windows\system32\drivers\discache.sys
      19:00:36.0142 2152 discache - ok
      19:00:36.0209 2152 Disk (9819eee8b5ea3784ec4af3b137a5244c) C:\Windows\system32\DRIVERS\disk.sys
      19:00:36.0225 2152 Disk - ok
      19:00:36.0293 2152 Dot4 (b42ed0320c6e41102fde0005154849bb) C:\Windows\system32\DRIVERS\Dot4.sys
      19:00:36.0324 2152 Dot4 - ok
      19:00:36.0410 2152 Dot4Print (e9f5969233c5d89f3c35e3a66a52a361) C:\Windows\system32\DRIVERS\Dot4Prt.sys
      19:00:36.0470 2152 Dot4Print - ok
      19:00:36.0510 2152 dot4usb (fd05a02b0370bc3000f402e543ca5814) C:\Windows\system32\DRIVERS\dot4usb.sys
      19:00:36.0540 2152 dot4usb - ok
      19:00:36.0610 2152 drmkaud (9b19f34400d24df84c858a421c205754) C:\Windows\system32\drivers\drmkaud.sys
      19:00:36.0650 2152 drmkaud - ok
      19:00:36.0710 2152 DXGKrnl (f5bee30450e18e6b83a5012c100616fd) C:\Windows\System32\drivers\dxgkrnl.sys
      19:00:36.0740 2152 DXGKrnl - ok
      19:00:36.0865 2152 ebdrv (dc5d737f51be844d8c82c695eb17372f) C:\Windows\system32\DRIVERS\evbda.sys
      19:00:36.0989 2152 ebdrv - ok
      19:00:37.0083 2152 elxstor (0e5da5369a0fcaea12456dd852545184) C:\Windows\system32\DRIVERS\elxstor.sys
      19:00:37.0121 2152 elxstor - ok
      19:00:37.0153 2152 ErrDev (34a3c54752046e79a126e15c51db409b) C:\Windows\system32\drivers\errdev.sys
      19:00:37.0182 2152 ErrDev - ok
      19:00:37.0221 2152 exfat (a510c654ec00c1e9bdd91eeb3a59823b) C:\Windows\system32\drivers\exfat.sys
      19:00:37.0301 2152 exfat - ok
      19:00:37.0558 2152 fastfat (0adc83218b66a6db380c330836f3e36d) C:\Windows\system32\drivers\fastfat.sys
      19:00:37.0609 2152 fastfat - ok
      19:00:37.0698 2152 fdc (d765d19cd8ef61f650c384f62fac00ab) C:\Windows\system32\DRIVERS\fdc.sys
      19:00:37.0733 2152 fdc - ok
      19:00:37.0809 2152 FileInfo (655661be46b5f5f3fd454e2c3095b930) C:\Windows\system32\drivers\fileinfo.sys
      19:00:37.0823 2152 FileInfo - ok
      19:00:37.0843 2152 Filetrace (5f671ab5bc87eea04ec38a6cd5962a47) C:\Windows\system32\drivers\filetrace.sys
      19:00:37.0893 2152 Filetrace - ok
      19:00:37.0933 2152 flpydisk (c172a0f53008eaeb8ea33fe10e177af5) C:\Windows\system32\DRIVERS\flpydisk.sys
      19:00:37.0943 2152 flpydisk - ok
      19:00:38.0131 2152 FltMgr (da6b67270fd9db3697b20fce94950741) C:\Windows\system32\drivers\fltmgr.sys
      19:00:38.0155 2152 FltMgr - ok
      19:00:38.0168 2152 FsDepends (d43703496149971890703b4b1b723eac) C:\Windows\system32\drivers\FsDepends.sys
      19:00:38.0177 2152 FsDepends - ok
      19:00:38.0187 2152 Fs_Rec (e95ef8547de20cf0603557c0cf7a9462) C:\Windows\system32\drivers\Fs_Rec.sys
      19:00:38.0195 2152 Fs_Rec - ok
      19:00:38.0275 2152 fvevol (1f7b25b858fa27015169fe95e54108ed) C:\Windows\system32\DRIVERS\fvevol.sys
      19:00:38.0296 2152 fvevol - ok
      19:00:38.0424 2152 gagp30kx (8c778d335c9d272cfd3298ab02abe3b6) C:\Windows\system32\DRIVERS\gagp30kx.sys
      19:00:38.0433 2152 gagp30kx - ok
      19:00:38.0747 2152 GEARAspiWDM (e403aacf8c7bb11375122d2464560311) C:\Windows\system32\DRIVERS\GEARAspiWDM.sys
      19:00:38.0757 2152 GEARAspiWDM - ok
      19:00:38.0893 2152 hcw85cir (f2523ef6460fc42405b12248338ab2f0) C:\Windows\system32\drivers\hcw85cir.sys
      19:00:38.0955 2152 hcw85cir - ok
      19:00:39.0055 2152 HDAudBus (97bfed39b6b79eb12cddbfeed51f56bb) C:\Windows\system32\drivers\HDAudBus.sys
      19:00:39.0098 2152 HDAudBus - ok
      19:00:39.0203 2152 HECIx64 (b6ac71aaa2b10848f57fc49d55a651af) C:\Windows\system32\DRIVERS\HECIx64.sys
      19:00:39.0217 2152 HECIx64 - ok
      19:00:39.0288 2152 HidBatt (78e86380454a7b10a5eb255dc44a355f) C:\Windows\system32\DRIVERS\HidBatt.sys
      19:00:39.0334 2152 HidBatt - ok
      19:00:39.0364 2152 HidBth (7fd2a313f7afe5c4dab14798c48dd104) C:\Windows\system32\DRIVERS\hidbth.sys
      19:00:39.0396 2152 HidBth - ok
      19:00:39.0471 2152 HidIr (0a77d29f311b88cfae3b13f9c1a73825) C:\Windows\system32\DRIVERS\hidir.sys
      19:00:39.0490 2152 HidIr - ok
      19:00:39.0575 2152 HidUsb (9592090a7e2b61cd582b612b6df70536) C:\Windows\system32\drivers\hidusb.sys
      19:00:39.0610 2152 HidUsb - ok
      19:00:39.0718 2152 HpSAMD (39d2abcd392f3d8a6dce7b60ae7b8efc) C:\Windows\system32\drivers\HpSAMD.sys
      19:00:39.0733 2152 HpSAMD - ok
      19:00:39.0772 2152 HTTP (0ea7de1acb728dd5a369fd742d6eee28) C:\Windows\system32\drivers\HTTP.sys
      19:00:39.0858 2152 HTTP - ok
      19:00:39.0889 2152 hwpolicy (a5462bd6884960c9dc85ed49d34ff392) C:\Windows\system32\drivers\hwpolicy.sys
      19:00:39.0897 2152 hwpolicy - ok
      19:00:39.0956 2152 i8042prt (fa55c73d4affa7ee23ac4be53b4592d3) C:\Windows\system32\drivers\i8042prt.sys
      19:00:39.0968 2152 i8042prt - ok
      19:00:40.0001 2152 iaStor (631fa8935163b01fc0c02966cb3adb92) C:\Windows\system32\DRIVERS\iaStor.sys
      19:00:40.0016 2152 iaStor - ok
      19:00:40.0041 2152 iaStorV (aaaf44db3bd0b9d1fb6969b23ecc8366) C:\Windows\system32\drivers\iaStorV.sys
      19:00:40.0057 2152 iaStorV - ok
      19:00:40.0081 2152 iirsp (5c18831c61933628f5bb0ea2675b9d21) C:\Windows\system32\DRIVERS\iirsp.sys
      19:00:40.0089 2152 iirsp - ok
      19:00:40.0177 2152 IntcAzAudAddService (ef75c94792187a143871fbb87611b0b7) C:\Windows\system32\drivers\RTKVHD64.sys
      19:00:40.0221 2152 IntcAzAudAddService - ok
      19:00:40.0281 2152 intelide (f00f20e70c6ec3aa366910083a0518aa) C:\Windows\system32\drivers\intelide.sys
      19:00:40.0289 2152 intelide - ok
      19:00:40.0409 2152 intelppm (ada036632c664caa754079041cf1f8c1) C:\Windows\system32\DRIVERS\intelppm.sys
      19:00:40.0477 2152 intelppm - ok
      19:00:40.0563 2152 IpFilterDriver (c9f0e1bd74365a8771590e9008d22ab6) C:\Windows\system32\DRIVERS\ipfltdrv.sys
      19:00:40.0636 2152 IpFilterDriver - ok
      19:00:40.0660 2152 IPMIDRV (0fc1aea580957aa8817b8f305d18ca3a) C:\Windows\system32\drivers\IPMIDrv.sys
      19:00:40.0680 2152 IPMIDRV - ok
      19:00:40.0741 2152 IPNAT (af9b39a7e7b6caa203b3862582e9f2d0) C:\Windows\system32\drivers\ipnat.sys
      19:00:40.0815 2152 IPNAT - ok
      19:00:40.0900 2152 IRENUM (3abf5e7213eb28966d55d58b515d5ce9) C:\Windows\system32\drivers\irenum.sys
      19:00:40.0981 2152 IRENUM - ok
      19:00:41.0032 2152 isapnp (2f7b28dc3e1183e5eb418df55c204f38) C:\Windows\system32\drivers\isapnp.sys
      19:00:41.0043 2152 isapnp - ok
      19:00:41.0068 2152 iScsiPrt (d931d7309deb2317035b07c9f9e6b0bd) C:\Windows\system32\drivers\msiscsi.sys
      19:00:41.0086 2152 iScsiPrt - ok
      19:00:41.0112 2152 kbdclass (bc02336f1cba7dcc7d1213bb588a68a5) C:\Windows\system32\drivers\kbdclass.sys
      19:00:41.0122 2152 kbdclass - ok
      19:00:41.0187 2152 kbdhid (0705eff5b42a9db58548eec3b26bb484) C:\Windows\system32\drivers\kbdhid.sys
      19:00:41.0237 2152 kbdhid - ok
      19:00:41.0277 2152 KSecDD (da1e991a61cfdd755a589e206b97644b) C:\Windows\system32\Drivers\ksecdd.sys
      19:00:41.0287 2152 KSecDD - ok
      19:00:41.0307 2152 KSecPkg (7e33198d956943a4f11a5474c1e9106f) C:\Windows\system32\Drivers\ksecpkg.sys
      19:00:41.0317 2152 KSecPkg - ok
      19:00:41.0327 2152 ksthunk (6869281e78cb31a43e969f06b57347c4) C:\Windows\system32\drivers\ksthunk.sys
      19:00:41.0377 2152 ksthunk - ok
      19:00:41.0464 2152 lltdio (1538831cf8ad2979a04c423779465827) C:\Windows\system32\DRIVERS\lltdio.sys
      19:00:41.0502 2152 lltdio - ok
