Desintalar toolbars y comodo (Solucionado)

**DoPeY-BBS** · 09/05/12, 13:52:58

Fixeado pero aun sigue igual

¿pego el otro reporte luego de haber fixeado?

Encontre un log con estas direcciones

[04.05.2012 18:51:23:390|000854|record] record: RegQueryValueExW failed
[04.05.2012 18:51:23:390|000858|record] RegCloseKey call failed .

**Xtreme Hero** · 10/05/12, 13:55:24

Hola de nuevo,

Por favor,pega un nuevo reporte

Salu2

**DoPeY-BBS** · 10/05/12, 15:45:58

Hola
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 03:43:13 p.m., on 10/05/2012
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\S3trayp.exe
C:\Archivos de programa\AVAST Software\Avast\avastUI.exe
C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbguard.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\OpenOffice.org 3\program\soffice.exe
C:\Archivos de programa\OpenOffice.org 3\program\soffice.bin
C:\WINDOWS\system32\S3LoadSv.exe
C:\WINDOWS\System32\PAStiSvc.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbserver.exe
C:\WINDOWS\system32\wscntfy.exe
C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe
C:\Archivos de programa\Windows Live\Contacts\wlcomm.exe
C:\Archivos de programa\SpacialAudio\SAMBC\SAMBC.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\Mozilla Firefox\plugin-container.exe
C:\Archivos de programa\Mozilla Firefox\plugin-container.exe
C:\Archivos de programa\TypingMaster\tmaster.exe
C:\Archivos de programa\Trend Micro\HiJackThis\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre6\bin\ssv.dll
O2 - BHO: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O3 - Toolbar: avast! WebRep - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll
O4 - HKLM\..\Run: [S3Trayp] S3trayp.exe
O4 - HKLM\..\Run: [avast] "C:\Archivos de programa\AVAST Software\Avast\avastUI.exe" /nogui
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [Malwarebytes' Anti-Malware] "C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Archivos de programa\Adobe\Reader 9.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [Adobe ARM] "C:\Archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe"
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - S-1-5-18 Startup: OpenOffice.org 3.3.lnk = C:\Archivos de programa\OpenOffice.org 3\program\quickstart.exe (User 'SYSTEM')
O4 - .DEFAULT Startup: OpenOffice.org 3.3.lnk = C:\Archivos de programa\OpenOffice.org 3\program\quickstart.exe (User 'Default user')
O4 - Startup: OpenOffice.org 3.3.lnk = C:\Archivos de programa\OpenOffice.org 3\program\quickstart.exe
O20 - AppInit_DLLs:
O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe Flash Player Update Service (AdobeFlashPlayerUpdateSvc) - Adobe Systems Incorporated - C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe
O23 - Service: avast! Antivirus - AVAST Software - C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Firebird Guardian - DefaultInstance (FirebirdGuardianDefaultInstance) - Firebird Project - C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbguard.exe
O23 - Service: Firebird Server - DefaultInstance (FirebirdServerDefaultInstance) - Firebird Project - C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbserver.exe
O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
O23 - Service: MBAMService - Malwarebytes Corporation - C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: S3LoadSv - S3 Graphics Co., Inc. - C:\WINDOWS\system32\S3LoadSv.exe
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: STI Simulator - Unknown owner - C:\WINDOWS\System32\PAStiSvc.exe
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\WINDOWS\system32\tlntsvr.exe
O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe

--
End of file - 7489 bytes

Te comento que tanto la particion c como en la d hay logs carpetas y demás de comodo

**Xtreme Hero** · 12/05/12, 08:23:55

Hola de nuevo,

Borra esos residuos de los archivos

Por favor,saca un nuevo reporte de OTL.

Salu2

**DoPeY-BBS** · 12/05/12, 14:42:27

Saludos..

La carpeta Qoobox en la partición c contienes logs y subcarpetas de comodo y me sale error "no se puede eliminar por problemas de escritura, compruebe que el disco no este lleno" yo creo que este es el problema.

**Xtreme Hero** · 14/05/12, 15:37:59

Hola de nuevo,

Por favor,pega un nuevo reporte de OTL.

Salu2

**DoPeY-BBS** · 14/05/12, 16:55:17

Perdón, ¿a herramienta la utilizo con los mismo parametros o sin nada en particular en la caja de texto?

