Re: PC bloqueado por mensaje de policia

Buenos dias, a mi lo mismo, seguí los pasos, se me reinició solo y sigue igual. Que más se puede hacer? debería salvar lo que pueda desde el modo seguro y formatear?
Gracias por adelantado y un saludo.

Muchas gracias por la bienvenida y por la ayuda.

He seguido tres sistemas.

1º use el antimalware solo y me salieron un monton de avisos, reinicié y ahi seguía
2º use el rkill y el antimalware que en este caso me dió 0 avisos, reinicié y ahí seguía.
3º usé el polifix siguiendo el tutorial pero tras un rato con el mensaje de "recopilando información del sistema", me aparece mnsje se va a cerrar sesión y se me reinicia.

La única diferencia que noto es que antes nada más arrancar se me bloqueaba con la imagen del virus y ahora hace como que carga, me aparecen los iconos, el mesenger, se cargan un par de programas y de pronto todo en negro y vuelve a aparecer la imagen. ¿Que opinais?
Sigo pudiendo entrar en modo seguro sin ningún problema. Voy a ver si mañana puedo poner los logs que he usado, que no tengo aqui a mano el pc pornógrafo

Aqui pongo los log del malware y del polifix. Muchisimas gracias por el interés que estáis mostrando, de verdad. No veo opción de adjuntar archivos, asi que os hago un corta pega.


#################################################### PoliFix by InfoSpyware ############

Polifix Versión 2.0.2 By InfoSpyware
Windows Vista 32 Bits
Fecha: 28/05/2012
Hora: 17:42:57
Java no detectado

--------------------------------- Malware eliminado by PoliFix ---------------------------------



--------------------------------- Valores WINLOGON y USERINIT ---------------------------------


HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Shell REG_SZ Explorer.exe




HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Winlogon
Userinit REG_SZ C:\Windows\system32\userinit.exe


-------------------------------------- Valores claves RUN -------------------------------------

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run
Windows Defender REG_EXPAND_SZ %ProgramFiles%\Windows Defender\MSASCui.exe -hide
RtHDVCpl REG_SZ RtHDVCpl.exe
Acer Empowering Technology Monitor REG_SZ C:\Acer\Empowering Technology\SysMonitor.exe
eDataSecurity Loader REG_SZ C:\Acer\Empowering Technology\eDataSecurity\x86\eDSloader.exe
RemoteControl REG_SZ "C:\Program Files\CyberLink\PowerDVD\PDVDServ.exe"
LanguageShortcut REG_SZ "C:\Program Files\CyberLink\PowerDVD\Language\Language.exe"
mcagent_exe REG_SZ C:\Program Files\McAfee.com\Agent\mcagent.exe /runkey
Adobe Reader Speed Launcher REG_SZ "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
NvSvc REG_SZ RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
NvCplDaemon REG_SZ RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
NvMediaCenter REG_SZ RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
Google Desktop Search REG_SZ "C:\Program Files\Google\Google Desktop Search\GoogleDesktop.exe" /startup
Apanel REG_SZ C:\ACERSW\config\SetApanel.cmd
WarReg_PopUp REG_SZ C:\Acer\WR_PopUp\WarReg_PopUp.exe
eRecoveryService REG_SZ
NVRaidService REG_SZ C:\Windows\system32\nvraidservice.exe
fssui REG_SZ "C:\Program Files\Windows Live\Protección infantil\fssui.exe" -autorun
HP Software Update REG_SZ C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
EEventManager REG_SZ C:\PROGRA~1\EPSONS~1\EVENTM~1\EEventManager.exe
comeo REG_SZ "C:\Users\PEDROYVIRGINIA\AppData\Local\comeo\comeo.exe"
Malwarebytes' Anti-Malware REG_SZ "C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray

HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\Run\OptionalComponents

HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\Run
WindowsWelcomeCenter REG_SZ rundll32.exe oobefldr.dll,ShowWelcomeCenter
MsnMsgr REG_SZ "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
swg REG_SZ "C:\Program Files\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
EPSON SX210 Series REG_SZ C:\Windows\system32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE /FU "C:\Windows\TEMP\E_SB6B1.tmp" /EF "HKCU"
Facebook Update REG_SZ "C:\Users\PEDROYVIRGINIA\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver
PC Suite Tray REG_SZ "C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe" -onlytray
WMPNSCFG REG_SZ C:\Program Files\Windows Media Player\WMPNSCFG.exe
cqgqclltkxjeljz REG_SZ C:\ProgramData\cqgqclltkxjeljzuxeca.exe


HKEY_LOCAL_MACHINE\Software\Microsoft\Windows\CurrentVersion\RunOnce
eojet.exe REG_SZ C:\Users\PEDROYVIRGINIA\AppData\Local\eojet\eojet.exe -runonce



------------------------------------------- LISTING -----------------------------------------

- Carpeta temporal -

El volumen de la unidad C es ACER
El número de serie del volumen es: 9011-CD03

Directorio de C:\Users\PEDROY~1\AppData\Local\Temp

28/05/2012 17:42 <DIR> .
28/05/2012 17:42 <DIR> ..
28/05/2012 17:42 <DIR> Polifix
1 archivos 21.177 bytes
3 dirs 123.791.941.632 bytes libres

- Carpeta Datos de Programas -

El volumen de la unidad C es ACER
El número de serie del volumen es: 9011-CD03

Directorio de C:\Users\PEDROYVIRGINIA\AppData\Roaming

24/05/2012 12:54 <DIR> .
24/05/2012 12:54 <DIR> ..
24/04/2008 06:12 <DIR> Acer GameZone Console
19/09/2011 12:14 <DIR> Adobe
02/06/2010 10:38 <DIR> Bandoo
29/11/2008 16:43 <DIR> CyberLink
17/05/2011 18:43 <DIR> Epson
29/11/2008 17:43 <DIR> eSobi
19/09/2011 12:27 <DIR> FotoPrix
29/11/2008 17:41 <DIR> Google
29/11/2008 18:27 <DIR> HP
29/11/2008 10:38 <DIR> Identities
17/05/2011 19:33 <DIR> Image Zone Express
12/12/2011 17:20 <DIR> Imaxel
07/11/2009 09:05 <DIR> InstallShield
29/11/2008 10:59 <DIR> Macromedia
24/05/2012 11:30 <DIR> Malwarebytes
30/11/2008 01:16 <DIR> Media Player Classic
27/02/2011 15:19 <DIR> Nero
19/07/2010 15:22 <DIR> Nokia
03/10/2009 20:07 <DIR> OpenOffice.org
23/10/2011 11:15 <DIR> PC Suite
17/05/2011 13:51 <DIR> Printer Info Cache
14/06/2009 17:38 <DIR> Template
27/05/2011 16:29 <DIR> TuAlbum.09E811A49857C99F38513E5AB8806E09FBF6F7FA.1
20/09/2011 13:25 439 TuAlbum_state.xml
14/06/2009 17:38 0 wklnhst.dat
2 archivos 439 bytes
25 dirs 123.791.937.536 bytes libres

#################################################### PoliFix - Search Log -Finalizado- ############


Aqui el primero de malwarebytes:

Malwarebytes Anti-Malware (Versión de Prueba) 1.61.0.1400
www.malwarebytes.org

Versión de la Base de Datos: v2012.05.24.01

Windows Vista Service Pack 2 x86 NTFS (Modo Seguro/Red)
Internet Explorer 9.0.8112.16421
PEDROYVIRGINIA :: PEDROYVIRGINIA1 [administrador]

Protección: Personas de movilidad reducida

24/05/2012 11:50:02
mbam-log-2012-05-24 (11-50-02).txt

Tipos de Análisis: Análisis Completo
Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opciones de análisis desactivados: P2P
Objetos examinados: 537733
Tiempo transcurrido: 54 minuto(s), 52 segundo(s)

Procesos en Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Módulos de Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Claves del Registro Detectados: 11
HKCR\CLSID\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCR\EoEngineBHO.EOBHO.1 (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCR\EoEngineBHO.EOBHO (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{C10DC1F4-CCDF-4224-A24D-B23AFC3573C8} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCR\TypeLib\{18AF7201-4F14-4BCF-93FE-45617CF259FF} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCR\Interface\{DF76E9B7-35EC-46FC-AF56-5B79DED9D64F} (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
HKCU\Software\EoRezo (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
HKLM\SOFTWARE\EoRezo (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\eoRezo_is1 (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.