      19:00:41.0577 2152 LSI_FC (1a93e54eb0ece102495a51266dcdb6a6) C:\Windows\system32\DRIVERS\lsi_fc.sys
      19:00:41.0588 2152 LSI_FC - ok
      19:00:41.0609 2152 LSI_SAS (1047184a9fdc8bdbff857175875ee810) C:\Windows\system32\DRIVERS\lsi_sas.sys
      19:00:41.0620 2152 LSI_SAS - ok
      19:00:41.0642 2152 LSI_SAS2 (30f5c0de1ee8b5bc9306c1f0e4a75f93) C:\Windows\system32\DRIVERS\lsi_sas2.sys
      19:00:41.0652 2152 LSI_SAS2 - ok
      19:00:41.0706 2152 LSI_SCSI (0504eacaff0d3c8aed161c4b0d369d4a) C:\Windows\system32\DRIVERS\lsi_scsi.sys
      19:00:41.0725 2152 LSI_SCSI - ok
      19:00:41.0777 2152 luafv (43d0f98e1d56ccddb0d5254cff7b356e) C:\Windows\system32\drivers\luafv.sys
      19:00:41.0844 2152 luafv - ok
      19:00:41.0907 2152 MBAMProtector (79da94b35371b9e7104460c7693dcb2c) C:\Windows\system32\drivers\mbam.sys
      19:00:41.0918 2152 MBAMProtector - ok
      19:00:41.0978 2152 megasas (a55805f747c6edb6a9080d7c633bd0f4) C:\Windows\system32\DRIVERS\megasas.sys
      19:00:41.0992 2152 megasas - ok
      19:00:42.0016 2152 MegaSR (baf74ce0072480c3b6b7c13b2a94d6b3) C:\Windows\system32\DRIVERS\MegaSR.sys
      19:00:42.0038 2152 MegaSR - ok
      19:00:42.0098 2152 Modem (800ba92f7010378b09f9ed9270f07137) C:\Windows\system32\drivers\modem.sys
      19:00:42.0171 2152 Modem - ok
      19:00:42.0227 2152 monitor (b03d591dc7da45ece20b3b467e6aadaa) C:\Windows\system32\DRIVERS\monitor.sys
      19:00:42.0261 2152 monitor - ok
      19:00:42.0312 2152 mouclass (7d27ea49f3c1f687d357e77a470aea99) C:\Windows\system32\drivers\mouclass.sys
      19:00:42.0323 2152 mouclass - ok
      19:00:42.0380 2152 mouhid (d3bf052c40b0c4166d9fd86a4288c1e6) C:\Windows\system32\DRIVERS\mouhid.sys
      19:00:42.0410 2152 mouhid - ok
      19:00:42.0470 2152 mountmgr (32e7a3d591d671a6df2db515a5cbe0fa) C:\Windows\system32\drivers\mountmgr.sys
      19:00:42.0490 2152 mountmgr - ok
      19:00:42.0550 2152 mpio (a44b420d30bd56e145d6a2bc8768ec58) C:\Windows\system32\drivers\mpio.sys
      19:00:42.0560 2152 mpio - ok
      19:00:42.0580 2152 mpsdrv (6c38c9e45ae0ea2fa5e551f2ed5e978f) C:\Windows\system32\drivers\mpsdrv.sys
      19:00:42.0630 2152 mpsdrv - ok
      19:00:42.0690 2152 MRxDAV (dc722758b8261e1abafd31a3c0a66380) C:\Windows\system32\drivers\mrxdav.sys
      19:00:42.0770 2152 MRxDAV - ok
      19:00:42.0800 2152 mrxsmb (a5d9106a73dc88564c825d317cac68ac) C:\Windows\system32\DRIVERS\mrxsmb.sys
      19:00:42.0848 2152 mrxsmb - ok
      19:00:42.0882 2152 mrxsmb10 (d711b3c1d5f42c0c2415687be09fc163) C:\Windows\system32\DRIVERS\mrxsmb10.sys
      19:00:42.0922 2152 mrxsmb10 - ok
      19:00:42.0949 2152 mrxsmb20 (9423e9d355c8d303e76b8cfbd8a5c30c) C:\Windows\system32\DRIVERS\mrxsmb20.sys
      19:00:42.0985 2152 mrxsmb20 - ok
      19:00:43.0014 2152 msahci (c25f0bafa182cbca2dd3c851c2e75796) C:\Windows\system32\drivers\msahci.sys
      19:00:43.0023 2152 msahci - ok
      19:00:43.0055 2152 msdsm (db801a638d011b9633829eb6f663c900) C:\Windows\system32\drivers\msdsm.sys
      19:00:43.0067 2152 msdsm - ok
      19:00:43.0151 2152 Msfs (aa3fb40e17ce1388fa1bedab50ea8f96) C:\Windows\system32\drivers\Msfs.sys
      19:00:43.0189 2152 Msfs - ok
      19:00:43.0200 2152 mshidkmdf (f9d215a46a8b9753f61767fa72a20326) C:\Windows\System32\drivers\mshidkmdf.sys
      19:00:43.0254 2152 mshidkmdf - ok
      19:00:43.0273 2152 msisadrv (d916874bbd4f8b07bfb7fa9b3ccae29d) C:\Windows\system32\drivers\msisadrv.sys
      19:00:43.0281 2152 msisadrv - ok
      19:00:43.0336 2152 MSKSSRV (49ccf2c4fea34ffad8b1b59d49439366) C:\Windows\system32\drivers\MSKSSRV.sys
      19:00:43.0401 2152 MSKSSRV - ok
      19:00:43.0452 2152 MSPCLOCK (bdd71ace35a232104ddd349ee70e1ab3) C:\Windows\system32\drivers\MSPCLOCK.sys
      19:00:43.0490 2152 MSPCLOCK - ok
      19:00:43.0507 2152 MSPQM (4ed981241db27c3383d72092b618a1d0) C:\Windows\system32\drivers\MSPQM.sys
      19:00:43.0548 2152 MSPQM - ok
      19:00:43.0641 2152 MsRPC (759a9eeb0fa9ed79da1fb7d4ef78866d) C:\Windows\system32\drivers\MsRPC.sys
      19:00:43.0668 2152 MsRPC - ok
      19:00:43.0684 2152 mssmbios (0eed230e37515a0eaee3c2e1bc97b288) C:\Windows\system32\drivers\mssmbios.sys
      19:00:43.0694 2152 mssmbios - ok
      19:00:43.0711 2152 MSTEE (2e66f9ecb30b4221a318c92ac2250779) C:\Windows\system32\drivers\MSTEE.sys
      19:00:43.0759 2152 MSTEE - ok
      19:00:43.0794 2152 MTConfig (7ea404308934e675bffde8edf0757bcd) C:\Windows\system32\DRIVERS\MTConfig.sys
      19:00:43.0823 2152 MTConfig - ok
      19:00:43.0844 2152 Mup (f9a18612fd3526fe473c1bda678d61c8) C:\Windows\system32\Drivers\mup.sys
      19:00:43.0857 2152 Mup - ok
      19:00:43.0922 2152 NativeWifiP (1ea3749c4114db3e3161156ffffa6b33) C:\Windows\system32\DRIVERS\nwifi.sys
      19:00:43.0972 2152 NativeWifiP - ok
      19:00:44.0072 2152 NDIS (79b47fd40d9a817e932f9d26fac0a81c) C:\Windows\system32\drivers\ndis.sys
      19:00:44.0142 2152 NDIS - ok
      19:00:44.0221 2152 NdisCap (9f9a1f53aad7da4d6fef5bb73ab811ac) C:\Windows\system32\DRIVERS\ndiscap.sys
      19:00:44.0285 2152 NdisCap - ok
      19:00:44.0348 2152 NdisTapi (30639c932d9fef22b31268fe25a1b6e5) C:\Windows\system32\DRIVERS\ndistapi.sys
      19:00:44.0417 2152 NdisTapi - ok
      19:00:44.0523 2152 Ndisuio (136185f9fb2cc61e573e676aa5402356) C:\Windows\system32\DRIVERS\ndisuio.sys
      19:00:44.0594 2152 Ndisuio - ok
      19:00:44.0758 2152 NdisWan (53f7305169863f0a2bddc49e116c2e11) C:\Windows\system32\DRIVERS\ndiswan.sys
      19:00:44.0835 2152 NdisWan - ok
      19:00:44.0890 2152 NDProxy (015c0d8e0e0421b4cfd48cffe2825879) C:\Windows\system32\drivers\NDProxy.sys
      19:00:44.0959 2152 NDProxy - ok
      19:00:45.0046 2152 NetBIOS (86743d9f5d2b1048062b14b1d84501c4) C:\Windows\system32\DRIVERS\netbios.sys
      19:00:45.0118 2152 NetBIOS - ok
      19:00:45.0155 2152 NetBT (09594d1089c523423b32a4229263f068) C:\Windows\system32\DRIVERS\netbt.sys
      19:00:45.0215 2152 NetBT - ok
      19:00:45.0295 2152 netr28x (44d4bd55191624c82a2745296ba42814) C:\Windows\system32\DRIVERS\netr28x.sys
      19:00:45.0365 2152 netr28x - ok
      19:00:45.0454 2152 nfrd960 (77889813be4d166cdab78ddba990da92) C:\Windows\system32\DRIVERS\nfrd960.sys
      19:00:45.0469 2152 nfrd960 - ok
      19:00:45.0574 2152 Npfs (1e4c4ab5c9b8dd13179bbdc75a2a01f7) C:\Windows\system32\drivers\Npfs.sys
      19:00:45.0627 2152 Npfs - ok
      19:00:45.0647 2152 nsiproxy (e7f5ae18af4168178a642a9247c63001) C:\Windows\system32\drivers\nsiproxy.sys
      19:00:45.0722 2152 nsiproxy - ok
      19:00:45.0780 2152 Ntfs (a2f74975097f52a00745f9637451fdd8) C:\Windows\system32\drivers\Ntfs.sys
      19:00:45.0847 2152 Ntfs - ok
      19:00:45.0870 2152 Null (9899284589f75fa8724ff3d16aed75c1) C:\Windows\system32\drivers\Null.sys
      19:00:45.0926 2152 Null - ok
      19:00:45.0987 2152 nvraid (0a92cb65770442ed0dc44834632f66ad) C:\Windows\system32\drivers\nvraid.sys
      19:00:45.0998 2152 nvraid - ok
      19:00:46.0053 2152 nvstor (dab0e87525c10052bf65f06152f37e4a) C:\Windows\system32\drivers\nvstor.sys
      19:00:46.0072 2152 nvstor - ok
      19:00:46.0112 2152 nv_agp (270d7cd42d6e3979f6dd0146650f0e05) C:\Windows\system32\drivers\nv_agp.sys
      19:00:46.0122 2152 nv_agp - ok
      19:00:46.0182 2152 ohci1394 (3589478e4b22ce21b41fa1bfc0b8b8a0) C:\Windows\system32\drivers\ohci1394.sys
