• Registrarse
  • Iniciar sesión


  • Bienvenidos al Foro de InfoSpyware


    La mayor comunidad en idioma español de:


    •  » Información, Consejos y Ayuda
    •  » Para Detectar, Protegerse y Eliminar:
    •  » Virus, Spywares, Adwares, Troyanos, Rogues,
    •  » Rootkits, Keygens, Gusanos, Ransomwares, Falsos AVs,

    • ...Malwares en general y otras amenazas que inundan la internet


      Regístrese para solicitar ayuda personalizada, o siga guías de ayuda.


      Registrarse    Solicitar Ayuda


      p.s.: Pueden seguirnos en nuestras vías de difusión: Twitter, G+, Blog, Facebook.

    Página 1 de 5 12345 ÚltimoÚltimo
    Resultados 1 al 10 de 48

    Pierdo acceso a internet tras instalar cualquier antivirus

    Resumen del tema: Pierdo acceso a internet tras instalar cualquier antivirus - Hola soy super nuevo en el foro(recien me hise al cuenta) y bueno aparecieron archivos raros,por ejemplo "syshost.exe" en siystem 32,tenia un icono de los simpson xD pero ya lo elimine y lo saque del ...

    1. #1
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Molesto Pierdo acceso a internet tras instalar cualquier antivirus

      Hola soy super nuevo en el foro(recien me hise al cuenta) y bueno aparecieron archivos raros,por ejemplo "syshost.exe" en siystem 32,tenia un icono de los simpson xD pero ya lo elimine y lo saque del inicio,el no me dejaba reiniciar bien.
      Llevo unos dias ya con el problema me tiene estresado,y bueno desinstale el COMODO INTERNET SECURITY PRO para instalar el Kaspersky,se instalo bien hasta que me aparecio debajo "El cable de red esta desconectado" y enseguida me pidio reiniciar,bien lo hise y mi mouse usb y teclado usb dejaron de funcionar,tambien note que no podia ver la unidad de CD y la de DVD en mi pc,bueno tube que conectar el teclado que no es usb y asi pude iniciar sesion y desinstalar kaspersky,misterioasmente todo volvio a funcionar hasta el internet.
      Ahora instale el AVG y al terminar de instalarse puedo notar que se abre una ventana como si pusieras cmd en ejcutar solo que no dura ni media milesima de segundo y cuando aparece eso enseguida me dice "El cable de red estadesconectado" y me quedo sin internet,pero luego lo desinstale y note de nuevo esa ventana que desaparece instantaneamente y volvio el internet.
      Le he pasado CCLeaner,Glary Utilies,tune up 2009,etc...que puedo hacer?me acabo de descargar los progrmas que tienen en el post "Guía de detección y eliminación de Malwares 2012." y he leido varios post
      Por cierto use el hijackthis,les dejo el log aqui:

      Logfile of Trend Micro HijackThis v2.0.4
      Scan saved at 03:00:55 p.m., on 31/08/2012
      Platform: Windows XP SP3 (WinNT 5.01.2600)
      MSIE: Internet Explorer v8.00 (8.00.6001.18702)
      Boot mode: Normal

      Running processes:
      C:\WINDOWS\System32\smss.exe
      C:\WINDOWS\system32\winlogon.exe
      C:\WINDOWS\system32\services.exe
      C:\WINDOWS\system32\lsass.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\svchost.exe
      C:\WINDOWS\Explorer.EXE
      C:\WINDOWS\System32\svchost.exe
      C:\Archivos de programa\LogMeIn Hamachi\hamachi-2.exe
      C:\Archivos de programa\Java\jre6\bin\jqs.exe
      C:\Archivos de programa\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
      C:\WINDOWS\system32\nvsvc32.exe
      C:\WINDOWS\system32\PnkBstrA.exe
      C:\WINDOWS\system32\svchost.exe
      C:\WINDOWS\System32\TUProgSt.exe
      C:\Archivos de programa\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe
      C:\Archivos de programa\CyberLink\YouCam\YouCamService.exe
      C:\WINDOWS\system32\RUNDLL32.EXE
      C:\WINDOWS\RTHDCPL.EXE
      C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe
      C:\WINDOWS\system32\ctfmon.exe
      C:\WINDOWS\system32\wbem\wmiapsrv.exe
      C:\WINDOWS\system32\taskmgr.exe
      C:\Archivos de programa\Windows Live\Contacts\wlcomm.exe
      C:\Documents and Settings\Eduardo\Escritorio\gapa.exe
      C:\Archivos de programa\Mozilla Firefox\firefox.exe
      C:\Archivos de programa\TuneUp Utilities 2009\Integrator.exe
      C:\WINDOWS\system32\rundll32.exe
      C:\Archivos de programa\Pando Networks\Media Booster\pmb.exe
      C:\Archivos de programa\Archivos comunes\InstallShield\UpdateService\issch.exe
      C:\Archivos de programa\TuneUp Utilities 2009\DiskDoctor.exe
      C:\Archivos de programa\Mozilla Firefox\plugin-container.exe
      C:\Documents and Settings\Eduardo\Escritorio\HijackThis.exe