Valores del Registro Detectados: 2
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|eorezo (Adware.EoRezo) -> datos: "C:\Program Files\EoRezo\eorezo.exe" -> En cuarentena y eliminado con éxito.
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\RunOnce|SoftwareHelper (Trojan.Eorezo) -> datos: C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\SoftwareUpdateHP.exe -runonce -> En cuarentena y eliminado con éxito.

Elementos de Datos del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Carpetas Detectadas: 7
C:\Program Files\eoRezo (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\Download (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\Download\su (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\Download\su\2.0.0.2192191 (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\Software (Adware.EoRezo) -> En cuarentena y eliminado con éxito.

Archivos Detectados: 14
C:\Users\PEDROYVIRGINIA\Downloads\SoftonicDownloader_para_malwarebytes-anti-malware.exe (PUP.ToolbarDownloader) -> No se tomaron medidas.
C:\Program Files\eoRezo\eorezo.exe (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\SoftwareUpdateHP.exe (Trojan.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Program Files\eoRezo\EoRezoBHO.dll (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Local\VirtualStore\Windows\infocard.exb (Worm.Bot.Gen) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EngineUninstallHelper.exe (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\SoftwareUpdate.exe (Trojan.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Program Files\eoRezo\ConfMedia.cyp (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Program Files\eoRezo\unins000.dat (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Program Files\eoRezo\unins000.exe (Rogue.Eorezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\install.exe (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\help_config.cyp (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\user_config.cyp (Adware.EoRezo) -> En cuarentena y eliminado con éxito.
C:\Users\PEDROYVIRGINIA\AppData\Roaming\EoRezo\EoRezo\user_profil.cyp (Adware.EoRezo) -> En cuarentena y eliminado con éxito.

fin)


Aqui el segundo y sucesivos del malwarebytes, todos iguales:

Malwarebytes Anti-Malware (Versión de Prueba) 1.61.0.1400
www.malwarebytes.org

Versión de la Base de Datos: v2012.05.24.01

Windows Vista Service Pack 2 x86 NTFS (Modo Seguro/Red)
Internet Explorer 9.0.8112.16421
PEDROYVIRGINIA :: PEDROYVIRGINIA1 [administrador]

Protección: Personas de movilidad reducida

24/05/2012 13:33:54
mbam-log-2012-05-24 (13-33-54).txt

Tipos de Análisis: Análisis Rápido
Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opciones de análisis desactivados: P2P
Objetos examinados: 211437
Tiempo transcurrido: 5 minuto(s), 3 segundo(s)

Procesos en Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Módulos de Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Claves del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Valores del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Carpetas Detectadas: 0
(No se han detectado elementos maliciosos)

Archivos Detectados: 1
C:\Users\PEDROYVIRGINIA\Downloads\SoftonicDownloader_para_malwarebytes-anti-malware.exe (PUP.ToolbarDownloader) -> En cuarentena y eliminado con éxito.

fin)


Y por último el del rkill:

This log file is located at C:\rkill.log.
Please post this only if requested to by the person helping you.
Otherwise you can close this log when you wish.

Rkill was run on 24/05/2012 at 17:17:49.
Operating System: Windows Vista (TM) Home Basic


Processes terminated by Rkill or while it was running:

C:\Windows\system32\conime.exe
C:\Windows\system32\conime.exe


Rkill completed on 24/05/2012 at 17:17:52.

otl txt:

OTL logfile created on: 30/05/2012 13:05:07 - Run 1
OTL by OldTimer - Version 3.2.44.0 Folder = C:\Users\PEDROYVIRGINIA\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

2,75 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 82,92% Memory free
5,70 Gb Paging File | 5,41 Gb Available in Paging File | 94,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 294,33 Gb Total Space | 115,16 Gb Free Space | 39,12% Space Free | Partition Type: NTFS
Drive D: | 294,03 Gb Total Space | 129,38 Gb Free Space | 44,00% Space Free | Partition Type: NTFS
Drive J: | 1,89 Gb Total Space | 0,95 Gb Free Space | 50,40% Space Free | Partition Type: FAT

Computer Name: PEDROYVIRGINIA1 | User Name: PEDROYVIRGINIA | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\PEDROYVIRGINIA\Downloads\OTL (2).exe (OldTimer Tools)
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Archivos de programa\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
PRC - c:\Archivos de programa\McAfee\MSC\mcuimgr.exe (McAfee, Inc.)
PRC - c:\Archivos de programa\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
PRC - C:\Archivos de programa\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)