**Xtreme Hero** · 14/05/12, 16:55:55

Hola de nuevo,

Con los parámetros que te indiqué en anteriores respuestas

Salu2

**DoPeY-BBS** · 14/05/12, 17:15:55

OTL logfile created on: 14/05/2012 05:02:43 p.m. - Run 2
OTL by OldTimer - Version 3.2.42.2 Folder = D:\Descargas
Windows XP Professional Edition Service Pack 2 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 00001C0A | Country: República Dominicana | Language: ESD | Date Format: dd/MM/yyyy

1.94 Gb Total Physical Memory | 1.35 Gb Available Physical Memory | 69.71% Memory free
3.78 Gb Paging File | 3.35 Gb Available in Paging File | 88.57% Paging File free
Paging file location(s): C:\pagefile.sys 2046 4092 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 9.77 Gb Total Space | 1.02 Gb Free Space | 10.46% Space Free | Partition Type: NTFS
Drive D: | 288.31 Gb Total Space | 218.27 Gb Free Space | 75.71% Space Free | Partition Type: NTFS

Computer Name: FERRER-3BDA9ED2 | User Name: DoPeY-BBS | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/04/29 11:08:12 | 000,595,456 | ---- | M] (OldTimer Tools) -- D:\Descargas\OTL.exe
PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/03/06 20:15:17 | 004,241,512 | ---- | M] (AVAST Software) -- C:\Archivos de programa\AVAST Software\Avast\AvastUI.exe
PRC - [2012/03/06 20:15:14 | 000,044,768 | ---- | M] (AVAST Software) -- C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe
PRC - [2012/01/18 14:02:04 | 000,254,696 | ---- | M] (Sun Microsystems, Inc.) -- C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
PRC - [2011/10/03 08:30:32 | 000,098,304 | ---- | M] (Firebird Project) -- C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbguard.exe
PRC - [2011/10/03 08:30:20 | 003,764,224 | ---- | M] (Firebird Project) -- C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbserver.exe
PRC - [2011/01/17 19:09:28 | 011,314,688 | ---- | M] (OpenOffice.org) -- C:\Archivos de programa\OpenOffice.org 3\program\soffice.bin
PRC - [2011/01/17 19:09:26 | 011,322,880 | ---- | M] (OpenOffice.org) -- C:\Archivos de programa\OpenOffice.org 3\program\soffice.exe
PRC - [2005/01/14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe
PRC - [2004/08/19 18:42:48 | 001,034,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [1999/12/31 20:00:00 | 000,577,536 | ---- | M] (Realtek Semiconductor Corp.) -- C:\WINDOWS\soundman.exe
PRC - [1999/12/31 20:00:00 | 000,199,168 | ---- | M] (S3 Graphics Co., Ltd.) -- C:\WINDOWS\system32\S3Trayp.exe
PRC - [1999/12/31 20:00:00 | 000,069,632 | ---- | M] (S3 Graphics Co., Inc.) -- C:\WINDOWS\system32\s3loadsv.exe

========== Modules (No Company Name) ==========

MOD - [2012/05/14 03:31:05 | 001,759,232 | ---- | M] () -- C:\Archivos de programa\AVAST Software\Avast\defs\12051400\algo.dll
MOD - [2012/01/24 00:13:35 | 000,985,088 | ---- | M] () -- C:\Archivos de programa\OpenOffice.org 3\program\libxml2.dll
MOD - [2009/02/27 18:35:50 | 000,311,296 | ---- | M] () -- C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\pdfshell.ESP
MOD - [2005/01/14 09:32:38 | 000,053,248 | ---- | M] () -- C:\WINDOWS\system32\PAStiSvc.exe
MOD - [2004/08/19 18:42:16 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll

========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- %SystemRoot%\System32\hidserv.dll -- (HidServ)
SRV - [2012/05/05 03:46:29 | 000,257,696 | ---- | M] (Adobe Systems Incorporated) [On_Demand | Stopped] -- C:\WINDOWS\system32\Macromed\Flash\FlashPlayerUpdateService.exe -- (AdobeFlashPlayerUpdateSvc)
SRV - [2012/04/20 21:16:42 | 000,129,976 | ---- | M] (Mozilla Foundation) [On_Demand | Stopped] -- C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe -- (MozillaMaintenance)
SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/03/06 20:15:14 | 000,044,768 | ---- | M] (AVAST Software) [Auto | Running] -- C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe -- (avast! Antivirus)
SRV - [2011/10/03 08:30:32 | 000,098,304 | ---- | M] (Firebird Project) [Auto | Running] -- C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbguard.exe -- (FirebirdGuardianDefaultInstance)
SRV - [2011/10/03 08:30:20 | 003,764,224 | ---- | M] (Firebird Project) [On_Demand | Running] -- C:\Archivos de programa\Firebird\Firebird_2_5\bin\fbserver.exe -- (FirebirdServerDefaultInstance)
SRV - [2005/01/14 09:32:38 | 000,053,248 | ---- | M] () [Auto | Running] -- C:\WINDOWS\system32\PAStiSvc.exe -- (STI Simulator)
SRV - [1999/12/31 20:00:00 | 000,069,632 | ---- | M] (S3 Graphics Co., Inc.) [Auto | Running] -- C:\WINDOWS\system32\s3loadsv.exe -- (S3LoadSv)

========== Driver Services (SafeList) ==========

DRV - File not found [Kernel | On_Demand | Stopped] -- -- (WDICA)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\vulfntr.sys -- (vulfntrs)
DRV - File not found [Kernel | On_Demand | Stopped] -- C:\WINDOWS\System32\Drivers\vulfnth.sys -- (vulfnths)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDRELI)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDFRAME)
DRV - File not found [Kernel | On_Demand | Stopped] -- -- (PDCOMP)
DRV - File not found [Kernel | System | Stopped] -- -- (PCIDump)
DRV - File not found [Kernel | System | Stopped] -- -- (lbrtfdc)
DRV - File not found [Kernel | System | Stopped] -- -- (i2omgmt)
DRV - File not found [Kernel | System | Stopped] -- -- (Changer)
DRV - [2012/04/04 15:56:40 | 000,022,344 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\WINDOWS\system32\drivers\mbam.sys -- (MBAMProtector)
DRV - [2012/03/06 20:03:51 | 000,612,184 | ---- | M] (AVAST Software) [File_System | System | Running] -- C:\WINDOWS\System32\drivers\aswSnx.sys -- (aswSnx)
DRV - [2012/03/06 20:03:38 | 000,337,880 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswSP.sys -- (aswSP)
DRV - [2012/03/06 20:02:00 | 000,035,672 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswRdr.sys -- (AswRdr)
DRV - [2012/03/06 20:01:53 | 000,053,848 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aswTdi.sys -- (aswTdi)
DRV - [2012/03/06 20:01:39 | 000,095,704 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswmon2.sys -- (aswMon2)
DRV - [2012/03/06 20:01:30 | 000,020,696 | ---- | M] (AVAST Software) [File_System | Auto | Running] -- C:\WINDOWS\System32\drivers\aswFsBlk.sys -- (aswFsBlk)
DRV - [2012/03/06 19:58:29 | 000,024,920 | ---- | M] (AVAST Software) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\aavmker4.sys -- (Aavmker4)
DRV - [2005/04/08 10:46:18 | 000,162,176 | ---- | M] () [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\PFC027.sys -- (PAC207)
DRV - [2004/08/04 01:59:52 | 000,040,320 | ---- | M] (Microsoft Corporation) [Kernel | On_Demand | Stopped] -- C:\WINDOWS\system32\drivers\nmnt.sys -- (nm)
DRV - [1999/12/31 20:00:00 | 004,122,368 | ---- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\alcxwdm.sys -- (ALCXWDM) Service for Realtek AC97 Audio (WDM)
DRV - [1999/12/31 20:00:00 | 000,596,992 | ---- | M] (S3 Graphics Co., Ltd.) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\S3gIGPm.sys -- (S3GIGP)
DRV - [1999/12/31 20:00:00 | 000,023,192 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\xfilt.sys -- (xfilt)
DRV - [1999/12/31 20:00:00 | 000,013,976 | ---- | M] (VIA Technologies, Inc.) [Kernel | Boot | Running] -- C:\WINDOWS\system32\drivers\videX32.sys -- (videX32)