      R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
      R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
      R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = Bing
      R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = MSN.com
      R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
      O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll
      O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre6\bin\ssv.dll
      O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
      O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
      O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
      O4 - HKLM\..\Run: [EM_EXEC] C:\ARCHIV~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE
      O4 - HKLM\..\Run: [WheelMouse] C:\ADVANC~1\wh_exec.exe
      O4 - HKLM\..\Run: [ACQTMOUSE] "C:\Archivos de programa\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe"
      O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
      O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
      O4 - HKLM\..\Run: [SwitchBoard] C:\Archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe
      O4 - HKLM\..\Run: [YouCam Service] "C:\Archivos de programa\CyberLink\YouCam\YouCamService.exe" /s
      O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\system32\NvCpl.dll,NvStartup
      O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit
      O4 - HKLM\..\Run: [PHIME2002A] C:\WINDOWS\system32\IME\TINTLGNT\TINTSETP.EXE /IMEName
      O4 - HKLM\..\Run: [UnlockerAssistant] "C:\Archivos de programa\Unlocker\UnlockerAssistant.exe"
      O4 - HKLM\..\Run: [ISUSPM Startup] C:\ARCHIV~1\ARCHIV~1\INSTAL~1\UPDATE~1\ISUSPM.exe -startup
      O4 - HKLM\..\Run: [ISUSScheduler] "C:\Archivos de programa\Archivos comunes\InstallShield\UpdateService\issch.exe" -start
      O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\Windows Live\Messenger\msnmsgr.exe" /background
      O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
      O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SERVICIO LOCAL')
      O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
      O4 - HKUS\S-1-5-21-1614895754-813497703-839522115-1010\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'UpdatusUser')
      O4 - HKUS\S-1-5-21-1614895754-813497703-839522115-1010\..\RunOnce: [NeroHomeFirstStart] "C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMFirstStart.exe" (User 'UpdatusUser')
      O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
      O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
      O8 - Extra context menu item: Agregar al componente Anti-Banners - C:\Archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\ie_banner_deny.htm
      O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra 'Tools' menuitem: &Agregar entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
      O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
      O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
      O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
      O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
      O16 - DPF: {20A60F0D-9AFA-4515-A0FD-83BD84642501} (Checkers Class) - http://messenger.zone.msn.com/binary...r.cab56986.cab
      O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://update.microsoft.com/windowsu...?1261162287156
      O16 - DPF: {C3F79A2B-B9B4-4A66-B012-3EE46475B072} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary...t.cab56907.cab
      O16 - DPF: {C5E28B9D-0A68-4B50-94E9-E8F6B4697514} (NsvPlayX Control) - http://www.video.hostingdelsur.com/r...yx_vp3_mp3.cab
      O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
      O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
      O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
      O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
      O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
      O23 - Service: LogMeIn Hamachi Tunneling Engine (Hamachi2Svc) - LogMeIn Inc. - C:\Archivos de programa\LogMeIn Hamachi\hamachi-2.exe
      O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
      O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
      O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
      O23 - Service: MBAMService - Malwarebytes Corporation - C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
      O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
      O23 - Service: Mozilla Maintenance Service (MozillaMaintenance) - Mozilla Foundation - C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe
      O23 - Service: Messenger Plus! Service (MsgPlusService) - Yuna Software - C:\Archivos de programa\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
      O23 - Service: NBService - Nero AG - C:\Archivos de programa\Nero\Nero 7\Nero BackItUp\NBService.exe
      O23 - Service: NMIndexingService - Nero AG - C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMIndexingService.exe
      O23 - Service: nProtect GameGuard Service (npggsvc) - Unknown owner - C:\WINDOWS\system32\GameMon.des.exe (file missing)
      O23 - Service: NVIDIA Driver Helper Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe
      O23 - Service: NVIDIA Update Service Daemon (nvUpdatusService) - NVIDIA Corporation - C:\Archivos de programa\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
      O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
      O23 - Service: PnkBstrA - Unknown owner - C:\WINDOWS\system32\PnkBstrA.exe
      O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
      O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
      O23 - Service: Skype Updater (SkypeUpdate) - Skype Technologies - C:\Archivos de programa\Skype\Updater\Updater.exe
      O23 - Service: SwitchBoard - Adobe Systems Incorporated - C:\Archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe
      O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
      O23 - Service: TuneUp Drive Defrag Service (TuneUp.Defrag) - TuneUp Software - C:\WINDOWS\System32\TuneUpDefragService.exe
      O23 - Service: TuneUp Program Statistics Service (TuneUp.ProgramStatisticsSvc) - TuneUp Software - C:\WINDOWS\System32\TUProgSt.exe
      O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
      O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
      O23 - Service: Servicio de uso compartido de red del Reproductor de Windows Media (WMPNetworkSvc) - Unknown owner - C:\Archivos de programa\Windows Media Player\WMPNetwk.exe

      --
      End of file - 10800 bytes


      No se si tengo algo mas que poner para que les quede mas facil.
      Creo que eso es todo xD
      Última edición por Edushyan fecha: 31/08/12 a las 14:46:31

    2. #2
      Moderadora Gral.
      Avatar de SanMar
      Registrado
      jun 2008
      Ubicación
      Argentina
      Mensajes
      21.029

      Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Hola Edushyan:


      Por el momento no instales ningún AV.


      Realiza lo siguiente:


      Paso 1.- Descarga, instala y/o actualiza las siguientes herramientas:




      Paso 2.-: Ejecuta CCleaner en sus 2 opciones (Limpiador y Registro) para hacer una limpieza de cookies, archivos temporales e innecesarios y registro de Windows, para mejorar el rendimiento de tu equipo y generar reportes mas limpios. (NO necesitamos este reporte)


      Paso 3.- : Ejecuta Malwarebytes haz un examen completo, selecciona todo lo que este encuentre y luego presiona el botón de "Quitar lo Seleccionado" como se muestra en la imagen, para eliminar las infecciones. El reporte se guarda en la pestaña "Registros"

      • *Nota* Es importante que envíes a "Cuarentena" todo lo que este detecte antes de copiar y pegarnos su reporte.



      Paso 4.- Descarga la herramienta ComboFix.exe y guárdala en el escritorio.
      • Desactiva temporalmente el Antivirus y/o Antispyware


        Si te pide actualizar "Aceptas".
      • Cierra todas las ventanas abiertas.
      • Hacele doble clic al archivo ComboFix.exe y seguí las instrucciones.
      • Cuando termine, generara un registro en C:\ComboFix.txt.
        • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
        • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.
      Atención!! No use ComboFix a menos que se le haya indicado específicamente en su mensaje por un integrante de nuestro Staff. Es una herramienta de gran alcance destinada por su creador a ser usada bajo la orientación y supervisión de un experto, no para uso privado. El uso de ComboFix incorrectamente podría generar problemas en su sistema. Por favor, lea las "Negaciones de la Garantía" de ComboFix.
      • Reinicia y pega el reporte de C:\ComboFix.txt en este mismo mensaje.