========== Modules (No Company Name) ==========


========== Win32 Services (SafeList) ==========

SRV - (MBAMService) -- C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
SRV - (BBUpdate) -- C:\Archivos de programa\Microsoft\BingBar\7.1.361.0\SeaPort.EXE (Microsoft Corporation.)
SRV - (BBSvc) -- C:\Archivos de programa\Microsoft\BingBar\7.1.361.0\BBSvc.EXE (Microsoft Corporation.)
SRV - (McAfee SiteAdvisor Service) -- C:\Archivos de programa\McAfee\SiteAdvisor\McSACore.exe (McAfee, Inc.)
SRV - (ModuloActualizacion) -- C:\Users\PEDROYVIRGINIA\AppData\Local\ModuloActualizacion\ModuloActualizacion.exe ()
SRV - (odserv) -- C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ServiceLayer) -- C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe (Nokia)
SRV - (fsssvc) -- C:\Archivos de programa\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)
SRV - (NetTcpPortSharing) -- C:\Windows\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\SMSvcHost.exe (Microsoft Corporation)
SRV - (NMSAccess32) -- C:\Windows\System32\NMSAccess32.exe ()
SRV - (eDataSecurity Service) -- C:\Acer\Empowering Technology\eDataSecurity\x86\eDSService.exe (Egis Incorporated)
SRV - (McNASvc) -- c:\Archivos de programa\Common Files\McAfee\MNA\McNASvc.exe (McAfee, Inc.)
SRV - (WMPNetworkSvc) -- C:\Archivos de programa\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (RemoteAccess) -- C:\Windows\System32\mprdim.dll (Microsoft Corporation)
SRV - (SharedAccess) -- C:\Windows\System32\ipnathlp.dll (Microsoft Corporation)
SRV - (WinDefend) -- C:\Archivos de programa\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (mcmscsvc) -- C:\Archivos de programa\McAfee\MSC\mcmscsvc.exe (McAfee, Inc.)
SRV - (eSettingsService) -- C:\Acer\Empowering Technology\eSettings\Service\capuserv.exe ()
SRV - (McSysmon) -- C:\Archivos de programa\McAfee\VirusScan\mcsysmon.exe (McAfee, Inc.)
SRV - (MSK80Service) -- C:\Archivos de programa\McAfee\MSK\msksrver.exe (McAfee, Inc.)
SRV - (McODS) -- C:\Archivos de programa\McAfee\VirusScan\mcods.exe (McAfee, Inc.)
SRV - (AcerMemUsageCheckService) -- C:\Acer\Empowering Technology\ePerformance\MemCheck.exe ()
SRV - (eRecoveryService) -- C:\Acer\Empowering Technology\eRecovery\eRecoveryService.exe (Acer Inc.)
SRV - (McProxy) -- c:\Archivos de programa\Common Files\McAfee\McProxy\McProxy.exe (McAfee, Inc.)
SRV - (McShield) -- C:\Archivos de programa\McAfee\VirusScan\Mcshield.exe (McAfee, Inc.)
SRV - (MpfService) -- C:\Archivos de programa\McAfee\MPF\MpfSrv.exe (McAfee, Inc.)
SRV - (ose) -- C:\Archivos de programa\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV - (NwlnkFwd) -- system32\DRIVERS\nwlnkfwd.sys File not found
DRV - (NwlnkFlt) -- system32\DRIVERS\nwlnkflt.sys File not found
DRV - (IpInIp) -- system32\DRIVERS\ipinip.sys File not found
DRV - (MBAMProtector) -- C:\Windows\System32\drivers\mbam.sys (Malwarebytes Corporation)
DRV - (UsbserFilt) -- C:\Windows\System32\drivers\usbser_lowerfltj.sys (Nokia)
DRV - (upperdev) -- C:\Windows\System32\drivers\usbser_lowerflt.sys (Nokia)
DRV - (nmwcdc) -- C:\Windows\System32\drivers\ccdcmbo.sys (Nokia)
DRV - (nmwcd) -- C:\Windows\System32\drivers\ccdcmb.sys (Nokia)
DRV - (udfs) -- C:\Windows\System32\drivers\udfs.sys (Microsoft Corporation)
DRV - (pccsmcfd) -- C:\Windows\System32\drivers\pccsmcfd.sys (Nokia)
DRV - (nvstor32) -- C:\Windows\System32\drivers\nvstor32.sys (NVIDIA Corporation)
DRV - (nvrd32) -- C:\Windows\System32\drivers\nvrd32.sys (NVIDIA Corporation)
DRV - (nvlddmkm) -- C:\Windows\System32\drivers\nvlddmkm.sys (NVIDIA Corporation)
DRV - (ws2ifsl) -- C:\Windows\System32\drivers\ws2ifsl.sys (Microsoft Corporation)
DRV - (adpu320) -- C:\Windows\System32\drivers\adpu320.sys (Adaptec, Inc.)
DRV - (megasas) -- C:\Windows\System32\drivers\megasas.sys (LSI Corporation)
DRV - (MegaSR) -- C:\Windows\System32\drivers\MegaSR.sys (LSI Corporation, Inc.)
DRV - (adpu160m) -- C:\Windows\System32\drivers\adpu160m.sys (Adaptec, Inc.)
DRV - (SiSRaid4) -- C:\Windows\System32\drivers\sisraid4.sys (Silicon Integrated Systems)
DRV - (HpCISSs) -- C:\Windows\System32\drivers\HpCISSs.sys (Hewlett-Packard Company)
DRV - (adpahci) -- C:\Windows\System32\drivers\adpahci.sys (Adaptec, Inc.)
DRV - (LSI_SAS) -- C:\Windows\System32\drivers\lsi_sas.sys (LSI Logic)
DRV - (SiSRaid2) -- C:\Windows\System32\drivers\sisraid2.sys (Microsoft Corporation)
DRV - (circlass) -- C:\Windows\System32\drivers\circlass.sys (Microsoft Corporation)
DRV - (ql2300) -- C:\Windows\System32\drivers\ql2300.sys (QLogic Corporation)
DRV - (arcsas) -- C:\Windows\System32\drivers\arcsas.sys (Adaptec, Inc.)
DRV - (iaStorV) -- C:\Windows\System32\drivers\iaStorV.sys (Intel Corporation)
DRV - (vsmraid) -- C:\Windows\System32\drivers\vsmraid.sys (VIA Technologies Inc.,Ltd)
DRV - (ulsata2) -- C:\Windows\System32\drivers\ulsata2.sys (Promise Technology, Inc.)
DRV - (LSI_FC) -- C:\Windows\System32\drivers\lsi_fc.sys (LSI Logic)
DRV - (arc) -- C:\Windows\System32\drivers\arc.sys (Adaptec, Inc.)
DRV - (sffdisk) -- C:\Windows\System32\drivers\sffdisk.sys (Microsoft Corporation)
DRV - (elxstor) -- C:\Windows\System32\drivers\elxstor.sys (Emulex)
DRV - (LSI_SCSI) -- C:\Windows\System32\drivers\lsi_scsi.sys (LSI Logic)
DRV - (IPMIDRV) -- C:\Windows\System32\drivers\IPMIDrv.sys (Microsoft Corporation)
DRV - (msdsm) -- C:\Windows\System32\drivers\msdsm.sys (Microsoft Corporation)
DRV - (nvstor) -- C:\Windows\System32\drivers\nvstor.sys (NVIDIA Corporation)
DRV - (adp94xx) -- C:\Windows\System32\drivers\adp94xx.sys (Adaptec, Inc.)
DRV - (uliahci) -- C:\Windows\System32\drivers\uliahci.sys (ULi Electronics Inc.)
DRV - (mpio) -- C:\Windows\System32\drivers\mpio.sys (Microsoft Corporation)
DRV - (fdc) -- C:\Windows\System32\drivers\fdc.sys (Microsoft Corporation)
DRV - (flpydisk) -- C:\Windows\System32\drivers\flpydisk.sys (Microsoft Corporation)
DRV - (sermouse) -- C:\Windows\System32\drivers\sermouse.sys (Microsoft Corporation)
DRV - (usbuhci) -- C:\Windows\System32\drivers\usbuhci.sys (Microsoft Corporation)
DRV - (i2omp) -- C:\Windows\System32\drivers\i2omp.sys (Microsoft Corporation)
DRV - (rdpdr) -- C:\Windows\System32\drivers\rdpdr.sys (Microsoft Corporation)
DRV - (isapnp) -- C:\Windows\System32\drivers\isapnp.sys (Microsoft Corporation)
DRV - (blbdrive) -- C:\Windows\System32\drivers\blbdrive.sys (Microsoft Corporation)
DRV - (AmdK8) -- C:\Windows\System32\drivers\amdk8.sys (Microsoft Corporation)
DRV - (ViaC7) -- C:\Windows\System32\drivers\viac7.sys (Microsoft Corporation)
DRV - (AmdK7) -- C:\Windows\System32\drivers\amdk7.sys (Microsoft Corporation)
DRV - (Processor) -- C:\Windows\System32\drivers\processr.sys (Microsoft Corporation)
DRV - (Crusoe) -- C:\Windows\System32\drivers\crusoe.sys (Microsoft Corporation)
DRV - (msahci) -- C:\Windows\System32\drivers\msahci.sys (Microsoft Corporation)
DRV - (Compbatt) -- C:\Windows\System32\drivers\compbatt.sys (Microsoft Corporation)
DRV - (viaide) -- C:\Windows\System32\drivers\viaide.sys (VIA Technologies, Inc.)
DRV - (cmdide) -- C:\Windows\System32\drivers\cmdide.sys (CMD Technology, Inc.)
DRV - (intelide) -- C:\Windows\System32\drivers\intelide.sys (Microsoft Corporation)
DRV - (amdide) -- C:\Windows\System32\drivers\amdide.sys (Microsoft Corporation)
DRV - (aliide) -- C:\Windows\System32\drivers\aliide.sys (Acer Laboratories Inc.)
DRV - (ErrDev) -- C:\Windows\System32\drivers\errdev.sys (Microsoft Corporation)
DRV - (mfesmfk) -- C:\Windows\System32\drivers\mfesmfk.sys (McAfee, Inc.)
DRV - (mfehidk) -- C:\Windows\System32\drivers\mfehidk.sys (McAfee, Inc.)
DRV - (mfeavfk) -- C:\Windows\System32\drivers\mfeavfk.sys (McAfee, Inc.)
DRV - (mfebopk) -- C:\Windows\System32\drivers\mfebopk.sys (McAfee, Inc.)
DRV - (mferkdk) -- C:\Windows\System32\drivers\mferkdk.sys (McAfee, Inc.)
DRV - (zntport) -- C:\Windows\System32\drivers\zntport.sys (Zeal SoftStudio)
DRV - (tvicport) -- C:\Windows\System32\drivers\TVicPort.sys (EnTech Taiwan)
DRV - (NVENETFD) -- C:\Windows\System32\drivers\nvmfdx32.sys (NVIDIA Corporation)
DRV - (NVHDA) -- C:\Windows\System32\drivers\nvhda32v.sys (NVIDIA Corporation)
DRV - (MPFP) -- C:\Windows\System32\drivers\Mpfp.sys (McAfee, Inc.)
DRV - (nvsmu) -- C:\Windows\System32\drivers\nvsmu.sys (NVIDIA Corporation)
DRV - (int15) -- C:\Acer\Empowering Technology\eRecovery\int15.sys (Acer, Inc.)
DRV - (pcmcia) -- C:\Windows\System32\drivers\pcmcia.sys (Microsoft Corporation)
DRV - (ql40xx) -- C:\Windows\System32\drivers\ql40xx.sys (QLogic Corporation)
DRV - (UlSata) -- C:\Windows\System32\drivers\ulsata.sys (Promise Technology, Inc.)
DRV - (nfrd960) -- C:\Windows\System32\drivers\nfrd960.sys (IBM Corporation)
DRV - (iirsp) -- C:\Windows\System32\drivers\iirsp.sys (Intel Corp./ICP vortex GmbH)
DRV - (sbp2port) -- C:\Windows\System32\drivers\sbp2port.sys (Microsoft Corporation)
DRV - (aic78xx) -- C:\Windows\System32\drivers\djsvs.sys (Adaptec, Inc.)
DRV - (iteraid) -- C:\Windows\System32\drivers\iteraid.sys (Integrated Technology Express, Inc.)
DRV - (iteatapi) -- C:\Windows\System32\drivers\iteatapi.sys (Integrated Technology Express, Inc.)
DRV - (Symc8xx) -- C:\Windows\System32\drivers\symc8xx.sys (LSI Logic)
DRV - (Sym_u3) -- C:\Windows\System32\drivers\sym_u3.sys (LSI Logic)
DRV - (Mraid35x) -- C:\Windows\System32\drivers\Mraid35x.sys (LSI Logic Corporation)
DRV - (Sym_hi) -- C:\Windows\System32\drivers\sym_hi.sys (LSI Logic)
DRV - (BTHMODEM) -- C:\Windows\System32\drivers\bthmodem.sys (Microsoft Corporation)
DRV - (HidBth) -- C:\Windows\System32\drivers\hidbth.sys (Microsoft Corporation)
DRV - (usbcir) eHome Infrared Receiver (USBCIR) -- C:\Windows\System32\drivers\usbcir.sys (Microsoft Corporation)
DRV - (HidIr) -- C:\Windows\System32\drivers\hidir.sys (Microsoft Corporation)
DRV - (WacomPen) -- C:\Windows\System32\drivers\wacompen.sys (Microsoft Corporation)
DRV - (sfloppy) -- C:\Windows\System32\drivers\sfloppy.sys (Microsoft Corporation)
DRV - (Parport) -- C:\Windows\System32\drivers\parport.sys (Microsoft Corporation)
DRV - (Brserid) Brother MFC Serial Port Interface Driver (WDM) -- C:\Windows\System32\drivers\BrSerId.sys (Brother Industries Ltd.)
DRV - (BrSerWdm) -- C:\Windows\System32\drivers\BrSerWdm.sys (Brother Industries Ltd.)
DRV - (BrUsbMdm) -- C:\Windows\System32\drivers\BrUsbMdm.sys (Brother Industries Ltd.)
DRV - (ntrigdigi) -- C:\Windows\System32\drivers\ntrigdigi.sys (N-trig Innovative Technologies)
DRV - (iaStor) -- C:\Windows\System32\drivers\iaStor.sys (Intel Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://es.es.acer.yahoo.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://homepage.acer.com/rdr.aspx?b=ACAW&l=0c0a&s=1&o=vb32&d=1108&m=aspire_m1641
IE - HKLM\..\URLSearchHook: {ba5844d2-b2c5-49eb-86f5-248d776a6f08} - C:\Archivos de programa\Uptodown\prxtbUpt0.dll (Conduit Ltd.)
IE - HKLM\..\URLSearchHook: {f04fed2f-9027-4181-8a04-9fe3c26f2865} - C:\Archivos de programa\Media_Mule\tbMedi.dll (Conduit Ltd.)
IE - HKLM\..\SearchScopes,DefaultScope = {67A2568C-7A0A-4EED-AECC-B5405DE63B64}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1892250


IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = http://es.msn.com/
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = http://www.live.com/ [binary data]
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,SearchDefaultBranded = 1
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Secondary Start Pages = http://www.live.com/ [binary data]
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://es.msn.com/
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://es.msn.com/
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 30 22 BF EE B9 64 CB 01 [binary data]
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Internet Explorer\Main,StartPageCache = 1
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\URLSearchHook: {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Archivos de programa\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\URLSearchHook: {ba5844d2-b2c5-49eb-86f5-248d776a6f08} - C:\Archivos de programa\Uptodown\prxtbUpt0.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\URLSearchHook: {f04fed2f-9027-4181-8a04-9fe3c26f2865} - C:\Archivos de programa\Media_Mule\tbMedi.dll (Conduit Ltd.)
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes,DefaultScope = {565B19AF-C3F4-47A9-B523-623EF9E7DDE8}
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{21E38442-864F-4654-A832-3EA05E2DA004}: "URL" = http://www.bing.com/search?FORM=IE8SRC&q={searchTerms}&src={referrer:source?}
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{565B19AF-C3F4-47A9-B523-623EF9E7DDE8}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=MS8TDF&pc=MS8TDF&src=IE-SearchBox
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{67A2568C-7A0A-4EED-AECC-B5405DE63B64}: "URL" = http://www.google.com/search?sourceid=ie7&q={searchTerms}&rls=com.microsoft:{language}:{referrer:source?}&ie={inputEncoding}&oe={outputEncoding}&rlz=1I7ACAW_esES303
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{70D46D94-BF1E-45ED-B567-48701376298E}: "URL" = http://127.0.0.1:4664/search&s=uEB5-AJ-DcZhauONV77PPWlBMbs?q={searchTerms}
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1892250
IE - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF - HKLM\Software\MozillaPlugins\@mcafee.com/SAFFPlugin: C:\Program Files\McAfee\SiteAdvisor\npmcffplg32.dll (McAfee, Inc.)
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: C:\Program Files\Microsoft Silverlight\4.1.10329.0\npctrl.dll ( Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeLive,version=1.3: C:\Program Files\Microsoft\Office Live\npOLW.dll (Microsoft Corp.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=14.0.8117.0416: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WPF,version=3.5: C:\Windows\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\PEDROYVIRGINIA\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{4ED1F68A-5463-4931-9384-8FFF5ED91D92}: C:\Program Files\McAfee\SiteAdvisor [2012/02/27 12:40:28 | 000,000,000 | ---D | M]