========== Standard Registry (SafeList) ==========

========== Internet Explorer ==========

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src={referrer:source?}
IE - HKLM\..\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}: "URL" = http://isearch.glarysoft.com/?q={searchTerms}&src=iesearch

IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://latam.msn.com/?ocid=iehp
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-do
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 70 89 C4 DC D9 2A CD 01 [binary data]
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes,DefaultScope = {c1d89ae7-449d-4929-b24b-fded04adbe06}
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://search.live.com/results.aspx?q={searchTerms}&src=IE-SearchBox&Form=IE8SRC
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes\{171DEBEB-C3D4-40b7-AC73-056A5EBA4A7E}: "URL" = http://websearch.ask.com/redirect?client=ie&tb=IMB&o=15785&src=crm&q={searchTerms}&locale=&apn_ptnrs=HQ&apn_dtid=YYYYYYYYDO&apn_uid=ec42dee8-dce9-4bf1-9ee8-78248208c0de&apn_sauid=9F23F356-044E-462D-B4E3-CD28945E5296
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes\{3BD44F0E-0596-4008-AEE0-45D47E3A8F0E}: "URL" =
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes\{95B7759C-8C7F-4BF1-B163-73684A933233}: "URL" = http://isearch.avg.com/search?cid={2AF1AC32-D616-430C-BA71-E38E11CB1D58}&mid=3ad9d854ae5c47d0bb86f14d54d4d328-06ce4fc639803a2e3563922518183d8e94088cb9&lang=es&ds=ts026&pr=sa&d=2012-03-27 15:50:08&v=10.2.0.3&sap=dsp&q={searchTerms}
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\..\SearchScopes\{c1d89ae7-449d-4929-b24b-fded04adbe06}: "URL" = http://isearch.glarysoft.com/?q={searchTerms}&src=iesearch
IE - HKU\S-1-5-21-583907252-515967899-839522115-1003\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - user.js - File not found

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32_11_2_202_235.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Archivos de programa\Java\jre6\bin\plugin2\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Archivos de programa\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Documents and Settings\DoPeY-BBS\Configuración local\Datos de programa\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\[email protected]: C:\Archivos de programa\AVAST Software\Avast\WebRep\FF [2012/03/20 14:37:49 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2012/04/30 14:49:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 12.0\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins

[2012/04/30 14:49:27 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\DoPeY-BBS\Datos de programa\Mozilla\Extensions
[2012/05/02 01:17:38 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\DoPeY-BBS\Datos de programa\Mozilla\Firefox\Profiles\s1po0id2.default\extensions
[2012/04/30 14:49:09 | 000,000,000 | ---D | M] (No name found) -- C:\Archivos de programa\Mozilla Firefox\extensions
[2012/04/20 21:18:00 | 000,097,208 | ---- | M] (Mozilla Foundation) -- C:\Archivos de programa\mozilla firefox\components\browsercomps.dll
[2012/03/27 15:50:01 | 000,003,749 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\avg-secure-search.xml
[2012/04/20 22:47:15 | 000,002,252 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\bing.xml
[2012/04/20 22:47:15 | 000,003,996 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\drae.xml
[2012/04/20 22:47:15 | 000,001,143 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\eBay-es.xml
[2012/03/01 23:14:24 | 000,001,567 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\glarysearch.xml
[2012/04/20 22:47:15 | 000,002,040 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\twitter.xml
[2012/04/20 22:47:15 | 000,001,178 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\wikipedia-es.xml
[2012/04/20 22:47:15 | 000,001,102 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\yahoo-es.xml