      Esperamos los reportes.


      Salu2.

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #3
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Pregunta Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Hola muchas gracias por contestar! Hise los 3 primeros pasos pero el ultimo,con el combofix no me sirve,al principio empezo a cargar me dijo si keria instalar actualizaciones,puse ke si,luego aparecio algo diciendo ke tnia ke instalar,algo ke decia sp2,era para los puntos de restauracion creo,pero luego se cerro y cada vez que lo ejecuto crea 2 carpetas que si entr me lleva a mi pc,y no puedo hacer eso que dices,ademas no aparece el registro C:\ComboFix.txt
      y con el malwarebytes paso esto:

      Malwarebytes Anti-Malware 1.62.0.1300
      www.malwarebytes.org

      Versión de la Base de Datos: v2012.09.03.07

      Windows XP Service Pack 3 x86 NTFS
      Internet Explorer 8.0.6001.18702
      Eduardo :: CAMEL [administrador]

      03/09/2012 03:49:59 p.m.
      mbam-log-2012-09-03 (15-49-59).txt

      Tipos de Análisis: Análisis Completo (C:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 422146
      Tiempo transcurrido: 1 hora(s), 8 minuto(s), 54 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 2
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\5KQDNEp_ (Adware.LoudMo) -> En cuarentena y eliminado con éxito.
      HKLM\SYSTEM\CurrentControlSet\Services\SVKP (Trojan.Agent) -> En cuarentena y eliminado con éxito.

      Valores del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Elementos de Datos del Registro Detectados: 2
      HKCR\CLSID\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32| (Trojan.Zaccess) -> Malo: (\\.\globalroot\systemroot\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\n.) Bueno: (wbemess.dll) -> En cuarentena y reparado con éxito.
      HKCR\regfile\shell\open\command| (Broken.OpenCommand) -> Malo: ("regedit.exe" "%1") Bueno: (regedit.exe "%1") -> En cuarentena y reparado con éxito.

      Carpetas Detectadas: 0
      (No se han detectado elementos maliciosos)

      Archivos Detectados: 10
      C:\Archivos de programa\Adobe\Adobe Photoshop CS6\cese6-patch_FeR!__.exe (PUP.RiskwareTool.CK) -> En cuarentena y eliminado con éxito.
      C:\Archivos de programa\Free WAV to MP3 Converter\FLVDirect.exe (Adware.FlvDirect) -> En cuarentena y eliminado con éxito.
      C:\Archivos de programa\Image-Line\FL Studio 9\FL.exe (Hoax.BadJoke) -> En cuarentena y eliminado con éxito.
      C:\Archivos de programa\Screaming Bee\MorphVOX Pro\patch.exe (PUP.Hacktool.Patcher) -> En cuarentena y eliminado con éxito.
      C:\Documents and Settings\Eduardo\Configuración local\Datos de programa\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\n (Trojan.Dropper.PE4) -> Se eliminarán al reiniciar.
      C:\Metin2 Guabina-Persia\metin2client.exe (RiskWare.Tool.CK) -> En cuarentena y eliminado con éxito.
      C:\WINDOWS\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\n (Trojan.Dropper.PE4) -> Se eliminarán al reiniciar.
      C:\WINDOWS\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\U\800000cb.@ (Rootkit.0Access) -> En cuarentena y eliminado con éxito.
      C:\WINDOWS\system32\5KQDNEp_.exe (Adware.LoudMo) -> En cuarentena y eliminado con éxito.
      C:\WINDOWS\system32\SVKP.sys (Trojan.Agent) -> En cuarentena y eliminado con éxito.

      fin)

    4. #4
      Moderadora Gral.
      Avatar de SanMar
      Registrado
      jun 2008
      Ubicación
      Argentina
      Mensajes
      21.029

      Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Hola:


      No es necesario que cites solo presiona el botón reponder o el post se hace muy largo de seguir.


      Tienes una infección por Rootkit por ello no corre Combofix debidamente.

      cada vez que lo ejecuto crea 2 carpetas que si entr me lleva a mi pc

      Eso es normal, en cuanto lo desinstalemos se arregla.

      Descarga TDSSKiller.zip a tu escritorio.
      Desconecta tu ordenador de Internet (Desconecta el cable).
      • Descomprime el archivo tdsskiller.zip
      • Ejecuta el archivo TDSSKiller.exe Si usas Vista o 7 presiona clic derecho ejecutar como administrador.
      • Presiona clic sobre
      • Marca también las casillas:

      • Presiona clic sobre el botón

        .
      • TDSSKiller comenzara a analizar el equipo.
      • Si el equipo no está infectado:
      • Mostrara
      • No threats found.
      • Presiona clic sobre el botón "Close"
      • Si el equipo está infectado:
      • Mostrara:
      • Threats detected.
      • Select action for found objects:


      • Malware object, high risk. La acción predeterminada es "Cure" o "Delete".
      • Suspicious object, medium risk. Usa siempre la opción "Skip"
      • El programa selecciona de forma automática la acción a tomar.
      • Presiona clic sobre el botón "Continue"
      • Para desinfectar correctamente el Sistema, puede solicitarle reiniciar el equipo.
      • Presiona clic sobre el botón

      • Abre el reporte de TDSSKiller, ubicado en C:\TDSSKiller.x.xx.x_xx.xx.xxxx_xx.xx.xx_log.txt, donde "x.xx.x_xx.xx.xxxx_xx.xx.xx" son versión, fecha y hora.
      • Copia y pega su contenido en tu próxima respuesta.