      19:00:46.0203 2152 ohci1394 - ok
      19:00:46.0247 2152 Parport (0086431c29c35be1dbc43f52cc273887) C:\Windows\system32\DRIVERS\parport.sys
      19:00:46.0265 2152 Parport - ok
      19:00:46.0292 2152 partmgr (871eadac56b0a4c6512bbe32753ccf79) C:\Windows\system32\drivers\partmgr.sys
      19:00:46.0305 2152 partmgr - ok
      19:00:46.0333 2152 pci (94575c0571d1462a0f70bde6bd6ee6b3) C:\Windows\system32\drivers\pci.sys
      19:00:46.0351 2152 pci - ok
      19:00:46.0370 2152 pciide (b5b8b5ef2e5cb34df8dcf8831e3534fa) C:\Windows\system32\drivers\pciide.sys
      19:00:46.0378 2152 pciide - ok
      19:00:46.0431 2152 pcmcia (b2e81d4e87ce48589f98cb8c05b01f2f) C:\Windows\system32\DRIVERS\pcmcia.sys
      19:00:46.0448 2152 pcmcia - ok
      19:00:46.0478 2152 pcw (d6b9c2e1a11a3a4b26a182ffef18f603) C:\Windows\system32\drivers\pcw.sys
      19:00:46.0498 2152 pcw - ok
      19:00:46.0518 2152 PEAUTH (68769c3356b3be5d1c732c97b9a80d6e) C:\Windows\system32\drivers\peauth.sys
      19:00:46.0608 2152 PEAUTH - ok
      19:00:46.0708 2152 PptpMiniport (f92a2c41117a11a00be01ca01a7fcde9) C:\Windows\system32\DRIVERS\raspptp.sys
      19:00:46.0768 2152 PptpMiniport - ok
      19:00:46.0788 2152 Processor (0d922e23c041efb1c3fac2a6f943c9bf) C:\Windows\system32\DRIVERS\processr.sys
      19:00:46.0798 2152 Processor - ok
      19:00:46.0875 2152 Psched (0557cf5a2556bd58e26384169d72438d) C:\Windows\system32\DRIVERS\pacer.sys
      19:00:46.0940 2152 Psched - ok
      19:00:47.0035 2152 ql2300 (a53a15a11ebfd21077463ee2c7afeef0) C:\Windows\system32\DRIVERS\ql2300.sys
      19:00:47.0111 2152 ql2300 - ok
      19:00:47.0141 2152 ql40xx (4f6d12b51de1aaeff7dc58c4d75423c8) C:\Windows\system32\DRIVERS\ql40xx.sys
      19:00:47.0153 2152 ql40xx - ok
      19:00:47.0179 2152 QWAVEdrv (76707bb36430888d9ce9d705398adb6c) C:\Windows\system32\drivers\qwavedrv.sys
      19:00:47.0213 2152 QWAVEdrv - ok
      19:00:47.0235 2152 RasAcd (5a0da8ad5762fa2d91678a8a01311704) C:\Windows\system32\DRIVERS\rasacd.sys
      19:00:47.0280 2152 RasAcd - ok
      19:00:47.0340 2152 RasAgileVpn (7ecff9b22276b73f43a99a15a6094e90) C:\Windows\system32\DRIVERS\AgileVpn.sys
      19:00:47.0393 2152 RasAgileVpn - ok
      19:00:47.0440 2152 Rasl2tp (471815800ae33e6f1c32fb1b97c490ca) C:\Windows\system32\DRIVERS\rasl2tp.sys
      19:00:47.0506 2152 Rasl2tp - ok
      19:00:47.0557 2152 RasPppoe (855c9b1cd4756c5e9a2aa58a15f58c25) C:\Windows\system32\DRIVERS\raspppoe.sys
      19:00:47.0598 2152 RasPppoe - ok
      19:00:47.0644 2152 RasSstp (e8b1e447b008d07ff47d016c2b0eeecb) C:\Windows\system32\DRIVERS\rassstp.sys
      19:00:47.0688 2152 RasSstp - ok
      19:00:47.0762 2152 rdbss (77f665941019a1594d887a74f301fa2f) C:\Windows\system32\DRIVERS\rdbss.sys
      19:00:47.0827 2152 rdbss - ok
      19:00:47.0852 2152 rdpbus (302da2a0539f2cf54d7c6cc30c1f2d8d) C:\Windows\system32\DRIVERS\rdpbus.sys
      19:00:47.0882 2152 rdpbus - ok
      19:00:47.0902 2152 RDPCDD (cea6cc257fc9b7715f1c2b4849286d24) C:\Windows\system32\DRIVERS\RDPCDD.sys
      19:00:47.0942 2152 RDPCDD - ok
      19:00:47.0962 2152 RDPENCDD (bb5971a4f00659529a5c44831af22365) C:\Windows\system32\drivers\rdpencdd.sys
      19:00:48.0012 2152 RDPENCDD - ok
      19:00:48.0035 2152 RDPREFMP (216f3fa57533d98e1f74ded70113177a) C:\Windows\system32\drivers\rdprefmp.sys
      19:00:48.0069 2152 RDPREFMP - ok
      19:00:48.0140 2152 RDPWD (15b66c206b5cb095bab980553f38ed23) C:\Windows\system32\drivers\RDPWD.sys
      19:00:48.0199 2152 RDPWD - ok
      19:00:48.0259 2152 rdyboost (34ed295fa0121c241bfef24764fc4520) C:\Windows\system32\drivers\rdyboost.sys
      19:00:48.0281 2152 rdyboost - ok
      19:00:48.0354 2152 rspndr (ddc86e4f8e7456261e637e3552e804ff) C:\Windows\system32\DRIVERS\rspndr.sys
      19:00:48.0430 2152 rspndr - ok
      19:00:48.0503 2152 RTL8167 (3b01789ee4eaee97f5eb46b711387d5e) C:\Windows\system32\DRIVERS\Rt64win7.sys
      19:00:48.0551 2152 RTL8167 - ok
      19:00:48.0595 2152 sbp2port (ac03af3329579fffb455aa2daabbe22b) C:\Windows\system32\drivers\sbp2port.sys
      19:00:48.0611 2152 sbp2port - ok
      19:00:48.0645 2152 scfilter (253f38d0d7074c02ff8deb9836c97d2b) C:\Windows\system32\DRIVERS\scfilter.sys
      19:00:48.0709 2152 scfilter - ok
      19:00:48.0731 2152 secdrv (3ea8a16169c26afbeb544e0e48421186) C:\Windows\system32\drivers\secdrv.sys
      19:00:48.0774 2152 secdrv - ok
      19:00:48.0839 2152 Serenum (cb624c0035412af0debec78c41f5ca1b) C:\Windows\system32\DRIVERS\serenum.sys
      19:00:48.0850 2152 Serenum - ok
      19:00:48.0883 2152 Serial (c1d8e28b2c2adfaec4ba89e9fda69bd6) C:\Windows\system32\DRIVERS\serial.sys
      19:00:48.0910 2152 Serial - ok
      19:00:48.0986 2152 sermouse (1c545a7d0691cc4a027396535691c3e3) C:\Windows\system32\DRIVERS\sermouse.sys
      19:00:49.0018 2152 sermouse - ok
      19:00:49.0063 2152 sffdisk (a554811bcd09279536440c964ae35bbf) C:\Windows\system32\drivers\sffdisk.sys
      19:00:49.0102 2152 sffdisk - ok
      19:00:49.0120 2152 sffp_mmc (ff414f0baefeba59bc6c04b3db0b87bf) C:\Windows\system32\drivers\sffp_mmc.sys
      19:00:49.0144 2152 sffp_mmc - ok
      19:00:49.0164 2152 sffp_sd (dd85b78243a19b59f0637dcf284da63c) C:\Windows\system32\drivers\sffp_sd.sys
      19:00:49.0194 2152 sffp_sd - ok
      19:00:49.0211 2152 sfloppy (a9d601643a1647211a1ee2ec4e433ff4) C:\Windows\system32\DRIVERS\sfloppy.sys
      19:00:49.0225 2152 sfloppy - ok
      19:00:49.0298 2152 SiSRaid2 (843caf1e5fde1ffd5ff768f23a51e2e1) C:\Windows\system32\DRIVERS\SiSRaid2.sys
      19:00:49.0314 2152 SiSRaid2 - ok
      19:00:49.0338 2152 SiSRaid4 (6a6c106d42e9ffff8b9fcb4f754f6da4) C:\Windows\system32\DRIVERS\sisraid4.sys
      19:00:49.0348 2152 SiSRaid4 - ok
      19:00:49.0417 2152 Smb (548260a7b8654e024dc30bf8a7c5baa4) C:\Windows\system32\DRIVERS\smb.sys
      19:00:49.0471 2152 Smb - ok
      19:00:49.0538 2152 spldr (b9e31e5cacdfe584f34f730a677803f9) C:\Windows\system32\drivers\spldr.sys
      19:00:49.0550 2152 spldr - ok
      19:00:49.0597 2152 srv (441fba48bff01fdb9d5969ebc1838f0b) C:\Windows\system32\DRIVERS\srv.sys
      19:00:49.0677 2152 srv - ok
      19:00:49.0705 2152 srv2 (b4adebbf5e3677cce9651e0f01f7cc28) C:\Windows\system32\DRIVERS\srv2.sys
      19:00:49.0741 2152 srv2 - ok
      19:00:49.0761 2152 srvnet (27e461f0be5bff5fc737328f749538c3) C:\Windows\system32\DRIVERS\srvnet.sys
      19:00:49.0789 2152 srvnet - ok
      19:00:49.0860 2152 stexstor (f3817967ed533d08327dc73bc4d5542a) C:\Windows\system32\DRIVERS\stexstor.sys
      19:00:49.0870 2152 stexstor - ok
      19:00:49.0941 2152 swenum (d01ec09b6711a5f8e7e6564a4d0fbc90) C:\Windows\system32\drivers\swenum.sys
      19:00:49.0956 2152 swenum - ok
      19:00:50.0084 2152 Tcpip (fc62769e7bff2896035aeed399108162) C:\Windows\system32\drivers\tcpip.sys
      19:00:50.0164 2152 Tcpip - ok
      19:00:50.0256 2152 TCPIP6 (fc62769e7bff2896035aeed399108162) C:\Windows\system32\DRIVERS\tcpip.sys
      19:00:50.0302 2152 TCPIP6 - ok
      19:00:50.0404 2152 tcpipreg (df687e3d8836bfb04fcc0615bf15a519) C:\Windows\system32\drivers\tcpipreg.sys
      19:00:50.0477 2152 tcpipreg - ok
      19:00:50.0511 2152 TDPIPE (3371d21011695b16333a3934340c4e7c) C:\Windows\system32\drivers\tdpipe.sys
      19:00:50.0565 2152 TDPIPE - ok
      19:00:50.0579 2152 TDTCP (e4245bda3190a582d55ed09e137401a9) C:\Windows\system32\drivers\tdtcp.sys