========== Chrome ==========


O1 HOSTS File: ([2006/09/18 23:41:30 | 000,000,761 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2 - BHO: (no name) - {02478D38-C3F9-4efb-9B51-7695ECA05670} - No CLSID value found.
O2 - BHO: (Aplicación auxiliar de vínculos de Adobe PDF Reader) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (McAfee Phishing Filter) - {377C180E-6F0E-4D4C-980F-F45BD3D40CF4} - c:\Archivos de programa\McAfee\MSK\mcapbho.dll ()
O2 - BHO: (Windows Live Family Safety Browser Helper Class) - {4f3ed5cd-0726-42a9-87f5-d13f3d2976ac} - C:\Archivos de programa\Windows Live\Family Safety\fssbho.dll (Microsoft Corporation)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (scriptproxy) - {7DB2D5A0-7241-4E79-B68D-6309F01C5231} - C:\Archivos de programa\McAfee\VirusScan\scriptsn.dll (McAfee, Inc.)
O2 - BHO: (ShowBarObj Class) - {83A2F9B1-01A2-4AA5-87D1-45B6B8505E96} - C:\Acer\Empowering Technology\eDataSecurity\x86\ActiveToolBand.dll (Egis)
O2 - BHO: (Windows Live Aplicación auxiliar de inicio de sesión) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Archivos de programa\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O2 - BHO: (McAfee SiteAdvisor BHO) - {B164E929-A1B6-4A06-B104-2CD0E90A88FF} - c:\Archivos de programa\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O2 - BHO: (Uptodown Toolbar) - {ba5844d2-b2c5-49eb-86f5-248d776a6f08} - C:\Archivos de programa\Uptodown\prxtbUpt0.dll (Conduit Ltd.)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Archivos de programa\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O2 - BHO: (Media Mule Toolbar) - {f04fed2f-9027-4181-8a04-9fe3c26f2865} - C:\Archivos de programa\Media_Mule\tbMedi.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (McAfee SiteAdvisor Toolbar) - {0EBBBE48-BAD4-4B4C-8E5A-516ABECAE064} - c:\Archivos de programa\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O3 - HKLM\..\Toolbar: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477e-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files\Microsoft\BingBar\7.1.361.0\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (Easy Photo Print) - {9421DD08-935F-4701-A9CA-22DF90AC4EA6} - C:\Archivos de programa\Epson Software\Easy Photo Print\EPTBL.dll (SEIKO EPSON CORPORATION / CyCom Technology Corp.)
O3 - HKLM\..\Toolbar: (Uptodown Toolbar) - {ba5844d2-b2c5-49eb-86f5-248d776a6f08} - C:\Archivos de programa\Uptodown\prxtbUpt0.dll (Conduit Ltd.)
O3 - HKLM\..\Toolbar: (Media Mule Toolbar) - {f04fed2f-9027-4181-8a04-9fe3c26f2865} - C:\Archivos de programa\Media_Mule\tbMedi.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\Toolbar\ShellBrowser: (Acer eDataSecurity Management) - {5CBE3B7C-1E47-477E-A7DD-396DB0476E29} - C:\Acer\Empowering Technology\eDataSecurity\x86\eDStoolbar.dll (Egis Incorporated.)
O3 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\Toolbar\WebBrowser: (Uptodown Toolbar) - {BA5844D2-B2C5-49EB-86F5-248D776A6F08} - C:\Archivos de programa\Uptodown\prxtbUpt0.dll (Conduit Ltd.)
O3 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..\Toolbar\WebBrowser: (Media Mule Toolbar) - {F04FED2F-9027-4181-8A04-9FE3C26F2865} - C:\Archivos de programa\Media_Mule\tbMedi.dll (Conduit Ltd.)
O4 - HKLM..\Run: [Acer Empowering Technology Monitor] C:\Acer\Empowering Technology\SysMonitor.exe ()
O4 - HKLM..\Run: [Apanel] C:\ACERSW\config\SetApanel.cmd File not found
O4 - HKLM..\Run: [comeo] C:\Users\PEDROYVIRGINIA\AppData\Local\comeo\comeo.exe ()
O4 - HKLM..\Run: [eDataSecurity Loader] C:\Acer\Empowering Technology\eDataSecurity\x86\eDSLoader.exe (Egis Incorporated)
O4 - HKLM..\Run: [EEventManager] C:\Archivos de programa\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
O4 - HKLM..\Run: [eRecoveryService] File not found
O4 - HKLM..\Run: [fssui] "C:\Program Files\Windows Live\Protección infantil\fssui.exe" -autorun File not found
O4 - HKLM..\Run: [LanguageShortcut] C:\Program Files\CyberLink\PowerDVD\Language\Language.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKLM..\Run: [mcagent_exe] C:\Program Files\McAfee.com\Agent\mcagent.exe (McAfee, Inc.)
O4 - HKLM..\Run: [NvCplDaemon] C:\Windows\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\Windows\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVRaidService] C:\Windows\System32\nvraidservice.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [NvSvc] C:\Windows\System32\nvsvc.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [RtHDVCpl] C:\Windows\RtHDVCpl.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [WarReg_PopUp] C:\Acer\WR_PopUp\WarReg_PopUp.exe (Acer Inc.)
O4 - HKLM..\Run: [Windows Defender] C:\Program Files\Windows Defender\MSASCui.exe (Microsoft Corporation)
O4 - HKU\S-1-5-19..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [cqgqclltkxjeljz] C:\ProgramData\cqgqclltkxjeljzuxeca.exe ()
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [EPSON SX210 Series] C:\Windows\System32\spool\DRIVERS\W32X86\3\E_FATIFDE.EXE (SEIKO EPSON CORPORATION)
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [Facebook Update] C:\Users\PEDROYVIRGINIA\AppData\Local\Facebook\Update\FacebookUpdate.exe (Facebook Inc.)
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [PC Suite Tray] C:\Program Files\Nokia\Nokia PC Suite 7\PCSuite.exe (Nokia)
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [WindowsWelcomeCenter] C:\Windows\System32\oobefldr.dll (Microsoft Corporation)
O4 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000..\Run: [WMPNSCFG] C:\Archivos de programa\Windows Media Player\wmpnscfg.exe (Microsoft Corporation)
O4 - HKLM..\RunOnce: [eojet.exe] C:\Users\PEDROYVIRGINIA\AppData\Local\eojet\eojet.exe (eorezo)
O4 - Startup: C:\Users\PEDROYVIRGINIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla e Inicio rápido de OneNote 2007.lnk = C:\Archivos de programa\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
O8 - Extra context menu item: Add to Windows &Live Favorites - http://favorites.live.com/quickadd.aspx File not found
O8 - Extra context menu item: Buscar en la web - C:\Program Files\SweetIM\Toolbars\Internet Explorer\resources\menuext.html File not found
O8 - Extra context menu item: E&xportar a Microsoft Excel - C:\Archivos de programa\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Archivos de programa\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O13 - gopher Prefix: missing
O15 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..Trusted Domains: localhost ([]http in Local intranet)
O15 - HKU\S-1-5-21-2151310680-1450059095-1711355055-1000\..Trusted Ranges: GD ([http] in Local intranet)
O16 - DPF: {6F15128C-E66A-490C-B848-5000B5ABEEAC} https://h20436.www2.hp.com/ediags/dex/secure/HPDEXAXO.cab (HP Download Manager)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1DDE7120-0240-4E06-B7F3-2583D6BCD24C}: DhcpNameServer = 192.168.42.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{A09BEB06-D472-4F71-ADE1-8A8C52106BDF}: DhcpNameServer = 62.42.230.24 62.42.63.52
O18 - Protocol\Handler\dssrequest {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Archivos de programa\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Archivos de programa\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Archivos de programa\Windows Live\Messenger\msgrapp.14.0.8117.0416.dll (Microsoft Corporation)
O18 - Protocol\Handler\sacore {5513F07E-936B-4E52-9B00-067394E91CC5} - c:\Archivos de programa\McAfee\SiteAdvisor\McIEPlg.dll (McAfee, Inc.)
O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Archivos de programa\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GOEC62~1.DLL) - C:\Archivos de programa\Google\Google Desktop Search\GoogleDesktopNetwork3.dll (Google)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O24 - Desktop WallPaper: C:\Users\PEDROYVIRGINIA\AppData\Roaming\Microsoft\Windows Photo Gallery\Papel tapiz de Galería fotográfica de Windows.jpg
O24 - Desktop BackupWallPaper: C:\Users\PEDROYVIRGINIA\AppData\Roaming\Microsoft\Windows Photo Gallery\Papel tapiz de Galería fotográfica de Windows.jpg
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2006/09/18 23:43:36 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found


CREATERESTOREPOINT
Unable to start System Restore Service. Error code 1084

========== Files/Folders - Created Within 30 Days ==========

[2012/05/30 10:38:26 | 000,000,000 | ---D | C] -- C:\Users\PEDROYVIRGINIA\Desktop\logs
[2012/05/28 19:14:58 | 000,000,000 | ---D | C] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\CyberLink PowerDVD
[2012/05/25 17:58:23 | 000,000,000 | R--D | C] -- C:\A SALVAR
[2012/05/24 11:30:16 | 000,000,000 | ---D | C] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Malwarebytes
[2012/05/24 11:30:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
[2012/05/24 11:30:12 | 000,022,344 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\System32\drivers\mbam.sys
[2012/05/24 11:30:12 | 000,000,000 | ---D | C] -- C:\Program Files\Malwarebytes' Anti-Malware
[2012/05/24 11:30:12 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/05/24 11:29:38 | 010,063,000 | ---- | C] (Malwarebytes Corporation ) -- C:\Users\PEDROYVIRGINIA\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/23 20:50:55 | 000,000,000 | ---D | C] -- C:\ProgramData\nxcympqyfsclvkz
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\PEDROYVIRGINIA\AppData\Local\*.tmp files -> C:\Users\PEDROYVIRGINIA\AppData\Local\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/05/30 13:05:35 | 000,022,596 | ---- | M] () -- C:\Windows\System32\Config.MPF
[2012/05/30 13:01:07 | 000,685,912 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
[2012/05/30 13:01:07 | 000,604,376 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2012/05/30 13:01:07 | 000,138,482 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
[2012/05/30 13:01:07 | 000,107,708 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2012/05/30 11:11:54 | 000,001,356 | ---- | M] () -- C:\Users\PEDROYVIRGINIA\AppData\Local\d3d9caps.dat
[2012/05/30 10:13:04 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/05/28 19:14:53 | 000,001,084 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/05/28 19:12:25 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-1.C7483456-A289-439d-8115-601632D005A0
[2012/05/28 19:12:25 | 000,003,216 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-2P-0.C7483456-A289-439d-8115-601632D005A0
[2012/05/25 13:04:13 | 000,001,088 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/05/24 11:30:13 | 000,000,910 | ---- | M] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/24 11:29:50 | 010,063,000 | ---- | M] (Malwarebytes Corporation ) -- C:\Users\PEDROYVIRGINIA\Desktop\mbam-setup-1.61.0.1400.exe
[2012/05/24 10:29:00 | 000,000,964 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2151310680-1450059095-1711355055-1000UA.job
[2012/05/23 20:50:55 | 000,000,448 | ---- | M] () -- C:\ProgramData\pngjntnprcouhyn
[2012/05/23 20:50:51 | 000,057,344 | ---- | M] () -- C:\Users\PEDROYVIRGINIA\ms.exe
[2012/05/23 20:50:51 | 000,057,344 | ---- | M] () -- C:\ProgramData\cqgqclltkxjeljzuxeca.exe
[2012/05/12 22:39:49 | 000,492,536 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
[2012/05/09 14:05:22 | 000,000,942 | ---- | M] () -- C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-2151310680-1450059095-1711355055-1000Core.job
[1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[1 C:\Users\PEDROYVIRGINIA\AppData\Local\*.tmp files -> C:\Users\PEDROYVIRGINIA\AppData\Local\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/05/24 11:30:13 | 000,000,910 | ---- | C] () -- C:\Users\Public\Desktop\Malwarebytes Anti-Malware.lnk
[2012/05/23 20:50:55 | 000,057,344 | ---- | C] () -- C:\ProgramData\cqgqclltkxjeljzuxeca.exe
[2012/05/23 20:50:52 | 000,000,448 | ---- | C] () -- C:\ProgramData\pngjntnprcouhyn
[2012/05/23 20:50:51 | 000,057,344 | ---- | C] () -- C:\Users\PEDROYVIRGINIA\ms.exe
[2011/09/20 13:25:14 | 000,000,439 | ---- | C] () -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\TuAlbum_state.xml
[2011/03/14 13:46:28 | 000,000,102 | ---- | C] () -- C:\Users\PEDROYVIRGINIA\AppData\Local\fusioncache.dat