      Salu2

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    5. #5
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Sonrisa Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Valla estoy sorprendido! hise lo que dijiste,reinicie y ahora actualizacones automaticas no tiene problemas,olvide mencionarlo...yo lo tenia en notificarme,y abajo el escudo en amarillo no aparecia y me decia deshabilitado y ahora me dice: las actualizaciones estan listas para el equipo
      Y ahora veo que el Comodo me muestra las ventanas de alerta de defense+ que antes no!y tambien veo que muestra el trafico y todo,pero....dice La aplicacion de COMODO agent no puede ejecutarse!
      Y sobre el reporte encontre 2 .txt el primero que pondre se llama:

      TDSSKiller.2.8.8.0_05.09.2012_15.45.29_log.txt

      15:45:29.0031 2728 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
      15:45:31.0031 2728 ============================================================
      15:45:31.0031 2728 Current date / time: 2012/09/05 15:45:31.0031
      15:45:31.0031 2728 SystemInfo:
      15:45:31.0031 2728
      15:45:31.0031 2728 OS Version: 5.1.2600 ServicePack: 3.0
      15:45:31.0031 2728 Product type: Workstation
      15:45:31.0031 2728 ComputerName: CAMEL
      15:45:31.0031 2728 UserName: Eduardo
      15:45:31.0031 2728 Windows directory: C:\WINDOWS
      15:45:31.0031 2728 System windows directory: C:\WINDOWS
      15:45:31.0031 2728 Processor architecture: Intel x86
      15:45:31.0031 2728 Number of processors: 2
      15:45:31.0031 2728 Page size: 0x1000
      15:45:31.0031 2728 Boot type: Normal boot
      15:45:31.0031 2728 ============================================================
      15:45:36.0484 2728 !crdlk
      15:45:36.0484 2728 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'A'
      15:45:36.0484 2728 ============================================================
      15:45:36.0484 2728 \Device\Harddisk0\DR0:
      15:45:36.0484 2728 MBR partitions:
      15:45:36.0484 2728 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
      15:45:36.0484 2728 ============================================================
      15:45:38.0921 2728 C: <-> \Device\Harddisk0\DR0\Partition1
      15:45:38.0953 2728 ============================================================
      15:45:38.0953 2728 Initialize success
      15:45:38.0953 2728 ============================================================
      15:46:01.0781 1512 ============================================================
      15:46:01.0781 1512 Scan started
      15:46:01.0781 1512 Mode: Manual; SigCheck; TDLFS;
      15:46:01.0781 1512 ============================================================
      15:46:03.0015 1512 ================ Scan system memory ========================
      15:46:03.0015 1512 System memory - ok
      15:46:03.0015 1512 ================ Scan services =============================
      15:46:03.0046 1512 Suspicious service (NoAccess): 7bfa143bd65a6d6a
      15:46:03.0171 1512 [ D8F55D7F5D1BB9E834E99FE801B6690A ] 7bfa143bd65a6d6a C:\WINDOWS\System32\Drivers\7bfa143bd65a6d6a.sys
      15:46:03.0171 1512 Suspicious file (NoAccess): C:\WINDOWS\System32\Drivers\7bfa143bd65a6d6a.sys. md5: D8F55D7F5D1BB9E834E99FE801B6690A
      15:46:03.0906 1512 7bfa143bd65a6d6a ( Rootkit.Win32.Necurs.gen ) - infected
      15:46:03.0906 1512 7bfa143bd65a6d6a - detected Rootkit.Win32.Necurs.gen (0)
      15:46:03.0921 1512 Abiosdsk - ok
      15:46:03.0921 1512 abp480n5 - ok
      15:46:03.0984 1512 [ CF2A07E1751A2D612D7E13AA431AB057 ] ACPI C:\WINDOWS\system32\DRIVERS\ACPI.sys
      15:46:04.0687 1512 ACPI - ok
      15:46:04.0734 1512 [ 1C905333C0B9F3D7C68DDF25E54B00F9 ] ACPIEC C:\WINDOWS\system32\drivers\ACPIEC.sys
      15:46:04.0906 1512 ACPIEC - ok
      15:46:04.0953 1512 [ 45B952A3ED567264ACFF89E46F65331D ] ACRUSBTM C:\WINDOWS\system32\drivers\ACRUSBTM.SYS
      15:46:04.0968 1512 ACRUSBTM ( UnsignedFile.Multi.Generic ) - warning
      15:46:04.0968 1512 ACRUSBTM - detected UnsignedFile.Multi.Generic (1)
      15:46:05.0000 1512 [ A23675760DEC131B9F799B6FB038A1F0 ] admjoy C:\WINDOWS\system32\DRIVERS\admjoy.sys