O1 HOSTS File: ([2012/04/29 19:26:21 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre6\bin\ssv.dll (Sun Microsystems, Inc.)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Windows Live Aplicación auxiliar de inicio de sesión) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O4 - HKLM..\Run: [Adobe ARM] C:\Archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avast] C:\Archivos de programa\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [S3Trayp] C:\WINDOWS\System32\S3Trayp.exe (S3 Graphics Co., Ltd.)
O4 - HKLM..\Run: [SoundMan] C:\WINDOWS\soundman.exe (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - Startup: C:\Documents and Settings\DoPeY-BBS\Menú Inicio\Programas\Inicio\OpenOffice.org 3.3.lnk = C:\Archivos de programa\OpenOffice.org 3\program\quickstart.exe ()
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKU\.DEFAULT\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-18\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-18\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-19\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-20\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-20\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O7 - HKU\S-1-5-21-583907252-515967899-839522115-1003\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKU\S-1-5-21-583907252-515967899-839522115-1003\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab (Java Plug-in 1.6.0_31)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload.macromedia.com/pub/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.0.1 196.3.81.5 200.88.127.22
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{36A10DB3-A09D-4012-8DD0-BF1E828CC6CA}: DhcpNameServer = 10.0.0.1 196.3.81.5 200.88.127.22
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2012/01/17 19:58:14 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: 6to4 - File not found
NetSvcs: HidServ - %SystemRoot%\System32\hidserv.dll File not found
NetSvcs: Ias - File not found
NetSvcs: Iprip - File not found
NetSvcs: Irmon - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: WmdmPmSp - File not found

MsConfig - State: "system.ini" - 0
MsConfig - State: "win.ini" - 0
MsConfig - State: "bootini" - 0
MsConfig - State: "services" - 0
MsConfig - State: "startup" - 0

CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1056

========== Files/Folders - Created Within 30 Days ==========

[2012/05/09 16:01:34 | 000,000,000 | -HSD | C] -- C:\Config.Msi
[2012/05/09 15:56:14 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Adobe
[2012/05/07 04:30:22 | 000,000,000 | ---D | C] -- C:\WINDOWS\System32\CatRoot_bak
[2012/05/04 18:59:19 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\DoPeY-BBS\Recent
[2012/05/04 18:45:05 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Comodo
[2012/05/03 19:59:47 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menú Inicio\Programas\Recuva
[2012/05/03 19:59:46 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Recuva
[2012/04/30 22:22:14 | 000,000,000 | ---D | C] -- C:\Documents and Settings\DoPeY-BBS\Datos de programa\TypingMaster7
[2012/04/30 22:22:09 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menú Inicio\Programas\TypingMaster
[2012/04/30 22:22:04 | 000,000,000 | R--D | C] -- C:\Archivos de programa\TypingMaster
[2012/04/30 16:25:52 | 000,000,000 | -HSD | C] -- C:\RECYCLER
[2012/04/30 15:12:14 | 000,607,260 | R--- | C] (Swearware) -- C:\Documents and Settings\DoPeY-BBS\Escritorio\dds.scr
[2012/04/30 14:49:13 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Mozilla Maintenance Service
[2012/04/29 19:54:24 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\mspaint.exe
[2012/04/29 19:54:24 | 000,346,624 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\System32\dllcache\mspaint.exe
[2012/04/29 19:24:59 | 000,000,000 | ---D | C] -- C:\WINDOWS\temp
[2012/04/29 12:58:12 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2012/04/29 12:56:21 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2012/04/29 12:56:21 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2012/04/29 12:56:21 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2012/04/29 12:56:21 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2012/04/29 12:56:14 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2012/04/29 12:54:27 | 000,000,000 | ---D | C] -- C:\Qoobox
[2012/04/29 12:54:23 | 000,000,000 | R--D | C] -- C:\Documents and Settings\DoPeY-BBS\Mis documentos\Mis vídeos
[2012/04/28 18:53:17 | 000,419,488 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/04/28 10:56:59 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Menú Inicio\Programas\Defraggler
[2012/04/28 10:56:58 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Defraggler
[2012/04/27 14:33:43 | 000,000,000 | ---D | C] -- C:\Archivos de programa\VS Revo Group
[2012/04/27 14:33:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\DoPeY-BBS\Menú Inicio\Programas\Revo Uninstaller
[2012/04/23 18:54:43 | 000,000,000 | ---D | C] -- C:\Documents and Settings\All Users\Datos de programa\Mozilla
[2012/04/15 00:42:03 | 000,000,000 | ---D | C] -- C:\Documents and Settings\DoPeY-BBS\Mis documentos\Mis archivos recibidos
[2012/04/14 20:18:30 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\DoPeY-BBS\PrivacIE
[2012/04/14 20:12:05 | 000,000,000 | -HSD | C] -- C:\Documents and Settings\DoPeY-BBS\IETldCache
[2012/04/14 20