      19:00:50.0629 2152 TDTCP - ok
      19:00:50.0665 2152 tdx (ddad5a7ab24d8b65f8d724f5c20fd806) C:\Windows\system32\DRIVERS\tdx.sys
      19:00:50.0731 2152 tdx - ok
      19:00:50.0763 2152 TermDD (561e7e1f06895d78de991e01dd0fb6e5) C:\Windows\system32\drivers\termdd.sys
      19:00:50.0771 2152 TermDD - ok
      19:00:50.0842 2152 tssecsrv (ce18b2cdfc837c99e5fae9ca6cba5d30) C:\Windows\system32\DRIVERS\tssecsrv.sys
      19:00:50.0907 2152 tssecsrv - ok
      19:00:50.0976 2152 TsUsbFlt (d11c783e3ef9a3c52c0ebe83cc5000e9) C:\Windows\system32\drivers\tsusbflt.sys
      19:00:50.0999 2152 TsUsbFlt - ok
      19:00:51.0065 2152 tunnel (3566a8daafa27af944f5d705eaa64894) C:\Windows\system32\DRIVERS\tunnel.sys
      19:00:51.0123 2152 tunnel - ok
      19:00:51.0149 2152 uagp35 (b4dd609bd7e282bfc683cec7eaaaad67) C:\Windows\system32\DRIVERS\uagp35.sys
      19:00:51.0159 2152 uagp35 - ok
      19:00:51.0196 2152 udfs (ff4232a1a64012baa1fd97c7b67df593) C:\Windows\system32\DRIVERS\udfs.sys
      19:00:51.0235 2152 udfs - ok
      19:00:51.0305 2152 uliagpkx (4bfe1bc28391222894cbf1e7d0e42320) C:\Windows\system32\drivers\uliagpkx.sys
      19:00:51.0315 2152 uliagpkx - ok
      19:00:51.0355 2152 umbus (dc54a574663a895c8763af0fa1ff7561) C:\Windows\system32\drivers\umbus.sys
      19:00:51.0365 2152 umbus - ok
      19:00:51.0407 2152 UmPass (b2e8e8cb557b156da5493bbddcc1474d) C:\Windows\system32\DRIVERS\umpass.sys
      19:00:51.0433 2152 UmPass - ok
      19:00:51.0497 2152 USBAAPL64 (aa33fc47ed58c34e6e9261e4f850b7eb) C:\Windows\system32\Drivers\usbaapl64.sys
      19:00:51.0554 2152 USBAAPL64 - ok
      19:00:51.0588 2152 usbccgp (6f1a3157a1c89435352ceb543cdb359c) C:\Windows\system32\DRIVERS\usbccgp.sys
      19:00:51.0627 2152 usbccgp - ok
      19:00:51.0677 2152 usbcir (af0892a803fdda7492f595368e3b68e7) C:\Windows\system32\drivers\usbcir.sys
      19:00:51.0719 2152 usbcir - ok
      19:00:51.0743 2152 usbehci (c025055fe7b87701eb042095df1a2d7b) C:\Windows\system32\drivers\usbehci.sys
      19:00:51.0766 2152 usbehci - ok
      19:00:51.0827 2152 usbhub (287c6c9410b111b68b52ca298f7b8c24) C:\Windows\system32\DRIVERS\usbhub.sys
      19:00:51.0858 2152 usbhub - ok
      19:00:51.0880 2152 usbohci (9840fc418b4cbd632d3d0a667a725c31) C:\Windows\system32\drivers\usbohci.sys
      19:00:51.0907 2152 usbohci - ok
      19:00:51.0929 2152 usbprint (73188f58fb384e75c4063d29413cee3d) C:\Windows\system32\DRIVERS\usbprint.sys
      19:00:51.0948 2152 usbprint - ok
      19:00:51.0963 2152 usbscan (aaa2513c8aed8b54b189fd0c6b1634c0) C:\Windows\system32\DRIVERS\usbscan.sys
      19:00:51.0992 2152 usbscan - ok
      19:00:52.0011 2152 USBSTOR (fed648b01349a3c8395a5169db5fb7d6) C:\Windows\system32\DRIVERS\USBSTOR.SYS
      19:00:52.0060 2152 USBSTOR - ok
      19:00:52.0083 2152 usbuhci (62069a34518bcf9c1fd9e74b3f6db7cd) C:\Windows\system32\drivers\usbuhci.sys
      19:00:52.0113 2152 usbuhci - ok
      19:00:52.0139 2152 vdrvroot (c5c876ccfc083ff3b128f933823e87bd) C:\Windows\system32\drivers\vdrvroot.sys
      19:00:52.0150 2152 vdrvroot - ok
      19:00:52.0224 2152 vga (da4da3f5e02943c2dc8c6ed875de68dd) C:\Windows\system32\DRIVERS\vgapnp.sys
      19:00:52.0250 2152 vga - ok
      19:00:52.0280 2152 VgaSave (53e92a310193cb3c03bea963de7d9cfc) C:\Windows\System32\drivers\vga.sys
      19:00:52.0346 2152 VgaSave - ok
      19:00:52.0379 2152 vhdmp (2ce2df28c83aeaf30084e1b1eb253cbb) C:\Windows\system32\drivers\vhdmp.sys
      19:00:52.0389 2152 vhdmp - ok
      19:00:52.0419 2152 viaide (e5689d93ffe4e5d66c0178761240dd54) C:\Windows\system32\drivers\viaide.sys
      19:00:52.0439 2152 viaide - ok
      19:00:52.0509 2152 vncmirror (93f279a2c172562050700a18fa84be2e) C:\Windows\system32\DRIVERS\vncmirror.sys
      19:00:52.0559 2152 vncmirror - ok
      19:00:52.0609 2152 volmgr (d2aafd421940f640b407aefaaebd91b0) C:\Windows\system32\drivers\volmgr.sys
      19:00:52.0629 2152 volmgr - ok
      19:00:52.0669 2152 volmgrx (a255814907c89be58b79ef2f189b843b) C:\Windows\system32\drivers\volmgrx.sys
      19:00:52.0689 2152 volmgrx - ok
      19:00:52.0699 2152 volsnap (0d08d2f3b3ff84e433346669b5e0f639) C:\Windows\system32\drivers\volsnap.sys
      19:00:52.0719 2152 volsnap - ok
      19:00:52.0789 2152 vsmraid (5e2016ea6ebaca03c04feac5f330d997) C:\Windows\system32\DRIVERS\vsmraid.sys
      19:00:52.0809 2152 vsmraid - ok
      19:00:52.0900 2152 vwifibus (36d4720b72b5c5d9cb2b9c29e9df67a1) C:\Windows\system32\DRIVERS\vwifibus.sys
      19:00:52.0942 2152 vwifibus - ok
      19:00:52.0967 2152 vwififlt (6a3d66263414ff0d6fa754c646612f3f) C:\Windows\system32\DRIVERS\vwififlt.sys
      19:00:53.0042 2152 vwififlt - ok
      19:00:53.0079 2152 WacomPen (4e9440f4f152a7b944cb1663d3935a3e) C:\Windows\system32\DRIVERS\wacompen.sys
      19:00:53.0092 2152 WacomPen - ok
      19:00:53.0156 2152 WANARP (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
      19:00:53.0230 2152 WANARP - ok
      19:00:53.0236 2152 Wanarpv6 (356afd78a6ed4457169241ac3965230c) C:\Windows\system32\DRIVERS\wanarp.sys
      19:00:53.0277 2152 Wanarpv6 - ok
      19:00:53.0353 2152 Wd (72889e16ff12ba0f235467d6091b17dc) C:\Windows\system32\DRIVERS\wd.sys
      19:00:53.0369 2152 Wd - ok
      19:00:53.0400 2152 Wdf01000 (441bd2d7b4f98134c3a4f9fa570fd250) C:\Windows\system32\drivers\Wdf01000.sys
      19:00:53.0427 2152 Wdf01000 - ok
      19:00:53.0454 2152 WfpLwf (611b23304bf067451a9fdee01fbdd725) C:\Windows\system32\DRIVERS\wfplwf.sys
      19:00:53.0485 2152 WfpLwf - ok
      19:00:53.0532 2152 WIMMount (05ecaec3e4529a7153b3136ceb49f0ec) C:\Windows\system32\drivers\wimmount.sys
      19:00:53.0540 2152 WIMMount - ok
      19:00:53.0641 2152 WinUsb (fe88b288356e7b47b74b13372add906d) C:\Windows\system32\DRIVERS\WinUsb.sys
      19:00:53.0682 2152 WinUsb - ok
      19:00:53.0709 2152 WmiAcpi (f6ff8944478594d0e414d3f048f0d778) C:\Windows\system32\drivers\wmiacpi.sys
      19:00:53.0727 2152 WmiAcpi - ok
      19:00:53.0800 2152 ws2ifsl (6bcc1d7d2fd2453957c5479a32364e52) C:\Windows\system32\drivers\ws2ifsl.sys
      19:00:53.0850 2152 ws2ifsl - ok
      19:00:53.0930 2152 WudfPf (d3381dc54c34d79b22cee0d65ba91b7c) C:\Windows\system32\drivers\WudfPf.sys
      19:00:53.0990 2152 WudfPf - ok
      19:00:54.0021 2152 WUDFRd (cf8d590be3373029d57af80914190682) C:\Windows\system32\DRIVERS\WUDFRd.sys
      19:00:54.0082 2152 WUDFRd - ok
      19:00:54.0148 2152 MBR (0x1B8) (352ac73b4aaa7374b64e7c60059c9b10) \Device\Harddisk0\DR0
      19:00:54.0493 2152 \Device\Harddisk0\DR0 - ok
      19:00:54.0507 2152 Boot (0x1200) (3f4e21d70124637f47fa4e623a0e09bb) \Device\Harddisk0\DR0\Partition0
      19:00:54.0509 2152 \Device\Harddisk0\DR0\Partition0 - ok
      19:00:54.0539 2152 Boot (0x1200) (3f414d04070a61452f4fb090a93fa587) \Device\Harddisk0\DR0\Partition1
      19:00:54.0541 2152 \Device\Harddisk0\DR0\Partition1 - ok
      19:00:54.0612 2152 Boot (0x1200) (c13c51431815587eded6e8eddd82eb33) \Device\Harddisk0\DR0\Partition2
      19:00:54.0614 2152 \Device\Harddisk0\DR0\Partition2 - ok
      19:00:54.0615 2152 ============================================================
      19:00:54.0615 2152 Scan finished
      19:00:54.0615 2152 ============================================================
      19:00:54.0628 4400 Detected object count: 0
      19:00:54.0628 4400 Actual detected object count: 0