      15:46:05.0125 1512 admjoy - ok
      15:46:05.0140 1512 adpu160m - ok
      15:46:05.0171 1512 [ 8BED39E3C35D6A489438B8141717A557 ] aec C:\WINDOWS\system32\drivers\aec.sys
      15:46:05.0281 1512 aec - ok
      15:46:05.0328 1512 [ E3049B90FE06F3F740B7CFDA44995E2C ] AFD C:\WINDOWS\System32\drivers\afd.sys
      15:46:05.0406 1512 AFD - ok
      15:46:05.0421 1512 Aha154x - ok
      15:46:05.0437 1512 aic78u2 - ok
      15:46:05.0453 1512 aic78xx - ok
      15:46:05.0703 1512 [ 29584F02A43E427C4227E3B1D9FF1B22 ] Akamai c:\archivos de programa\archivos comunes\akamai/netsession_win_4f7fccd.dll
      15:46:05.0703 1512 Suspicious file (Hidden): c:\archivos de programa\archivos comunes\akamai/netsession_win_4f7fccd.dll. md5: 29584F02A43E427C4227E3B1D9FF1B22
      15:46:05.0734 1512 Akamai ( HiddenFile.Multi.Generic ) - warning
      15:46:05.0734 1512 Akamai - detected HiddenFile.Multi.Generic (1)
      15:46:05.0796 1512 [ FEDCA791A089D4E15084DA10F38BCE45 ] Alerter C:\WINDOWS\system32\alrsvc.dll
      15:46:05.0906 1512 Alerter - ok
      15:46:05.0937 1512 [ 764B7A1E6AE2D70416A7932F3B97AC99 ] ALG C:\WINDOWS\System32\alg.exe
      15:46:06.0062 1512 ALG - ok
      15:46:06.0078 1512 AliIde - ok
      15:46:06.0156 1512 [ 267FC636801EDC5AB28E14036349E3BE ] Ambfilt C:\WINDOWS\system32\drivers\Ambfilt.sys
      15:46:06.0359 1512 Ambfilt - ok
      15:46:06.0406 1512 amsint - ok
      15:46:06.0453 1512 [ 30CD42BFCDAFEFE8567B9E527DD3AE08 ] AppMgmt C:\WINDOWS\System32\appmgmts.dll
      15:46:06.0593 1512 AppMgmt - ok
      15:46:06.0609 1512 asc - ok
      15:46:06.0625 1512 asc3350p - ok
      15:46:06.0625 1512 asc3550 - ok
      15:46:06.0765 1512 [ 776ACEFA0CA9DF0FAA51A5FB2F435705 ] aspnet_state C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\aspnet_state.exe
      15:46:06.0796 1512 aspnet_state - ok
      15:46:06.0843 1512 [ B153AFFAC761E7F5FCFA822B9C4E97BC ] AsyncMac C:\WINDOWS\system32\DRIVERS\asyncmac.sys
      15:46:06.0968 1512 AsyncMac - ok
      15:46:07.0000 1512 [ 9F3A2F5AA6875C72BF062C712CFA2674 ] atapi C:\WINDOWS\system32\DRIVERS\atapi.sys
      15:46:07.0109 1512 atapi - ok
      15:46:07.0125 1512 Atdisk - ok
      15:46:07.0171 1512 [ 3C4B9850A2631C2263507400D029057B ] atksgt C:\WINDOWS\system32\DRIVERS\atksgt.sys
      15:46:07.0187 1512 atksgt - ok
      15:46:07.0218 1512 [ 9916C1225104BA14794209CFA8012159 ] Atmarpc C:\WINDOWS\system32\DRIVERS\atmarpc.sys
      15:46:07.0343 1512 Atmarpc - ok
      15:46:07.0406 1512 [ A37F6480B06C37DB69BBFF045CF9F55B ] AudioSrv C:\WINDOWS\System32\audiosrv.dll
      15:46:07.0531 1512 AudioSrv - ok
      15:46:07.0562 1512 [ D9F724AA26C010A217C97606B160ED68 ] audstub C:\WINDOWS\system32\DRIVERS\audstub.sys
      15:46:07.0687 1512 audstub - ok
      15:46:07.0703 1512 axsoay - ok
      15:46:07.0750 1512 [ DA1F27D85E0D1525F6621372E7B685E9 ] Beep C:\WINDOWS\system32\drivers\Beep.sys
      15:46:07.0875 1512 Beep - ok
      15:46:07.0937 1512 [ F934D1B230F84E1D19DD00AC5A7A83ED ] Bridge C:\WINDOWS\system32\DRIVERS\bridge.sys
      15:46:08.0062 1512 Bridge - ok
      15:46:08.0062 1512 [ F934D1B230F84E1D19DD00AC5A7A83ED ] BridgeMP C:\WINDOWS\system32\DRIVERS\bridge.sys
      15:46:08.0187 1512 BridgeMP - ok
      15:46:08.0218 1512 [ E28818BD591F8AF8FBE9897472B9665E ] Browser C:\WINDOWS\System32\browser.dll
      15:46:08.0359 1512 Browser - ok
      15:46:08.0390 1512 [ 90A673FC8E12A79AFBED2576F6A7AAF9 ] cbidf2k C:\WINDOWS\system32\drivers\cbidf2k.sys
      15:46:08.0515 1512 cbidf2k - ok
      15:46:08.0562 1512 [ 0BE5AEF125BE881C4F854C554F2B025C ] CCDECODE C:\WINDOWS\system32\DRIVERS\CCDECODE.sys
      15:46:08.0687 1512 CCDECODE - ok
      15:46:08.0703 1512 cd20xrnt - ok
      15:46:08.0734 1512 [ C1B486A7658353D33A10CC15211A873B ] Cdaudio C:\WINDOWS\system32\drivers\Cdaudio.sys
      15:46:08.0859 1512 Cdaudio - ok
      15:46:08.0859 1512 [ C885B02847F5D2FD45A24E219ED93B32 ] Cdfs C:\WINDOWS\system32\drivers\Cdfs.sys
      15:46:09.0000 1512 Cdfs - ok
      15:46:09.0015 1512 [ 1F4260CC5B42272D71F79E570A27A4FE ] Cdrom C:\WINDOWS\system32\DRIVERS\cdrom.sys
      15:46:09.0140 1512 Cdrom - ok