========== LOP Check ==========

[2008/04/24 06:12:04 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\Acer GameZone Console
[2008/04/24 06:12:04 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\Acer GameZone Console
[2008/04/24 06:12:04 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Acer GameZone Console
[2010/06/02 10:38:52 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Bandoo
[2011/05/17 18:43:09 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Epson
[2008/11/29 17:43:12 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\eSobi
[2011/09/19 12:27:16 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\FotoPrix
[2011/05/17 19:33:55 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Image Zone Express
[2011/12/12 17:20:12 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Imaxel
[2010/07/19 15:22:36 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Nokia
[2009/10/03 20:07:46 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\OpenOffice.org
[2011/10/23 11:15:02 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\PC Suite
[2011/05/17 13:51:11 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Printer Info Cache
[2009/06/14 17:38:03 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\Template
[2011/05/27 16:29:08 | 000,000,000 | ---D | M] -- C:\Users\PEDROYVIRGINIA\AppData\Roaming\TuAlbum.09E811A49857C99F38513E5AB8806E09FBF6F7FA.1
[2012/05/09 14:05:22 | 000,000,942 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2151310680-1450059095-1711355055-1000Core.job
[2012/05/24 10:29:00 | 000,000,964 | ---- | M] () -- C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-2151310680-1450059095-1711355055-1000UA.job
[2010/10/15 20:06:20 | 000,000,372 | ---- | M] () -- C:\Windows\Tasks\McDefragTask.job
[2011/03/01 16:27:36 | 000,000,348 | ---- | M] () -- C:\Windows\Tasks\McQcTask.job
[2012/05/28 19:16:23 | 000,032,548 | ---- | M] () -- C:\Windows\Tasks\SCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2006/09/18 23:43:36 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2008/04/24 05:58:38 | 000,706,382 | ---- | M] () -- C:\bknowsetup.log
[2009/04/11 08:36:36 | 000,333,257 | RHS- | M] () -- C:\bootmgr
[2008/04/24 14:28:25 | 000,008,192 | R-S- | M] () -- C:\BOOTSECT.BAK
[2006/09/18 23:43:37 | 000,000,010 | ---- | M] () -- C:\config.sys
[2012/05/28 19:11:03 | 000,002,472 | ---- | M] () -- C:\mbam-log-2012-05-28 (18-07-20).txt
[2012/05/30 10:12:32 | 3265,601,536 | -HS- | M] () -- C:\pagefile.sys
[2007/04/25 17:45:58 | 000,000,631 | ---- | M] () -- C:\PDVD.iss
[2012/05/28 17:46:47 | 000,005,915 | ---- | M] () -- C:\PoliFix.txt
[2008/11/29 10:50:34 | 000,000,471 | ---- | M] () -- C:\RHDSetup.log
[2012/05/24 17:17:52 | 000,000,432 | ---- | M] () -- C:\rkill.log
[2008/04/24 05:58:38 | 000,000,032 | ---- | M] () -- C:\setup.log
[2009/04/12 18:01:31 | 000,000,594 | ---- | M] () -- C:\updatedatfix.log

< End of report >


extras.txt:

OTL Extras logfile created on: 30/05/2012 13:05:07 - Run 1
OTL by OldTimer - Version 3.2.44.0 Folder = C:\Users\PEDROYVIRGINIA\Downloads
Windows Vista Home Basic Edition Service Pack 2 (Version = 6.0.6002) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

2,75 Gb Total Physical Memory | 2,28 Gb Available Physical Memory | 82,92% Memory free
5,70 Gb Paging File | 5,41 Gb Available in Paging File | 94,85% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 294,33 Gb Total Space | 115,16 Gb Free Space | 39,12% Space Free | Partition Type: NTFS
Drive D: | 294,03 Gb Total Space | 129,38 Gb Free Space | 44,00% Space Free | Partition Type: NTFS
Drive J: | 1,89 Gb Total Space | 0,95 Gb Free Space | 50,40% Space Free | Partition Type: FAT

Computer Name: PEDROYVIRGINIA1 | User Name: PEDROYVIRGINIA | Logged in as Administrator.
Boot Mode: SafeMode with Networking | Scan Mode: All users
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\Windows\System32\control.exe (Microsoft Corporation)
.hlp [@ = hlpfile] -- C:\Windows\winhlp32.exe (Microsoft Corporation)

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
hlpfile [open] -- %SystemRoot%\winhlp32.exe %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [OneNote.Open] -- C:\PROGRA~1\MICROS~2\Office12\ONENOTE.EXE "%L" (Microsoft Corporation)
Directory [TuAlbum.es Oceania] -- "C:\Program Files\TuAlbum.es Oceania\TuAlbum.es Oceania\TuAlbum.es Oceania.exe" "%1"
Folder [open] -- %SystemRoot%\Explorer.exe /separate,/idlist,%I,%L (Microsoft Corporation)
Folder [explore] -- %SystemRoot%\Explorer.exe /separate,/e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiSpyware]
"DisableMonitoring" = 1

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0
"VistaSp1" = Reg Error: Unknown registry data type -- File not found
"VistaSp2" = Reg Error: Unknown registry data type -- File not found

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"EnableFirewall" = 0
"DisableNotifications" = 0

========== Authorized Applications List ==========


========== Vista Active Open Ports Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{7395FCE2-C74D-459A-9BE8-2E4C2A9828A6}" = lport=2869 | protocol=6 | dir=in | app=system |
"{BB1C2A97-4B8C-4B3B-BDFC-EE8196F99E2D}" = lport=1900 | protocol=17 | dir=in | svc=ssdpsrv | app=svchost.exe |