      MALWAREBYTES

      Malwarebytes Anti-Malware (Versión de Prueba) 1.60.1.1000
      www.malwarebytes.org

      Versión de la Base de Datos: v2012.02.09.07

      Windows 7 Service Pack 1 x64 NTFS
      Internet Explorer 9.0.8112.16421
      Manolo :: SOBREMESA [administrador]

      Protección: Habilitado

      09/02/2012 21:38:48
      mbam-log-2012-02-09 (21-38-48).txt

      Tipos de Análisis: Análisis Completo
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 355177
      Tiempo transcurrido: 52 minuto(s), 53 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 4
      C:\Windows\assembly\tmp\U\000000cb.@ (Trojan.Agent) -> En cuarentena y eliminado con éxito.
      C:\Windows\assembly\tmp\U\000000cf.@ (Trojan.Agent) -> En cuarentena y eliminado con éxito.
      C:\Users\Manolo\AppData\Local\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Se eliminarán al reiniciar.
      C:\Windows\Temp\{E9C1E1AC-C9B2-4c85-94DE-9C1518918D02}.tlb (Rootkit.Zeroaccess) -> Se eliminarán al reiniciar.

      fin)

    2. #2
      Moderador Gral.
      Avatar de Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      54.902

      Re: Problemas con abnow, mediashifting, AVG 2012 y firewall de Windows

      Hola



      Por favor, seguí este procedimiento:



      PASO 1

      Descargá estas herramientas a Tu escritorio, pero NO ejecutes nada aún:



      º Glary Utilities y lo instalas según Su manual.

      º Malwarebytes. Lo instalas y actualizas según su manual. Si ya lo tenes, Solo debes actualizarlo.

      º ComboFix.exe


      Desconectá el ordenador de Internet. Desenchufá el Cable



      PASO 2

      Ejecutá TDSSKiller tal cual lo indica Su manual. Cuando termine, Guardas Su reporte en el escritorio.



      PASO 3

      Ejecutá Malwarebytes
      • Hacé un "Escaneo Completo".
      • Una vez finalizado, si detecta algo, elegis "Quitar lo seleccionado" como lo indica Esta Imagen
      • Si te pide reiniciar, lo haces.




      PASO 4

      Ejecutá Glary Utilities
      • Presioná el Boton Mantenimiento un Clic
      • Presioná el Boton Ver Resultados y esperá a que termine.
      • Cuando termine, presionas el Boton Reparar Problemas.





      PASO 5

      Ejecutá ComboFix

      • Desactivá temporalmente el Antivirus y/o Antispyware.
      • Cerrá todas las ventanas abiertas.
      • Hace doble clic al archivo ComboFix.exe y seguí las instrucciones.
      • Cuando termine, generara un registro en C:\ComboFix.txt.
        • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
        • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.
      Atención!! No use ComboFix a menos que se le haya indicado específicamente en su mensaje por un integrante de nuestro Staff. Es una herramienta de gran alcance destinada por su creador a ser usada bajo la orientación y supervisión de un experto, no para uso privado. El uso de ComboFix incorrectamente podría generar problemas en su sistema. Por favor, lea las "Negaciones de la Garantía" de ComboFix.




      Recién ahora, conectate a internet



      En tu próxima respuesta, debes poner lo siguiente:


      ° El reporte de TDSSKiller
      º El reporte de Malwarebytes, que se encuentra en su pestaña REGISTROS
      º El reporte de ComboFix
      º Como funciona tu pc ahora



      NOTAS IMPORTANTES:

      ° Una vez Terminado el Trabajo de ComboFix, podes activar Tu antivirus.

      ° No Pongas los Reportes Dentro de Etiquetas Code ni HTML.

      ° No vuelvas a ejecutar ningún otro programa antivirus hasta que vuelva con una respuesta.

      ° Si No podes realizar un paso, lo saltas y seguis con el próximo.


      Saludos

      `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.· No Desesperes.....Seguí Luchando `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.·

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #3
      Usuario Avatar de ilarranaga
      Registrado
      feb 2012
      Ubicación
      Euskal Herria
      Mensajes
      4

      Re: Problemas con abnow, mediashifting, AVG 2012 y firewall de Windows

      Hola de nuevo, tengo el log de ComboFix. He podido activar el firewall!! De momento no me redirecciona a abnow y mediashifting, pero antes ya me ha pasado esto y luego a vuelto el programa...
      Voy a instalarme el AVG 2012, a no ser que alguien tenga otra propuesta...

      Gracias!!!