      15:46:09.0140 1512 Changer - ok
      15:46:09.0203 1512 [ B0E3FEC4EE7B935A7387FD6EF31EA780 ] CiSvc C:\WINDOWS\system32\cisvc.exe
      15:46:09.0328 1512 CiSvc - ok
      15:46:09.0406 1512 [ 0C3BF68AB94CEFD64B333B326F84510E ] ClipSrv C:\WINDOWS\system32\clipsrv.exe
      15:46:09.0546 1512 ClipSrv - ok
      15:46:09.0593 1512 [ D87ACAED61E417BBA546CED5E7E36D9C ] clr_optimization_v2.0.50727_32 C:\WINDOWS\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe
      15:46:09.0734 1512 clr_optimization_v2.0.50727_32 - ok
      15:46:09.0765 1512 [ C5A75EB48E2344ABDC162BDA79E16841 ] clr_optimization_v4.0.30319_32 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe
      15:46:10.0015 1512 clr_optimization_v4.0.30319_32 - ok
      15:46:10.0062 1512 [ 287783E44BCF4FC5BA4860BA537A4C64 ] clwvd C:\WINDOWS\system32\DRIVERS\clwvd.sys
      15:46:10.0078 1512 clwvd - ok
      15:46:10.0203 1512 [ 43F37E8F60F3677E84C6AFC70C784AFD ] cmdAgent C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe
      15:46:10.0296 1512 cmdAgent - ok
      15:46:10.0390 1512 [ D58B707F3D12AE410CA07D257FD28098 ] cmderd C:\WINDOWS\system32\DRIVERS\cmderd.sys
      15:46:10.0390 1512 cmderd - ok
      15:46:10.0484 1512 [ 251F906328AF49E7927A1AD12B543A2F ] cmdGuard C:\WINDOWS\system32\DRIVERS\cmdguard.sys
      15:46:10.0500 1512 cmdGuard - ok
      15:46:10.0546 1512 [ 207F06D08AFCDD3BBC801EAB1A845CFB ] cmdHlp C:\WINDOWS\system32\DRIVERS\cmdhlp.sys
      15:46:10.0546 1512 cmdHlp - ok
      15:46:10.0593 1512 CmdIde - ok
      15:46:10.0609 1512 COMSysApp - ok
      15:46:10.0640 1512 Cpqarray - ok
      15:46:10.0687 1512 [ E423C9C1946C656E0E4840210A0A8681 ] CryptSvc C:\WINDOWS\System32\cryptsvc.dll
      15:46:10.0812 1512 CryptSvc - ok
      15:46:10.0828 1512 dac2w2k - ok
      15:46:10.0843 1512 dac960nt - ok
      15:46:10.0890 1512 [ CE1C9B198E4BB9F21F572B9A658DBD35 ] DCamUSBUVT C:\WINDOWS\system32\Drivers\usbuvt.sys
      15:46:10.0906 1512 DCamUSBUVT ( UnsignedFile.Multi.Generic ) - warning
      15:46:10.0906 1512 DCamUSBUVT - detected UnsignedFile.Multi.Generic (1)
      15:46:10.0968 1512 [ 97869C55F562B777987100EA30AD8108 ] DcomLaunch C:\WINDOWS\system32\rpcss.dll
      15:46:11.0062 1512 DcomLaunch - ok
      15:46:11.0109 1512 [ 2DDFB3A5679FA02366686ECB1AF622F0 ] Dhcp C:\WINDOWS\System32\dhcpcsvc.dll
      15:46:11.0234 1512 Dhcp - ok
      15:46:11.0281 1512 [ E70AC14F6ADDCC9589CF513AF725178C ] DigiNet C:\WINDOWS\system32\DRIVERS\diginet.sys
      15:46:11.0281 1512 DigiNet - ok
      15:46:11.0359 1512 [ 044452051F3E02E7963599FC8F4F3E25 ] Disk C:\WINDOWS\system32\DRIVERS\disk.sys
      15:46:11.0484 1512 Disk - ok
      15:46:11.0484 1512 dmadmin - ok
      15:46:11.0531 1512 [ C252A99C0A78B39FAA2E2D1D048B1050 ] dmboot C:\WINDOWS\system32\drivers\dmboot.sys
      15:46:11.0671 1512 dmboot - ok
      15:46:11.0734 1512 [ 33B4D4039CD2CB25351A7BF13B2988D9 ] dmio C:\WINDOWS\system32\drivers\dmio.sys
      15:46:11.0859 1512 dmio - ok
      15:46:11.0890 1512 [ E9317282A63CA4D188C0DF5E09C6AC5F ] dmload C:\WINDOWS\system32\drivers\dmload.sys
      15:46:12.0000 1512 dmload - ok
      15:46:12.0062 1512 [ 40D0520DDAA9312C5DDDD8C7C99D8325 ] dmserver C:\WINDOWS\System32\dmserver.dll
      15:46:12.0187 1512 dmserver - ok
      15:46:12.0203 1512 [ 8A208DFCF89792A484E76C40E5F50B45 ] DMusic C:\WINDOWS\system32\drivers\DMusic.sys
      15:46:12.0343 1512 DMusic - ok
      15:46:12.0375 1512 [ E903D6C886CA0C86164BF778589F7C6E ] Dnscache C:\WINDOWS\System32\dnsrslvr.dll
      15:46:12.0500 1512 Dnscache - ok
      15:46:12.0546 1512 [ 412134C50E2063D882EF1634676E2B25 ] Dot3svc C:\WINDOWS\System32\dot3svc.dll
      15:46:12.0671 1512 Dot3svc - ok
      15:46:12.0671 1512 dpti2o - ok
      15:46:12.0703 1512 [ 8F5FCFF8E8848AFAC920905FBD9D33C8 ] drmkaud C:\WINDOWS\system32\drivers\drmkaud.sys
      15:46:12.0812 1512 drmkaud - ok
      15:46:12.0984 1512 dump_wmimmc - ok
      15:46:13.0015 1512 EagleXNt - ok
      15:46:13.0046 1512 [ FC3FE3654588E597FFF395C305062C46 ] EapHost C:\WINDOWS\System32\eapsvc.dll
      15:46:13.0156 1512 EapHost - ok