========== Vista Active Application Exception List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{19631780-4557-4F77-BB07-F6DEA325E9EB}" = protocol=17 | dir=in | app=c:\users\pedroyvirginia\appdata\local\microsoft\windows\temporary internet files\content.ie5\4s21zy3s\sweetimsetup[1].exe |
"{3ABF9827-C1F7-4F47-AE55-A4A817E45A6C}" = protocol=6 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{475C6696-DAC2-49DD-9B7E-C8CB1259A730}" = protocol=17 | dir=in | app=c:\program files\microsoft office\office12\onenote.exe |
"{4DA3DDB5-CC10-4766-8857-6A9F2EA4C96A}" = dir=in | app=c:\program files\windows live\messenger\msnmsgr.exe |
"{726C93F8-A948-4E22-979C-DC6D8250262E}" = dir=in | app=c:\program files\cyberlink\powerdirector\pdr.exe |
"{A9DFEE13-9C64-4CFF-AFF9-FF4B02922BE0}" = protocol=6 | dir=in | app=c:\users\pedroyvirginia\appdata\local\microsoft\windows\temporary internet files\content.ie5\4s21zy3s\sweetimsetup[1].exe |
"{B671753D-5479-46AB-A283-60F36BA4FFBB}" = dir=in | app=c:\program files\cyberlink\powerdvd\powerdvd.exe |
"{C1569F29-7886-4455-987E-E8486C1391C0}" = dir=in | app=c:\program files\common files\mcafee\mna\mcnasvc.exe |
"{C8369446-C243-4A2E-93AC-C78CA7167B04}" = dir=in | app=c:\program files\windows live\sync\windowslivesync.exe |
"{D17A9C29-FD6B-42D3-AEE7-A8C5FBB62F43}" = protocol=17 | dir=in | app=c:\users\pedroyvirginia\appdata\local\microsoft\windows\temporary internet files\content.ie5\pilnqavl\sweetimsetup[1].exe |
"{DC2431EF-247E-46F8-8461-3EDDE0D2A48C}" = protocol=6 | dir=in | app=c:\users\pedroyvirginia\appdata\local\microsoft\windows\temporary internet files\content.ie5\pilnqavl\sweetimsetup[1].exe |
"{E778516C-F1B7-4097-B052-5EFE55F53A15}" = dir=in | app=c:\users\pedroyvirginia\appdata\local\facebook\video\skype\facebookvideocalling.exe |

========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{01358C56-44F4-B8B3-8757-06F2A864A863}" = ATI Catalyst Install Manager
"{095A5DB5-0917-4A63-B68D-9D0B6070B31B}" = Windows Live Asistente para el inicio de sesión
"{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"{1598034D-7147-432C-8CA8-888E0632D124}" = NTI Backup NOW! 4.7
"{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Herramienta de carga de Windows Live
"{212748BB-0DA5-46DE-82A1-403736DC9F27}" = MSVC80_x86
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2B83A043-BA8C-4164-98AA-29529D0BE756}" = Windows Live Essentials
"{2D99A593-C841-43A7-B7C9-D6F3AE70B756}" = Nokia Connectivity Cable Driver
"{2FEC2258-5F07-400B-82AE-232510ED187D}" = FotoPrix FotoLibro v4
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{35B8E41E-BD53-38F3-0A35-4E864FEE0647}" = TuAlbum.es Asia
"{3C3901C5-3455-3E0A-A214-0B093A5070A6}" = Microsoft .NET Framework 4 Client Profile
"{48F22622-1CC2-4A83-9C1E-644DD96F832D}" = Epson Event Manager
"{4B288063-0F6D-4919-89BB-DEE763CA2FB2}" = NMSDVDX32 v1.1
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57F0ED40-8F11-41AA-B926-4A66D0D1A9CC}" = Microsoft Office Live Add-in 1.3
"{65DA2EC9-0642-47E9-AAE2-B5267AA14D75}" = Activation Assistant for the 2007 Microsoft Office suites
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD 7.0 with 5.1ch
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{726D1868-50CF-4DF5-B4EB-F67150DD82DB}" = Windows Live Movie Maker
"{751910E3-ECF1-44D0-BF3F-2936A4424514}" = ImageMixer3
"{75917EAC-7447-6FCC-04FF-F5FABF06E681}" = MLB.com OnBase
"{770657D0-A123-3C07-8E44-1C83EC895118}" = Microsoft Visual C++ 2005 ATL Update kb973923 - x86 8.0.50727.4053
"{79DD56FC-DB8B-47F5-9C80-78B62E05F9BC}" = Acer ScreenSaver
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{80DDC39C-8CB5-49de-9748-36C990922110}" = Microsoft Works
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110111700}" = Zuma Deluxe
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-11029123}" = Bricks of Egypt
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110322783}" = Big Kahuna Reef
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-110411970}" = Chuzzle
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111118433}" = Mystery Case Files - Huntsville
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111199750}" = Cake Mania
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111252743}" = Mahjong Escape Ancient China
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111324990}" = Kick N Rush
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111543617}" = Backspin Billiards
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111692950}" = Mahjongg Artifacts
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111771833}" = Jewel Quest Solitaire
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111796363}" = Mystery Solitaire - Secret Island
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-111872660}" = Diner Dash Flo on the Go
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112531267}" = Chicken Invaders 3
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112615863}" = Agatha Christie Death on the Nile
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-112920767}" = Alice Greenfingers
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113009953}" = Turbo Pizza
"{82C36957-D2B8-4EF2-B88C-5FA03AA848C7-113080210}" = Azada
"{84E6A538-D3AE-4510-B32F-2415361D2770}" = Windows Live Protección Infantil
"{87C2248A-C7DD-49ED-9BCD-B312A9D0819E}" = Epson Easy Photo Print 2
"{8924FD04-AFF1-4387-B08B-6A979485F2BD}" = Windows Live Call
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007
"{90120000-0016-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007
"{90120000-0018-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007
"{90120000-001B-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007
"{90120000-001F-0403-0000-0000000FF1CE}_HOMESTUDENTR_{BEADB115-DB47-4BD0-A9EC-AE585AFAB2D8}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_HOMESTUDENTR_{1FF96026-A04A-4C3E-B50A-BB7022654D0F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_HOMESTUDENTR_{71F055E8-E2C6-4214-BB3D-BFE03561B89E}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_HOMESTUDENTR_{8A524694-0CA4-476A-9301-B1E9D70FC952}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007
"{90120000-001F-042D-0000-0000000FF1CE}_HOMESTUDENTR_{017A6981-5E03-4A97-830A-35FE0927BB7F}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007
"{90120000-001F-0456-0000-0000000FF1CE}_HOMESTUDENTR_{A3A03B41-14EA-4E50-97D8-FCF429AE0CCB}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{2314F9A1-126F-45CC-8A5E-DFAF866F3FBC}" = Microsoft Office Proofing Tools 2007 Service Pack 3 (SP3)
"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007
"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007
"{90120000-006E-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{430AE3E6-E982-4958-90FC-1C062BC74E22}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007
"{90120000-00A1-0C0A-0000-0000000FF1CE}_HOMESTUDENTR_{D79E9128-A250-4155-BE90-2BE81DE0406A}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{91120000-002F-0000-0000-0000000FF1CE}" = Microsoft Office Home and Student 2007
"{91120000-002F-0000-0000-0000000FF1CE}_HOMESTUDENTR_{6E107EB7-8B55-48BF-ACCB-199F86A2CD93}" = Microsoft Office 2007 Service Pack 3 (SP3)
"{914DD274-9C5D-44CA-9AC7-12B8D2D4DA08}" = Windows Live Sync
"{92E4A65F-7007-3357-A69A-167F71A337BD}" = Microsoft .NET Framework 3.5 Language Pack SP1 - esn
"{95120000-00AF-0409-0000-0000000FF1CE}" = Microsoft Office PowerPoint Viewer 2007 (English)
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95B012AD-3A4A-31D7-9167-5D07D2A71F47}" = Microsoft .NET Framework 4 Client Profile ESN Language Pack
"{97C82B44-D408-4F14-9252-47FC1636D23E}_is1" = IZArc 3.81
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9F59C3AE-81B0-4EF6-9762-D674BB079705}" = Nokia Software Updater
"{A01E0232-CA9E-4FA2-BAA1-39358D753353}" = OpenOffice.org 3.1
"{A5633652-3795-4829-BB0B-644F0279E279}" = Acer eDataSecurity Management
"{A7BBE3D6-F19A-40E6-96EC-84E1DC88F262}" = Galería fotográfica de Windows Live
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AB6097D9-D722-4987-BD9E-A076E2848EE2}" = Acer Empowering Technology
"{AC76BA86-7AD7-1034-7B44-A81000000003}" = Adobe Reader 8.1.0 - Español
"{ACF60000-22B9-4CE9-98D6-2CCF359BAC07}" = ABBYY FineReader 6.0 Sprint
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{AFF7E080-1974-45BF-9310-10DE1A1F5ED0}" = Adobe AIR
"{B2544A03-10D0-4E5E-BA69-0362FFC20D18}" = OGA Notifier 2.0.0048.0
"{B8583CB3-8ABE-407E-8BC6-F9A83EAC9133}" = Windows Live Writer
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BEC001F9-0451-4396-92D7-E1A4E7854BF3}" = Windows Live Mail
"{C373F7C4-05D2-4047-96D1-6AF30661C6AA}" = PC Connectivity Solution
"{C4156B59-DD7E-40DF-AF08-E568A27A6409}" = Windows Live Messenger
"{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector (Acer DT)
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{CE386A4E-D0DA-4208-8235-BCE43275C694}" = LightScribe 1.4.142.1
"{CE65A9A0-9686-45C6-9098-3C9543A412F0}" = Acer eSettings Management
"{D0D14551-3A2D-433B-861F-F4DCE5422759}" = Nokia PC Suite
"{D24DB8B9-BB6C-4334-9619-BA1C650E13D3}" = Microsoft Primary Interoperability Assemblies 2005
"{D36DD326-7280-11D8-97C8-000129760CBE}" = PhotoNow!
"{D462BF9E-0C35-4705-BF9B-3DF9F3816643}" = Acer ePerformance Management
"{D6AF38E2-67EC-4878-835A-71623AAD35BF}" = Hofmann 7.7
"{D6C3C9E7-D334-4918-BD57-5B1EF14C207D}" = Bing Bar
"{EB21A812-671B-4D08-B974-2A347F0D8F70}" = HP Photosmart Essential
"{EB75DE50-5754-4F6F-875D-126EDF8E4CB3}" = HPSSupply
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F1E63043-54FC-429B-AB2C-31AF9FBA4BC7}" = 32 Bit HP CIO Components Installer
"{FE57DE70-95DE-4B64-9266-84DA811053DB}" = HP Update
"504244733D18C8F63FF584AEB290E3904E791693" = Paquete de controladores de Windows - Nokia pccsmcfd (08/22/2008 7.0.0.0)
"72A50F48CC5601190B9C4E74D81161693133E7F7" = Paquete de controladores de Windows - Nokia Modem (02/25/2011 7.01.0.9)
"9CD348AE9C64C4B939B624E8E24F3903EFDFC82B" = Paquete de controladores de Windows - Nokia Modem (05/22/2008 7.00.0.1)
"Acer GameZone Console_is1" = Acer GameZone Console DTV 2.0.1.1
"Activation Assistant for the 2007 Microsoft Office suites" = Activation Assistant for the 2007 Microsoft Office suites
"Adobe AIR" = Adobe AIR
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Ares" = Ares 2.1.0
"AviSynth" = AviSynth 2.5
"C5A76DC11BABDA0A881E7BE8DDEB641365A77FFD" = Paquete de controladores de Windows - Nokia Modem (05/22/2008 3.8)
"com.mlb.onbase.9875703EBEDC426F7A563069BF0300F254DE4324.1" = MLB.com OnBase
"E0AC723A3DE3A04256288CADBBB011B112AED454" = Paquete de controladores de Windows - Nokia Modem (02/25/2011 4.7)
"eMule" = eMule
"eoJet_is1" = eoJet 2.5
"EPSON Scanner" = EPSON Scan
"Epson Stylus SX210_SX410_TX210_TX410 Manual de usuario" = Epson Stylus SX210_SX410_TX210_TX410 Manual
"EPSON SX210 Series" = EPSON SX210 Series Printer Uninstall
"Google Desktop" = Google Desktop
"HOMESTUDENTR" = Microsoft Office Home and Student 2007
"ImageDesk Fotoregalo" = ImageDesk Fotoregalo
"ImageDesk ImagicPro" = ImageDesk ImagicPro
"ImageDesk Mis Regalos Personalizados" = ImageDesk Mis Regalos Personalizados
"InstallShield_{1577A05B-EE62-4BBC-9DB7-FE748FA44EC2}" = NTI CD & DVD-Maker
"InstallShield_{1598034D-7147-432C-8CA8-888E0632D124}" = NTI Backup NOW! 4.7
"InstallShield_{15D967B5-A4BE-42AE-9E84-64CD062B25AA}" = eSobi v2
"InstallShield_{CB099890-1D5F-11D5-9EA9-0050BAE317E1}" = PowerDirector (Acer DT)
"KLiteCodecPack_is1" = K-Lite Codec Pack 4.3.4 (Full)
"Malwarebytes' Anti-Malware_is1" = Malwarebytes Anti-Malware versión 1.61.0.1400
"Media_Mule Toolbar" = Media_Mule Toolbar
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"Microsoft .NET Framework 3.5 Language Pack SP1 - esn" = Paquete de idioma de Microsoft .NET Framework 3.5 SP1 - esn
"Microsoft .NET Framework 3.5 SP1" = Microsoft .NET Framework 3.5 SP1
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN
"MSC" = McAfee SecurityCenter
"Nokia PC Suite" = Nokia PC Suite
"NVIDIA Drivers" = NVIDIA Drivers
"TuAlbum.09E811A49857C99F38513E5AB8806E09FBF6F7FA.1" = TuAlbum.es Asia
"TuAlbum.es Oceania" = TuAlbum.es Oceania
"Uptodown Toolbar" = Uptodown Toolbar
"WinLiveSuite_Wave3" = Windows Live Essentials