      ComboFix 12-02-13.01 - Manolo 14/02/2012 19:56:14.3.4 - x64
      Microsoft Windows 7 Home Premium 6.1.7601.1.1252.34.3082.18.3959.2473 [GMT 1:00]
      Running from: c:\users\Manolo\Desktop\ComboFix.exe
      AV: AVG Internet Security 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
      FW: AVG Firewall *Disabled* {621CC794-9486-F902-D092-0484E8EA828B}
      SP: AVG Internet Security 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      .
      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\windows\assembly\GAC_32\Desktop.ini
      c:\windows\assembly\GAC_64\Desktop.ini
      c:\windows\assembly\tmp\U
      c:\windows\assembly\tmp\U\00000001.@
      c:\windows\assembly\tmp\U\000000c0.@
      c:\windows\assembly\tmp\U\000000cb.@
      c:\windows\assembly\tmp\U\000000cf.@
      c:\windows\assembly\tmp\U\80000000.@
      c:\windows\assembly\tmp\U\800000c0.@
      c:\windows\assembly\tmp\U\800000cb.@
      c:\windows\assembly\tmp\U\800000cf.@
      c:\windows\system32\consrv.dll
      c:\windows\system32\dds_log_trash.cmd
      c:\windows\system32\mqdmmdfl.dll
      .
      .
      ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      -------\Service_zebrmdm
      .
      .
      ((((((((((((((((((((((((( Files Created from 2012-01-14 to 2012-02-14 )))))))))))))))))))))))))))))))
      .
      .
      2012-02-14 19:01 . 2012-02-14 19:01 -------- d-----w- c:\users\Default\AppData\Local\temp
      2012-02-09 19:50 . 2011-12-10 14:24 23152 ----a-w- c:\windows\system32\drivers\mbam.sys
      2012-02-08 20:04 . 2012-02-08 20:04 -------- d-----w- c:\users\Manolo\AppData\Roaming\Malwarebytes
      2012-02-08 20:04 . 2012-02-08 20:04 -------- d-----w- c:\programdata\Malwarebytes
      2012-02-08 20:04 . 2012-02-09 19:50 -------- d-----w- c:\program files (x86)\Malwarebytes' Anti-Malware
      2012-02-04 23:15 . 2012-02-05 08:23 -------- d-----w- c:\program files (x86)\STOPzilla!
      2012-02-04 23:15 . 2012-02-04 23:15 -------- d-----w- c:\program files (x86)\Common Files\iS3
      2012-02-04 23:14 . 2012-02-04 23:16 -------- d-----w- c:\programdata\STOPzilla!
      2012-02-04 21:50 . 2012-02-04 21:50 -------- d-----w- C:\$AVG
      2012-02-04 21:01 . 2012-02-09 20:05 -------- d-----w- c:\program files\CCleaner
      2012-02-04 19:50 . 2012-02-09 06:43 -------- d-----w- c:\program files (x86)\Panda Security
      2012-02-04 19:41 . 2012-02-04 19:36 16432 ----a-w- c:\windows\system32\lsdelete.exe
      2012-02-04 19:35 . 2012-02-09 06:44 -------- d-----w- c:\programdata\Lavasoft
      2012-02-04 19:35 . 2012-02-09 06:43 -------- d-----w- c:\program files (x86)\Lavasoft
      2012-02-04 19:23 . 2012-02-09 04:42 -------- d-----w- c:\program files\Enigma Software Group
      2012-02-04 19:23 . 2012-02-04 21:28 -------- d-----w- C:\sh4ldr
      2012-02-04 19:23 . 2012-02-09 04:24 -------- d-----w- c:\windows\5B210B8AB66E4702B44D0D6F388D29EB.TMP
      2012-01-29 15:20 . 2012-01-29 15:20 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2012-01-29 14:36 . 2012-02-09 06:46 -------- d-----w- c:\windows\system32\Macromed
      2012-01-29 14:34 . 2012-02-09 06:47 -------- d-sh--w- c:\windows\system32\%APPDATA%
      2012-01-29 14:12 . 2012-01-29 14:15 -------- d-sh--w- c:\users\Manolo\AppData\Local\5dec8e46
      .
      .
      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2011-11-24 04:52 . 2011-12-15 07:36 3145216 ----a-w- c:\windows\system32\win32k.sys
      2011-11-19 14:58 . 2012-01-11 12:45 77312 ----a-w- c:\windows\system32\packager.dll
      2011-11-19 14:01 . 2012-01-11 12:45 67072 ----a-w- c:\windows\SysWow64\packager.dll
      2011-11-17 06:41 . 2012-01-11 12:45 1731920 ----a-w- c:\windows\system32\ntdll.dll
      2011-11-17 05:38 . 2012-01-11 12:45 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
      .
      .
      ((((((((((((((((((((((((((((( SnapShot@2012-02-09_21.45.40 )))))))))))))))))))))))))))))))))))))))))
      .
      + 2009-07-14 04:54 . 2012-02-14 17:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      - 2009-07-14 04:54 . 2012-02-09 19:21 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      - 2009-07-14 04:54 . 2012-02-09 19:21 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      + 2009-07-14 04:54 . 2012-02-14 17:53 32768 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      + 2009-07-14 04:54 . 2012-02-14 17:53 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      - 2009-07-14 04:54 . 2012-02-09 19:21 16384 c:\windows\SysWOW64\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      + 2010-01-04 18:10 . 2012-02-14 18:33 63354 c:\windows\system32\wdi\ShutdownPerformanceDiagnostics_SystemData.bin
      + 2009-07-14 05:10 . 2012-02-14 19:04 32548 c:\windows\system32\wdi\BootPerformanceDiagnostics_SystemData.bin
      + 2010-10-09 18:24 . 2012-02-14 19:04 18200 c:\windows\system32\wdi\{86432a0b-3c7d-4ddf-a89c-172faa90485d}\S-1-5-21-2265623084-4101613313-1909588834-1000_UserData.bin
      - 2011-05-07 16:16 . 2012-02-08 19:38 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
      + 2011-05-07 16:16 . 2012-02-11 11:48 67584 c:\windows\system32\LogFiles\Srt\bootstat.dat
      + 2012-01-29 14:34 . 2012-02-14 18:16 16384 c:\windows\system32\%APPDATA%\Microsoft\Windows\IETldCache\index.dat
      - 2012-01-29 14:34 . 2012-02-09 21:33 16384 c:\windows\system32\%APPDATA%\Microsoft\Windows\IETldCache\index.dat
      + 2012-02-14 19:01 . 2012-02-14 19:01 1806 c:\windows\system32\wdi\ERCQueuedResolutions.dat
      + 2012-02-14 19:02 . 2012-02-14 19:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
      - 2012-02-09 21:45 . 2012-02-09 21:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive1.dat
      + 2012-02-14 19:02 . 2012-02-14 19:02 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
      - 2012-02-09 21:45 . 2012-02-09 21:45 2048 c:\windows\ServiceProfiles\LocalService\AppData\Local\lastalive0.dat
      + 2012-02-14 18:12 . 2011-11-10 04:54 157472 c:\windows\SysWOW64\javaws.exe
      - 2011-06-18 08:40 . 2011-05-04 02:52 157472 c:\windows\SysWOW64\javaws.exe
      + 2012-02-14 18:12 . 2011-11-10 04:54 149280 c:\windows\SysWOW64\javaw.exe
      + 2012-02-14 18:12 . 2011-11-10 04:54 149280 c:\windows\SysWOW64\java.exe
      + 2010-10-29 19:08 . 2011-11-10 04:54 472808 c:\windows\SysWOW64\deployJava1.dll
      - 2010-10-29 19:08 . 2011-05-04 02:52 472808 c:\windows\SysWOW64\deployJava1.dll
      + 2010-10-09 18:19 . 2012-02-14 18:16 278528 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      - 2010-10-09 18:19 . 2012-02-09 21:33 278528 c:\windows\system32\config\systemprofile\AppData\Roaming\Microsoft\Windows\Cookies\index.dat
      - 2009-07-14 05:01 . 2012-02-09 21:44 335044 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
      + 2009-07-14 05:01 . 2012-02-14 19:01 335044 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-System.dat
      + 2011-08-08 21:13 . 2012-02-09 22:20 553300 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2265623084-4101613313-1909588834-1000-12288.dat
      - 2011-08-08 21:13 . 2012-02-09 20:31 553300 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2265623084-4101613313-1909588834-1000-12288.dat
      + 2012-02-14 18:12 . 2012-02-14 18:12 207360 c:\windows\Installer\6598e.msi
      - 2010-10-09 18:19 . 2012-02-09 21:33 1851392 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      + 2010-10-09 18:19 . 2012-02-14 18:16 1851392 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\index.dat
      + 2009-07-14 04:54 . 2012-02-14 18:16 6275072 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      - 2009-07-14 04:54 . 2012-02-09 21:33 6275072 c:\windows\system32\config\systemprofile\AppData\Local\Microsoft\Windows\History\History.IE5\index.dat
      + 2010-10-09 20:18 . 2012-02-14 19:01 1525632 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
      - 2010-10-09 20:18 . 2012-02-09 21:44 1525632 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache3.0.0.0.dat
      + 2010-10-09 20:18 . 2012-02-14 19:01 1525876 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2265623084-4101613313-1909588834-1000-8192.dat
      - 2010-10-09 20:18 . 2012-02-09 21:44 1525876 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-21-2265623084-4101613313-1909588834-1000-8192.dat
      - 2012-01-29 15:14 . 2012-02-09 21:35 7086892 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
      + 2012-01-29 15:14 . 2012-02-14 18:17 7086892 c:\windows\ServiceProfiles\LocalService\AppData\Local\FontCache-S-1-5-18-16384.dat
      - 2009-07-14 02:34 . 2012-01-26 15:09 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
      + 2009-07-14 02:34 . 2012-02-11 21:00 11010048 c:\windows\system32\SMI\Store\Machine\schema.dat
      .
      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4
      .
      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
      "{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
      "{82b24b66-fdb1-48c2-8f6a-9610f965b280}"= "c:\program files (x86)\pc_gear_es\prxtbpc_g.dll" [2011-03-28 176936]
      .
      [HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
      .
      [HKEY_CLASSES_ROOT\clsid\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
      2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\ConduitEngine\prxConduitEngin.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\pc_gear_es\prxtbpc_g.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
      2012-01-03 15:31 1514152 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
      "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
      "{82b24b66-fdb1-48c2-8f6a-9610f965b280}"= "c:\program files (x86)\pc_gear_es\prxtbpc_g.dll" [2011-03-28 176936]
      "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngin.dll" [2011-03-28 176936]
      .
      [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
      [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
      [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
      [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
      .
      [HKEY_CLASSES_ROOT\clsid\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      .
      [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048]
      "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-10-29 39408]
      "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
      "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]
      "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-08 98304]
      "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
      "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-29 600936]
      "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
      "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2011-09-07 37296]
      "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2011-03-30 937920]
      "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
      "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
      "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-07-19 421736]
      "NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2010-03-26 1234216]
      "ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
      "Malwarebytes' Anti-Malware"="c:\program files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe" [2012-01-13 460872]
      "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
      .
      c:\users\Manolo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
      OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
      .
      c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
      HP Digital Imaging Monitor.lnk - c:\program files (x86)\hp\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 5 (0x5)
      "ConsentPromptBehaviorUser"= 3 (0x3)
      "EnableUIADesktopToggle"= 0 (0x0)
      "EnableLinkedConnections"= 1 (0x1)
      .
      [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv
      .
      R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 gupdate;Servicio Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
      R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560]
      R3 gupdatem;Servicio de Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
      R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
      R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
      R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
      S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
      S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
      S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
      S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
      S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
      S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
      S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]
      S2 MBAMService;MBAMService;c:\program files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe [2012-01-13 652360]
      S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
      S2 vToolbarUpdater;vToolbarUpdater;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [2012-01-18 909152]
      S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
      S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [x]
      S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [x]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
      .
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
      hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      ezSharedSvc
      .
      Contents of the 'Scheduled Tasks' folder
      .
      2012-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 19:01]
      .
      2012-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 19:01]
      .
      2012-02-09 c:\windows\Tasks\HPCeeScheduleForManolo.job
      - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 03:22]
      .
      2012-01-31 c:\windows\Tasks\PCDRScheduledMaintenance.job
      - c:\program files\PC-Doctor for Windows\pcdrcui.exe [2009-09-18 07:11]
      .
      .
      --------- x86-64 -----------
      .
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-09-14 610360]
      "PC-Doctor for Windows localizer"="c:\program files\PC-Doctor for Windows\localizer.exe" [2009-09-17 95728]
      "combofix"="c:\combofix\CF13092.3XE" [2010-11-20 345088]
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      zebrmdm
      .
      ------- Supplementary Scan -------
      .
      uStart Page = hxxp://www.google.es/
      uLocal Page = c:\windows\system32\blank.htm
      mLocal Page = c:\windows\SysWOW64\blank.htm
      uInternet Settings,ProxyOverride = *.local
      TCP: DhcpNameServer = 212.142.144.66 212.142.144.98
      Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
      .
      - - - - ORPHANS REMOVED - - - -
      .
      BHO-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
      Toolbar-{95B7759C-8C7F-4BF1-B163-73684A933233} - (no file)
      WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
      .
      .
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
      @Denied: (2) (LocalSystem)
      "{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:51,66,7a,6c,4c,1d,38,12,df,c1,0b,
      27,57,07,ba,54,e4,0e,43,d0,22,fb,89,5b
      "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1,
      38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4
      "{AA58ED58-01DD-4D91-8333-CF10577473F7}"=hex:51,66,7a,6c,4c,1d,38,12,36,ee,4b,
      ae,ef,4f,ff,08,fc,25,8c,50,52,2a,37,e3
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
      @Denied: (2) (LocalSystem)
      "Timestamp"=hex:15,5b,3e,69,93,de,cc,01
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.10"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker4"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
      @Denied: (Full) (Everyone)
      .
      ------------------------ Other Running Processes ------------------------
      .
      c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
      c:\program files (x86)\Bonjour\mDNSResponder.exe
      c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
      c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
      .
      **************************************************************************
      .
      Completion time: 2012-02-14 20:06:28 - machine was rebooted
      ComboFix-quarantined-files.txt 2012-02-14 19:06
      ComboFix2.txt 2012-02-09 22:13
      ComboFix3.txt 2012-02-09 21:48
      .
      Pre-Run: 550.631.698.432 bytes libres
      Post-Run: 550.032.793.600 bytes libres
      .
      - - End Of File - - E262D9C348E0C493D74E65074038F1E8

    4. #4
      Moderador Gral.
      Avatar de Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      54.902

      Re: Problemas con abnow, mediashifting, AVG 2012 y firewall de Windows

      Hola de nuevo

      Realiza lo siguiente :

      • Clic en INICIO > EJECUTAR >
        • Y ahí pones notepad.exe y ACEPTAR
        • Ahora copia y pega el texto del cuadro de mas abajo dentro del Notepad


      Código:
      KillAll::
      ClearJavaCache::
      File::
      c:\windows\5B210B8AB66E4702B44D0D6F388D29EB.TMP
      Folder::
      c:\windows\system32\%APPDATA%
      c:\users\Manolo\AppData\Local\5dec8e46
      NetSvc:: 
      zebrmdm


      • Guarda este archivo con el nombre CFScript.txt
      • Arrastra y suelta el archivo CFScript.txt dentro del archivo ComboFix.exe como lo muestra el screenshot de abajo.