      15:46:13.0203 1512 [ D96623DD7CE1EA9E4DE7285D740E14F6 ] ERSvc C:\WINDOWS\System32\ersvc.dll
      15:46:13.0312 1512 ERSvc - ok
      15:46:13.0375 1512 [ 953DF7327510DF0DE048B8E80E504EF9 ] Eventlog C:\WINDOWS\system32\services.exe
      15:46:13.0437 1512 Eventlog - ok
      15:46:13.0500 1512 [ A225DD0D0489BD580781D19524A10B19 ] EventSystem C:\WINDOWS\system32\es.dll
      15:46:13.0531 1512 EventSystem - ok
      15:46:13.0578 1512 [ 38D332A6D56AF32635675F132548343E ] Fastfat C:\WINDOWS\system32\drivers\Fastfat.sys
      15:46:13.0718 1512 Fastfat - ok
      15:46:13.0765 1512 [ CA70EDBF32032EA53F114CB930741CB5 ] FastUserSwitchingCompatibility C:\WINDOWS\System32\shsvcs.dll
      15:46:13.0890 1512 FastUserSwitchingCompatibility - ok
      15:46:13.0921 1512 [ 92CDD60B6730B9F50F6A1A0C1F8CDC81 ] Fdc C:\WINDOWS\system32\DRIVERS\fdc.sys
      15:46:14.0062 1512 Fdc - ok
      15:46:14.0078 1512 [ E5E61F2C07344E91DBFB7EAFDE549AB4 ] Fips C:\WINDOWS\system32\drivers\Fips.sys
      15:46:14.0218 1512 Fips - ok
      15:46:14.0265 1512 [ 9D27E7B80BFCDF1CDD9B555862D5E7F0 ] Flpydisk C:\WINDOWS\system32\DRIVERS\flpydisk.sys
      15:46:14.0375 1512 Flpydisk - ok
      15:46:14.0406 1512 [ B2CF4B0786F8212CB92ED2B50C6DB6B0 ] FltMgr C:\WINDOWS\system32\drivers\fltmgr.sys
      15:46:14.0531 1512 FltMgr - ok
      15:46:14.0640 1512 [ 8BA7C024070F2B7FDD98ED8A4BA41789 ] FontCache3.0.0.0 c:\WINDOWS\Microsoft.NET\Framework\v3.0\WPF\PresentationFontCache.exe
      15:46:14.0656 1512 FontCache3.0.0.0 - ok
      15:46:14.0687 1512 [ 3E1E2BD4F39B0E2B7DC4F4D2BCC2779A ] Fs_Rec C:\WINDOWS\system32\drivers\Fs_Rec.sys
      15:46:14.0812 1512 Fs_Rec - ok
      15:46:14.0843 1512 [ CC5F3AF5711A1C7C8FA1D43BB16B401A ] Ftdisk C:\WINDOWS\system32\DRIVERS\ftdisk.sys
      15:46:14.0968 1512 Ftdisk - ok
      15:46:14.0984 1512 [ 77EBF3E9386DAA51551AF429052D88D0 ] giveio C:\WINDOWS\system32\giveio.sys
      15:46:15.0015 1512 giveio ( UnsignedFile.Multi.Generic ) - warning
      15:46:15.0015 1512 giveio - detected UnsignedFile.Multi.Generic (1)
      15:46:15.0046 1512 [ 0A02C63C8B144BD8C86B103DEE7C86A2 ] Gpc C:\WINDOWS\system32\DRIVERS\msgpc.sys
      15:46:15.0187 1512 Gpc - ok
      15:46:15.0218 1512 [ 833051C6C6C42117191935F734CFBD97 ] hamachi C:\WINDOWS\system32\DRIVERS\hamachi.sys
      15:46:15.0218 1512 hamachi - ok
      15:46:15.0312 1512 [ DA1B48FDE74125128D0D846A3701D344 ] Hamachi2Svc C:\Archivos de programa\LogMeIn Hamachi\hamachi-2.exe
      15:46:15.0390 1512 Hamachi2Svc - ok
      15:46:15.0437 1512 [ 573C7D0A32852B48F3058CFD8026F511 ] HDAudBus C:\WINDOWS\system32\DRIVERS\HDAudBus.sys
      15:46:15.0546 1512 HDAudBus - ok
      15:46:15.0609 1512 [ 6B5E1788ABF15177A20C6C76C11382BB ] helpsvc C:\WINDOWS\PCHealth\HelpCtr\Binaries\pchsvc.dll
      15:46:15.0750 1512 helpsvc - ok
      15:46:15.0796 1512 [ 158AEDF024CD58FEA03BE2D7D62ABC9C ] HidServ C:\WINDOWS\System32\hidserv.dll
      15:46:15.0921 1512 HidServ - ok
      15:46:15.0937 1512 [ CCF82C5EC8A7326C3066DE870C06DAF1 ] hidusb C:\WINDOWS\system32\DRIVERS\hidusb.sys
      15:46:16.0062 1512 hidusb - ok
      15:46:16.0125 1512 [ 8F80B5FB68E1E767D872CB9A8CAD5B5D ] hkmsvc C:\WINDOWS\System32\kmsvc.dll
      15:46:16.0250 1512 hkmsvc - ok
      15:46:16.0265 1512 hpn - ok
      15:46:16.0312 1512 [ F6AACF5BCE2893E0C1754AFEB672E5C9 ] HTTP C:\WINDOWS\system32\Drivers\HTTP.sys
      15:46:16.0421 1512 HTTP - ok
      15:46:16.0484 1512 [ 0406B351908A8C143B6B6BB8834D4920 ] HTTPFilter C:\WINDOWS\System32\w3ssl.dll
      15:46:16.0609 1512 HTTPFilter - ok
      15:46:16.0625 1512 i2omgmt - ok
      15:46:16.0640 1512 i2omp - ok
      15:46:16.0656 1512 [ 4A2490A66E8271901E89DD5FB79748AE ] i8042prt C:\WINDOWS\system32\DRIVERS\i8042prt.sys
      15:46:16.0765 1512 i8042prt - ok
      15:46:16.0937 1512 [ 48846B31BE5A4FA662CCFDE7A1BA86B9 ] ialm C:\WINDOWS\system32\DRIVERS\igxpmp32.sys
      15:46:17.0281 1512 ialm - ok
      15:46:17.0390 1512 [ 1CF03C69B49ACB70C722DF92755C0C8C ] IDriverT C:\Archivos de programa\Archivos comunes\InstallShield\Driver\11\Intel 32\IDriverT.exe
      15:46:17.0406 1512 IDriverT ( UnsignedFile.Multi.Generic ) - warning