========== HKEY_USERS Uninstall List ==========

[HKEY_USERS\S-1-5-21-2151310680-1450059095-1711355055-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Nokia Maps 3D browser plugin for Internet Explorer" = Nokia Maps 3D browser plugin for Internet Explorer (5.5.1.0)

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 30/05/2011 5:38:05 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 30/05/2011 6:57:09 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 30/05/2011 7:55:35 | Computer Name = PEDROYVIRGINIA1 | Source = Application Error | ID = 1000
Description = Aplicación con errores WMPEnc.exe, versión 11.0.6000.6324, marca de
hora 0x4549b535, módulo con errores ntdll.dll, versión 6.0.6002.18327, marca de
tiempo 0x4cb73436, código de excepción 0xc0000374, desplazamiento con errores 0x000b06fc,
Id.
de proceso 0x1748, hora de inicio de la aplicación 0x01cc1ec0630a75c3.

Error - 30/05/2011 14:00:19 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 30/05/2011 14:01:32 | Computer Name = PEDROYVIRGINIA1 | Source = Application Error | ID = 1000
Description = Aplicación con errores iexplore.exe, versión 8.0.6001.19048, marca
de hora 0x4d633f27, módulo con errores IEShims.dll, versión 8.0.6001.19048, marca
de tiempo 0x4d6354f0, código de excepción 0xc0000005, desplazamiento con errores
0x00021e16, Id. de proceso 0x10e8, hora de inicio de la aplicación 0x01cc1ef39bad064e.

Error - 30/05/2011 18:05:55 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 30/05/2011 18:09:54 | Computer Name = PEDROYVIRGINIA1 | Source = Application Error | ID = 1000
Description = Aplicación con errores iexplore.exe, versión 8.0.6001.19048, marca
de hora 0x4d633f27, módulo con errores ntdll.dll, versión 6.0.6002.18327, marca
de tiempo 0x4cb73436, código de excepción 0xc0000005, desplazamiento con errores
0x00066579, Id. de proceso 0x1494, hora de inicio de la aplicación 0x01cc1f1618fe330b.

Error - 01/06/2011 3:14:55 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 01/06/2011 5:43:53 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

Error - 01/06/2011 7:18:13 | Computer Name = PEDROYVIRGINIA1 | Source = WinMgmt | ID = 10
Description =

[ System Events ]
Error - 28/05/2012 11:53:08 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:13:50 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:13:56 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:13:58 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:13:58 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:14:11 | Computer Name = PEDROYVIRGINIA1 | Source = Service Control Manager | ID = 7001
Description =

Error - 30/05/2012 4:14:11 | Computer Name = PEDROYVIRGINIA1 | Source = Service Control Manager | ID = 7026
Description =

Error - 30/05/2012 4:17:11 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:17:11 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =

Error - 30/05/2012 4:35:36 | Computer Name = PEDROYVIRGINIA1 | Source = DCOM | ID = 10005
Description =


< End of report >

Tengo la negra... tengo el archivo pero no me deja subirlo porque el programa me dice que esta infectado... me deriva a bitdefender pero todo son problemas y no me deja instalarlo, con lo cual no puedo limpiar el archivo. lo mando por correo?