      • ComboFix comenzará otra vez a ejecutarse. Cuando termine generara un nuevo reporte que tendras que pegar en este mismo tema.




      Después de reiniciar, comprobas en funcionamiento y nos comentás.



      saludos

      `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.· No Desesperes.....Seguí Luchando `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.·

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    5. #5
      Usuario Avatar de ilarranaga
      Registrado
      feb 2012
      Ubicación
      Euskal Herria
      Mensajes
      4

      Re: Problemas con abnow, mediashifting, AVG 2012 y firewall de Windows

      Hola,

      esta vez parece que sí, tras un reinicio dudoso en el que no podía ejecutar nada porque Windows decía que estaban intentado acceder a un registro marcado para su eliminación, han desaparecido las redirecciones.
      Malwarebytes me ha detectado 9 amenazas más, pero esta vez los ha eliminado sin problemas.
      Además he eliminado las herramientas utilizadas, incluido Combofix /uninstall, y he instalado AVG 2012 Free de forma correcta.
      Parece que todo ha vuelto a la normalidad.

      Muchas gracias por vuestra ayuda!!


      ilarranaga has reported a post.

      Reason:
      Perdona, no había visto el último post. He ejecutado ComboFix una vez más con el script y este es el log. AVG 2012 me dice que el PC está limpio. ¿Algún otro paso pendiente?
      Gracias!!