06 | 000,000,000 | ---D | C] -- C:\WINDOWS\WBEM
[2012/04/14 20:09:09 | 000,000,000 | -H-D | C] -- C:\WINDOWS\ie8
[2012/04/14 18:34:30 | 000,000,000 | -H-D | C] -- C:\WINDOWS\$hf_mig$
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/14 16:46:00 | 000,000,838 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/05/14 15:44:05 | 000,304,160 | ---- | M] () -- C:\StiImg.dat
[2012/05/14 14:07:39 | 000,000,334 | ---- | M] () -- C:\WINDOWS\tasks\GlaryInitialize.job
[2012/05/14 14:07:30 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2012/05/11 14:21:16 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2012/05/10 15:43:01 | 000,002,499 | ---- | M] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\HiJackThis.lnk
[2012/05/09 16:02:08 | 000,001,764 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Adobe Reader 9.lnk
[2012/05/05 03:46:28 | 000,419,488 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerApp.exe
[2012/05/05 03:46:28 | 000,070,304 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\System32\FlashPlayerCPLApp.cpl
[2012/05/03 19:59:47 | 000,001,575 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Recuva.lnk
[2012/04/30 22:22:09 | 000,000,822 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\TypingMaster Pro.lnk
[2012/04/30 15:12:18 | 000,607,260 | R--- | M] (Swearware) -- C:\Documents and Settings\DoPeY-BBS\Escritorio\dds.scr
[2012/04/30 14:49:17 | 000,000,773 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Mozilla Firefox.lnk
[2012/04/29 19:54:27 | 000,523,406 | ---- | M] () -- C:\WINDOWS\System32\perfh00A.dat
[2012/04/29 19:54:27 | 000,457,758 | ---- | M] () -- C:\WINDOWS\System32\perfh009.dat
[2012/04/29 19:54:27 | 000,098,362 | ---- | M] () -- C:\WINDOWS\System32\perfc00A.dat
[2012/04/29 19:54:27 | 000,075,818 | ---- | M] () -- C:\WINDOWS\System32\perfc009.dat
[2012/04/29 19:26:21 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts.msn
[2012/04/29 19:26:21 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2012/04/29 16:09:52 | 000,000,465 | ---- | M] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\Acceso directo a ComboFix.exe.lnk
[2012/04/29 12:58:15 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2012/04/28 23:17:29 | 000,025,330 | ---- | M] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\lol.jpg
[2012/04/27 14:33:43 | 000,000,966 | ---- | M] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\Revo Uninstaller.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/10 13:45:59 | 032,318,655 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\Libro-Final-Facil-v4.pdf
[2012/05/09 15:56:36 | 000,001,764 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Adobe Reader 9.lnk
[2012/05/09 15:56:34 | 000,002,347 | ---- | C] () -- C:\Documents and Settings\All Users\Menú Inicio\Programas\Adobe Reader 9.lnk
[2012/05/03 19:59:47 | 000,001,575 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Recuva.lnk
[2012/04/30 22:22:09 | 000,000,822 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\TypingMaster Pro.lnk
[2012/04/30 14:49:17 | 000,000,773 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\Mozilla Firefox.lnk
[2012/04/30 14:49:16 | 000,000,779 | ---- | C] () -- C:\Documents and Settings\All Users\Menú Inicio\Programas\Mozilla Firefox.lnk
[2012/04/29 16:09:52 | 000,000,465 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\Acceso directo a ComboFix.exe.lnk
[2012/04/29 12:58:15 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2012/04/29 12:58:13 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2012/04/29 12:56:21 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2012/04/29 12:56:21 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2012/04/29 12:56:21 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2012/04/29 12:56:21 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2012/04/29 12:56:21 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2012/04/28 23:17:28 | 000,025,330 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\lol.jpg
[2012/04/28 18:53:19 | 000,000,838 | ---- | C] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2012/04/27 14:33:43 | 000,000,966 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Escritorio\Revo Uninstaller.lnk
[2012/04/22 02:06:46 | 000,304,160 | ---- | C] () -- C:\StiImg.dat
[2012/04/14 20:18:10 | 000,000,838 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Menú Inicio\Programas\Internet Explorer.lnk
[2012/04/14 18:08:05 | 000,000,827 | ---- | C] () -- C:\Documents and Settings\DoPeY-BBS\Menú Inicio\Programas\Reproductor de Windows Media.lnk
[2012/03/27 17:40:44 | 000,004,998 | ---- | C] () -- C:\Documents and Settings\All Users\Datos de programa\mtbjfghn.xbe
[2012/03/27 16:26:14 | 000,045,056 | ---- | C] () -- C:\WINDOWS\System32\vusetup.dll
[2012/03/27 16:21:33 | 000,049,152 | ---- | C] () -- C:\WINDOWS\System32\ChCfg.exe
[2012/03/27 15:59:23 | 001,769,472 | ---- | C] () -- C:\WINDOWS\System32\VTROM.bin
[2012/01/17 23:17:44 | 000,053,248 | ---- | C] () -- C:\WINDOWS\System32\PAStiSvc.exe
[2012/01/17 20:25:35 | 000,147,456 | ---- | C] () -- C:\WINDOWS\System32\RtlCPAPI.dll
[2012/01/17 20:00:19 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2012/01/17 19:55:01 | 000,021,900 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2012/01/17 14:46:33 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2012/01/17 14:45:11 | 000,121,336 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT

========== Custom Scans ==========

< %systemroot%\System32\config\*.sav >
[2012/01/17 15:44:34 | 000,094,208 | ---- | M] () -- C:\WINDOWS\System32\config\default.sav
[2012/01/17 15:44:33 | 000,724,992 | ---- | M] () -- C:\WINDOWS\System32\config\software.sav
[2012/01/17 15:44:33 | 000,475,136 | ---- | M] () -- C:\WINDOWS\System32\config\system.sav

< %SYSTEMDRIVE%\*.* >
[2012/01/17 19:58:14 | 000,000,000 | ---- | M] () -- C:\AUTOEXEC.BAT
[2012/04/14 13:02:00 | 000,000,211 | ---- | M] () -- C:\Boot.bak
[2012/04/29 12:58:15 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2001/08/24 06:00:00 | 000,004,952 | RHS- | M] () -- C:\Bootfont.bin
[2004/08/03 23:00:00 | 000,260,272 | RHS- | M] () -- C:\cmldr
[2012/01/17 19:58:14 | 000,000,000 | ---- | M] () -- C:\CONFIG.SYS
[2012/01/17 19:58:14 | 000,000,000 | RHS- | M] () -- C:\IO.SYS
[2012/01/17 19:58:14 | 000,000,000 | RHS- | M] () -- C:\MSDOS.SYS
[2004/08/04 01:38:34 | 000,047,564 | RHS- | M] () -- C:\NTDETECT.COM
[2004/08/04 01:59:42 | 000,250,640 | RHS- | M] () -- C:\ntldr
[2012/05/14 14:07:27 | 2145,386,496 | -HS- | M] () -- C:\pagefile.sys
[2012/05/14 15:44:05 | 000,304,160 | ---- | M] () -- C:\StiImg.dat

< %appdata%\* >
[2012/01/17 14:46:02 | 000,000,062 | -HS- | M] () -- C:\Documents and Settings\DoPeY-BBS\Datos de programa\desktop.ini

< End of report >

**Xtreme Hero** · 16/05/12, 04:15:31

Hola de nuevo,

Realiza lo siguiente:

Desinstala Mozilla Firefox con Revo uninstaller en su opción avanzada.

Ejecuta OTL.exe

1.- Copiar el siguiente texto (excluyendo la palabra Código):

Código:

:OTL
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
C:\Documents and Settings\All Users\Datos de programa\mtbjfghn.xbe

:Commands
[PURITY] 
[RESETHOSTS]
[EMPTYFLASH]
[EMPTYTEMP]
[CREATERESTOREPOINT]

2.- Pegar el contenido sobre el apartado: Análisis Personalizados /Código de Reparación.

3.- Presionar el botón Reparar para comenzar el procedimiento. Presionar OK.

OTL va a reiniciar el ordenador para completar el procedimiento.

Guardar el nuevo reporte generado. Copiar y pegarlo en su próxima respuesta, comentando como funciona el Sistema.

Reinstala Firefox y nos comentas si sigue ocurriendo el problema

Salu2

Desintalar toolbars y comodo (Solucionado)

Herramientas

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo

Re: Desintalar toolbars y comodo