      ComboFix 12-02-13.01 - Manolo 14/02/2012 22:02:05.4.4 - x64
      Microsoft Windows 7 Home Premium 6.1.7601.1.1252.34.3082.18.3959.1874 [GMT 1:00]
      Running from: c:\users\Manolo\Desktop\ComboFix.exe
      Command switches used :: c:\users\Manolo\Desktop\CFScript.txt
      AV: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {5A2746B1-DEE9-F85A-FBCD-ADB11639C5F0}
      SP: AVG Anti-Virus Free Edition 2012 *Disabled/Updated* {E146A755-F8D3-F7D4-C17D-96C36DBE8F4D}
      SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      .
      FILE ::
      "c:\windows\5B210B8AB66E4702B44D0D6F388D29EB.TMP"
      .
      .
      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\users\Manolo\AppData\Local\5dec8e46
      c:\users\Manolo\AppData\Local\5dec8e46\@
      c:\users\Manolo\AppData\Local\5dec8e46\loader.tlb
      c:\windows\assembly\tmp\U
      .
      .
      ((((((((((((((((((((((((( Files Created from 2012-01-14 to 2012-02-14 )))))))))))))))))))))))))))))))
      .
      .
      2012-02-14 21:05 . 2012-02-14 21:05 -------- d-----w- c:\users\Default\AppData\Local\temp
      2012-02-14 20:16 . 2012-02-14 21:11 -------- d-----w- c:\program files (x86)\MALWAREBYTES ANTI-MALWARE
      2012-02-14 19:39 . 2012-02-14 19:40 -------- d-----w- c:\program files (x86)\AVG Secure Search
      2012-02-14 19:39 . 2012-02-14 19:39 -------- d-----w- c:\windows\SysWow64\drivers\AVG
      2012-02-14 19:39 . 2012-02-14 20:08 -------- d-----w- c:\windows\system32\drivers\AVG
      2012-02-14 19:38 . 2012-02-14 19:38 -------- d-----w- c:\program files (x86)\AVG
      2012-02-14 19:27 . 2012-02-14 19:27 -------- d-----w- c:\users\Manolo\AppData\Roaming\GlarySoft
      2012-02-14 18:12 . 2012-02-14 18:12 -------- d-----w- c:\program files (x86)\Common Files\Java
      2012-02-08 20:04 . 2012-02-08 20:04 -------- d-----w- c:\users\Manolo\AppData\Roaming\Malwarebytes
      2012-02-08 20:04 . 2012-02-14 20:06 -------- d-----w- c:\programdata\Malwarebytes
      2012-02-04 23:15 . 2012-02-05 08:23 -------- d-----w- c:\program files (x86)\STOPzilla!
      2012-02-04 23:15 . 2012-02-04 23:15 -------- d-----w- c:\program files (x86)\Common Files\iS3
      2012-02-04 23:14 . 2012-02-04 23:16 -------- d-----w- c:\programdata\STOPzilla!
      2012-02-04 21:50 . 2012-02-04 21:50 -------- d-----w- C:\$AVG
      2012-02-04 21:01 . 2012-02-09 20:05 -------- d-----w- c:\program files\CCleaner
      2012-02-04 19:50 . 2012-02-09 06:43 -------- d-----w- c:\program files (x86)\Panda Security
      2012-02-04 19:41 . 2012-02-04 19:36 16432 ----a-w- c:\windows\system32\lsdelete.exe
      2012-02-04 19:35 . 2012-02-09 06:44 -------- d-----w- c:\programdata\Lavasoft
      2012-02-04 19:35 . 2012-02-09 06:43 -------- d-----w- c:\program files (x86)\Lavasoft
      2012-02-04 19:23 . 2012-02-09 04:42 -------- d-----w- c:\program files\Enigma Software Group
      2012-02-04 19:23 . 2012-02-04 21:28 -------- d-----w- C:\sh4ldr
      2012-02-04 19:23 . 2012-02-09 04:24 -------- d-----w- c:\windows\5B210B8AB66E4702B44D0D6F388D29EB.TMP
      2012-01-29 15:20 . 2012-01-29 15:20 414368 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl
      2012-01-29 14:36 . 2012-02-09 06:46 -------- d-----w- c:\windows\system32\Macromed
      2012-01-29 14:34 . 2012-02-09 06:47 -------- d-sh--w- c:\windows\system32\%APPDATA%
      .
      .
      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2011-11-24 04:52 . 2011-12-15 07:36 3145216 ----a-w- c:\windows\system32\win32k.sys
      2011-11-19 14:58 . 2012-01-11 12:45 77312 ----a-w- c:\windows\system32\packager.dll
      2011-11-19 14:01 . 2012-01-11 12:45 67072 ----a-w- c:\windows\SysWow64\packager.dll
      2011-11-17 06:41 . 2012-01-11 12:45 1731920 ----a-w- c:\windows\system32\ntdll.dll
      2011-11-17 05:38 . 2012-01-11 12:45 1292080 ----a-w- c:\windows\SysWow64\ntdll.dll
      .
      .
      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4
      .
      [HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\URLSearchHooks]
      "{00000000-6E41-4FD3-8538-502F5495E5FC}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
      "{82b24b66-fdb1-48c2-8f6a-9610f965b280}"= "c:\program files (x86)\pc_gear_es\prxtbpc_g.dll" [2011-03-28 176936]
      .
      [HKEY_CLASSES_ROOT\clsid\{00000000-6e41-4fd3-8538-502f5495e5fc}]
      .
      [HKEY_CLASSES_ROOT\clsid\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{30F9B915-B755-4826-820B-08FBA6BD249D}]
      2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\ConduitEngine\prxConduitEngin.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      2011-03-28 16:22 176936 ----a-w- c:\program files (x86)\pc_gear_es\prxtbpc_g.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{95B7759C-8C7F-4BF1-B163-73684A933233}]
      2012-02-14 19:39 1811296 ----a-w- c:\program files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll
      .
      [HKEY_LOCAL_MACHINE\Wow6432Node\~\Browser Helper Objects\{D4027C7F-154A-4066-A1AD-4243D8127440}]
      2012-01-03 15:31 1514152 ----a-w- c:\program files (x86)\Ask.com\GenericAskToolbar.dll
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar]
      "{D4027C7F-154A-4066-A1AD-4243D8127440}"= "c:\program files (x86)\Ask.com\GenericAskToolbar.dll" [2012-01-03 1514152]
      "{82b24b66-fdb1-48c2-8f6a-9610f965b280}"= "c:\program files (x86)\pc_gear_es\prxtbpc_g.dll" [2011-03-28 176936]
      "{30F9B915-B755-4826-820B-08FBA6BD249D}"= "c:\program files (x86)\ConduitEngine\prxConduitEngin.dll" [2011-03-28 176936]
      "{95B7759C-8C7F-4BF1-B163-73684A933233}"= "c:\program files (x86)\AVG Secure Search\10.0.0.7\AVG Secure Search_toolbar.dll" [2012-02-14 1811296]
      .
      [HKEY_CLASSES_ROOT\clsid\{d4027c7f-154a-4066-a1ad-4243d8127440}]
      [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd.1]
      [HKEY_CLASSES_ROOT\TypeLib\{2996F0E7-292B-4CAE-893F-47B8B1C05B56}]
      [HKEY_CLASSES_ROOT\GenericAskToolbar.ToolbarWnd]
      .
      [HKEY_CLASSES_ROOT\clsid\{82b24b66-fdb1-48c2-8f6a-9610f965b280}]
      .
      [HKEY_CLASSES_ROOT\clsid\{30f9b915-b755-4826-820b-08fba6bd249d}]
      .
      [HKEY_CLASSES_ROOT\clsid\{95b7759c-8c7f-4bf1-b163-73684a933233}]
      [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj.1]
      [HKEY_CLASSES_ROOT\AVG Secure Search.PugiObj]
      .
      [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "HPADVISOR"="c:\program files (x86)\Hewlett-Packard\HP Advisor\HPAdvisor.exe" [2009-09-29 1685048]
      "swg"="c:\program files (x86)\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2010-10-29 39408]
      "LightScribe Control Panel"="c:\program files (x86)\Common Files\LightScribe\LightScribeControlPanel.exe" [2009-08-20 2363392]
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run]
      "hpsysdrv"="c:\program files (x86)\hewlett-packard\HP odometer\hpsysdrv.exe" [2008-11-20 62768]
      "IAStorIcon"="c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" [2009-10-02 284696]
      "StartCCC"="c:\program files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" [2009-09-08 98304]
      "HP Software Update"="c:\program files (x86)\HP\HP Software Update\HPWuSchd2.exe" [2008-12-08 54576]
      "NortonOnlineBackupReminder"="c:\program files (x86)\Symantec\Norton Online Backup\Activation\NobuActivation.exe" [2009-06-29 600936]
      "Easybits Recovery"="c:\program files (x86)\EasyBits For Kids\ezRecover.exe" [2009-09-02 60464]
      "hpqSRMon"="c:\program files (x86)\HP\Digital Imaging\bin\hpqSRMon.exe" [2008-07-22 150528]
      "QuickTime Task"="c:\program files (x86)\QuickTime\QTTask.exe" [2010-11-29 421888]
      "iTunesHelper"="c:\program files (x86)\iTunes\iTunesHelper.exe" [2011-07-19 421736]
      "NBAgent"="c:\program files (x86)\Nero\Nero 10\Nero BackItUp\NBAgent.exe" [2010-03-26 1234216]
      "ApnUpdater"="c:\program files (x86)\Ask.com\Updater\Updater.exe" [2012-01-03 1391272]
      "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696]
      "AVG_TRAY"="c:\program files (x86)\AVG\AVG2012\avgtray.exe" [2012-01-24 2416480]
      "vProt"="c:\program files (x86)\AVG Secure Search\vprot.exe" [2012-02-14 939872]
      "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-01-03 37296]
      "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-02 843712]
      .
      c:\users\Manolo\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\
      OpenOffice.org 3.2.lnk - c:\program files (x86)\OpenOffice.org 3\program\quickstart.exe [2010-5-20 1195008]
      .
      c:\programdata\Microsoft\Windows\Start Menu\Programs\Startup\
      HP Digital Imaging Monitor.lnk - c:\program files (x86)\hp\Digital Imaging\bin\hpqtra08.exe [2009-9-20 270336]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
      "ConsentPromptBehaviorAdmin"= 5 (0x5)
      "ConsentPromptBehaviorUser"= 3 (0x3)
      "EnableUIADesktopToggle"= 0 (0x0)
      "EnableLinkedConnections"= 1 (0x1)
      .
      [hkey_local_machine\software\Wow6432Node\microsoft\windows\currentversion\explorer\ShellExecuteHooks]
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32]
      "aux"=wdmaud.drv
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      BootExecute REG_MULTI_SZ autocheck autochk *\0c:\progra~2\AVG\AVG2012\avgrsa.exe /sync /restart
      .
      R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384]
      R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576]
      R2 gupdate;Servicio Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
      R2 HP Support Assistant Service;HP Support Assistant Service;c:\program files (x86)\Hewlett-Packard\HP Support Framework\hpsa_service.exe [2011-06-21 85560]
      R3 gupdatem;Servicio de Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 136176]
      R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x]
      R3 USBAAPL64;Apple Mobile USB Driver;c:\windows\system32\Drivers\usbaapl64.sys [x]
      R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x]
      S0 AVGIDSEH;AVGIDSEH;c:\windows\system32\DRIVERS\AVGIDSEH.Sys [x]
      S0 Avgrkx64;AVG Anti-Rootkit Driver;c:\windows\system32\DRIVERS\avgrkx64.sys [x]
      S1 Avgldx64;AVG AVI Loader Driver;c:\windows\system32\DRIVERS\avgldx64.sys [x]
      S1 Avgmfx64;AVG Mini-Filter Resident Anti-Virus Shield;c:\windows\system32\DRIVERS\avgmfx64.sys [x]
      S1 Avgtdia;AVG TDI Driver;c:\windows\system32\DRIVERS\avgtdia.sys [x]
      S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x]
      S2 AMD External Events Utility;AMD External Events Utility;c:\windows\system32\atiesrxx.exe [x]
      S2 AVGIDSAgent;AVGIDSAgent;c:\program files (x86)\AVG\AVG2012\AVGIDSAgent.exe [2011-10-12 4433248]
      S2 avgwd;WatchDog de AVG;c:\program files (x86)\AVG\AVG2012\avgwdsvc.exe [2011-08-02 192776]
      S2 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-10-21 196176]
      S2 BBUpdate;BBUpdate;c:\program files (x86)\Microsoft\BingBar\SeaPort.EXE [2011-10-13 249648]
      S2 ezSharedSvc;Easybits Shared Services for Windows;c:\windows\system32\svchost.exe [2009-07-14 27136]
      S2 HPDrvMntSvc.exe;HP Quick Synchronization Service;c:\program files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe [2011-03-28 94264]
      S2 IAStorDataMgrSvc;Intel(R) Rapid Storage Technology;c:\program files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [2009-10-02 13336]
      S2 NAUpdate;Nero Update;c:\program files (x86)\Nero\Update\NASvc.exe [2010-03-25 490280]
      S2 vToolbarUpdater;vToolbarUpdater;c:\program files (x86)\Common Files\AVG Secure Search\vToolbarUpdater\10.0.6\ToolbarUpdater.exe [2012-01-18 909152]
      S3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\DRIVERS\AVGIDSDriver.Sys [x]
      S3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\DRIVERS\AVGIDSFilter.Sys [x]
      S3 HECIx64;Intel(R) Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x]
      S3 netr28x;Ralink 802.11n Extensible Wireless Driver;c:\windows\system32\DRIVERS\netr28x.sys [x]
      S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys [x]
      .
      .
      [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\svchost]
      hpdevmgmt REG_MULTI_SZ hpqcxs08 hpqddsvc
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      ezSharedSvc
      .
      Contents of the 'Scheduled Tasks' folder
      .
      2012-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 19:01]
      .
      2012-02-14 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
      - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2010-10-29 19:01]
      .
      2012-02-09 c:\windows\Tasks\HPCeeScheduleForManolo.job
      - c:\program files (x86)\Hewlett-Packard\HP Ceement\HPCEE.exe [2009-10-07 03:22]
      .
      2012-01-31 c:\windows\Tasks\PCDRScheduledMaintenance.job
      - c:\program files\PC-Doctor for Windows\pcdrcui.exe [2009-09-18 07:11]
      .
      .
      --------- x86-64 -----------
      .
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "SmartMenu"="c:\program files\Hewlett-Packard\HP MediaSmart\SmartMenu.exe" [2009-09-14 610360]
      "PC-Doctor for Windows localizer"="c:\program files\PC-Doctor for Windows\localizer.exe" [2009-09-17 95728]
      .
      HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Svchost - NetSvcs
      zebrmdm
      .
      ------- Supplementary Scan -------
      .
      uStart Page = hxxp://www.google.es/
      uLocal Page = c:\windows\system32\blank.htm
      mLocal Page = c:\windows\SysWOW64\blank.htm
      uInternet Settings,ProxyOverride = *.local
      TCP: DhcpNameServer = 212.142.144.66 212.142.144.98
      Handler: viprotocol - {B658800C-F66E-4EF3-AB85-6C0C227862A9} - c:\program files (x86)\Common Files\AVG Secure Search\ViProtocolInstaller\10.0.6\ViProtocol.dll
      .
      - - - - ORPHANS REMOVED - - - -
      .
      WebBrowser-{D4027C7F-154A-4066-A1AD-4243D8127440} - (no file)
      .
      .
      .
      --------------------- LOCKED REGISTRY KEYS ---------------------
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\Approved Extensions]
      @Denied: (2) (LocalSystem)
      "{2318C2B1-4965-11D4-9B18-009027A5CD4F}"=hex:51,66,7a,6c,4c,1d,38,12,df,c1,0b,
      27,57,07,ba,54,e4,0e,43,d0,22,fb,89,5b
      "{3CA2F312-6F6E-4B53-A66E-4E65E497C8C0}"=hex:51,66,7a,6c,4c,1d,38,12,7c,f0,b1,
      38,5c,21,3d,0e,d9,78,0d,25,e1,c9,8c,d4
      "{AA58ED58-01DD-4D91-8333-CF10577473F7}"=hex:51,66,7a,6c,4c,1d,38,12,36,ee,4b,
      ae,ef,4f,ff,08,fc,25,8c,50,52,2a,37,e3
      .
      [HKEY_USERS\.Default\Software\Microsoft\Internet Explorer\ApprovedExtensionsMigration]
      @Denied: (2) (LocalSystem)
      "Timestamp"=hex:15,5b,3e,69,93,de,cc,01
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}]
      @Denied: (A 2) (Everyone)
      @="FlashBroker"
      "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe,-101"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation]
      "Enabled"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil11e_ActiveX.exe"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Shockwave Flash Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus]
      @="0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID]
      @="ShockwaveFlash.ShockwaveFlash.10"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="ShockwaveFlash.ShockwaveFlash"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}]
      @Denied: (A 2) (Everyone)
      @="Macromedia Flash Factory Object"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx"
      "ThreadingModel"="Apartment"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID]
      @="FlashFactory.FlashFactory.1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32]
      @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash11e.ocx, 1"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib]
      @="{D27CDB6B-AE6D-11cf-96B8-444553540000}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version]
      @="1.0"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID]
      @="FlashFactory.FlashFactory"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}]
      @Denied: (A 2) (Everyone)
      @="IFlashBroker4"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32]
      @="{00020424-0000-0000-C000-000000000046}"
      .
      [HKEY_LOCAL_MACHINE\software\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib]
      @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}"
      "Version"="1.0"
      .
      [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security]
      @Denied: (Full) (Everyone)
      .
      ------------------------ Other Running Processes ------------------------
      .
      c:\program files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
      c:\program files (x86)\Bonjour\mDNSResponder.exe
      c:\program files (x86)\Common Files\LightScribe\LSSrvc.exe
      c:\program files (x86)\Hewlett-Packard\TouchSmart\Media\Kernel\CLML\CLMLSvc.exe
      .
      **************************************************************************
      .
      Completion time: 2012-02-14 22:15:56 - machine was rebooted
      ComboFix-quarantined-files.txt 2012-02-14 21:15
      ComboFix2.txt 2012-02-14 19:06
      ComboFix3.txt 2012-02-09 22:13
      ComboFix4.txt 2012-02-09 21:48
      .
      Pre-Run: 550.714.966.016 bytes libres
      Post-Run: 550.433.136.640 bytes libres
      .
      - - End Of File - - 16433A285A2C27B7807C9B4222638202

    6. #6
      Moderador Gral.
      Avatar de Leosolari
      Registrado
      jun 2007
      Ubicación
      Argentina
      Mensajes
      54.902

      Re: Problemas con abnow, mediashifting, AVG 2012 y firewall de Windows

      Por cualquier otro problema, no dudes en volver a postear


      Tema Solucionado


      Si deseas REABRIR ESTE TEMA, presiona y Tu consulta serà atendida



      Te dejo saludos.



      Como recomendación final, te invitamos a seguirnos en nuestros canales de difusión: Blog, Twitter, Facebook, vía E-Mail, para estar al tanto de los nuevos malwares y como prevenirlos.

      `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.· No Desesperes.....Seguí Luchando `·.¸¸.·´´¯`··._.· ·.¸¸.·´´¯`··._.·

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.