      15:46:17.0406 1512 IDriverT - detected UnsignedFile.Multi.Generic (1)
      15:46:17.0515 1512 [ C01AC32DC5C03076CFB852CB5DA5229C ] idsvc c:\WINDOWS\Microsoft.NET\Framework\v3.0\Windows Communication Foundation\infocard.exe
      15:46:17.0562 1512 idsvc - ok
      15:46:17.0625 1512 [ 083A052659F5310DD8B6A6CB05EDCF8E ] Imapi C:\WINDOWS\system32\DRIVERS\imapi.sys
      15:46:17.0750 1512 Imapi - ok
      15:46:17.0796 1512 [ E50ABD04CA0C015017722014D1D9251E ] ImapiService C:\WINDOWS\system32\imapi.exe
      15:46:17.0921 1512 ImapiService - ok
      15:46:17.0937 1512 ini910u - ok
      15:46:18.0015 1512 [ C9953067B2C9E3D3DD44EC22D1E0815A ] Inspect C:\WINDOWS\system32\DRIVERS\inspect.sys
      15:46:18.0015 1512 Inspect - ok
      15:46:18.0218 1512 [ 988A112C4061F309CE9C1ABFC971D001 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RtkHDAud.sys
      15:46:18.0406 1512 IntcAzAudAddService - ok
      15:46:18.0421 1512 IntelIde - ok
      15:46:18.0453 1512 [ 49A060498C09DB18C3EA9939789005AB ] intelppm C:\WINDOWS\system32\DRIVERS\intelppm.sys
      15:46:18.0578 1512 intelppm - ok
      15:46:18.0625 1512 [ 3BB22519A194418D5FEC05D800A19AD0 ] Ip6Fw C:\WINDOWS\system32\drivers\ip6fw.sys
      15:46:18.0750 1512 Ip6Fw - ok
      15:46:18.0781 1512 [ 731F22BA402EE4B62748ADAF6363C182 ] IpFilterDriver C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
      15:46:18.0906 1512 IpFilterDriver - ok
      15:46:18.0937 1512 [ B87AB476DCF76E72010632B5550955F5 ] IpInIp C:\WINDOWS\system32\DRIVERS\ipinip.sys
      15:46:19.0062 1512 IpInIp - ok
      15:46:19.0078 1512 [ CC748EA12C6EFFDE940EE98098BF96BB ] IpNat C:\WINDOWS\system32\DRIVERS\ipnat.sys
      15:46:19.0203 1512 IpNat - ok
      15:46:19.0250 1512 [ 23C74D75E36E7158768DD63D92789A91 ] IPSec C:\WINDOWS\system32\DRIVERS\ipsec.sys
      15:46:19.0375 1512 IPSec - ok
      15:46:19.0390 1512 [ C93C9FF7B04D772627A3646D89F7BF89 ] IRENUM C:\WINDOWS\system32\DRIVERS\irenum.sys
      15:46:19.0515 1512 IRENUM - ok
      15:46:19.0546 1512 [ 0F3D281B0410FE5D482AADA37D20524B ] isapnp C:\WINDOWS\system32\DRIVERS\isapnp.sys
      15:46:19.0671 1512 isapnp - ok
      15:46:19.0812 1512 [ 80F08F50D248EEEEB9256F6522891D40 ] JavaQuickStarterService C:\Archivos de programa\Java\jre7\bin\jqs.exe
      15:46:19.0828 1512 JavaQuickStarterService - ok
      15:46:19.0843 1512 [ 188DDD286BC0DAEA6984858C6A4D7BBF ] Kbdclass C:\WINDOWS\system32\DRIVERS\kbdclass.sys
      15:46:19.0968 1512 Kbdclass - ok
      15:46:20.0015 1512 [ 72EFEBECF76EB1DCCC5BA9EA746D90E8 ] kbdhid C:\WINDOWS\system32\DRIVERS\kbdhid.sys
      15:46:20.0140 1512 kbdhid - ok
      15:46:20.0171 1512 [ 692BCF44383D056AED41B045A323D378 ] kmixer C:\WINDOWS\system32\drivers\kmixer.sys
      15:46:20.0281 1512 kmixer - ok
      15:46:20.0296 1512 [ 1705745D900DABF2D89F90EBADDC7517 ] KSecDD C:\WINDOWS\system32\drivers\KSecDD.sys
      15:46:20.0421 1512 KSecDD - ok
      15:46:20.0484 1512 [ 1814A50472885DB3036CD2097F2BB77C ] lanmanserver C:\WINDOWS\System32\srvsvc.dll
      15:46:20.0593 1512 lanmanserver - ok
      15:46:20.0640 1512 [ 26A6587E6EACD49A77A4AE11AA490493 ] lanmanworkstation C:\WINDOWS\System32\wkssvc.dll
      15:46:20.0765 1512 lanmanworkstation - ok
      15:46:20.0781 1512 lbrtfdc - ok
      15:46:20.0843 1512 [ 51674C5C2EEFF3D155EDAB0F5EF9A4D2 ] leafnets C:\WINDOWS\system32\DRIVERS\leafnets.sys
      15:46:20.0890 1512 leafnets - ok
      15:46:20.0937 1512 [ A1577A20EB5C1859C79EC643ECED6F6F ] LHidFlt2 C:\WINDOWS\system32\DRIVERS\LHidFlt2.sys
      15:46:20.0968 1512 LHidFlt2 - ok
      15:46:21.0000 1512 [ 4127E8B6DDB4090E815C1F8852C277D3 ] lirsgt C:\WINDOWS\system32\DRIVERS\lirsgt.sys
      15:46:21.0015 1512 lirsgt - ok
      15:46:21.0062 1512 [ 8CBC68215E5B3B92566B10A3C23D5102 ] LKbdFlt2 C:\WINDOWS\system32\DRIVERS\LKbdFlt2.sys
      15:46:21.0078 1512 LKbdFlt2 - ok
      15:46:21.0125 1512 [ 01AF2112FF79AA613B6621A75C4E9277 ] LmHosts C:\WINDOWS\System32\lmhsvc.dll
      15:46:21.0234 1512 LmHosts - ok
      15:46:21.0234 1512 [ 6A62A0409BBF276CC46B560D0A83D376 ] LMouFlt2 C:\WINDOWS\system32\DRIVERS\LMouFlt2.sys
      15:46:21.0250 1512 LMouFlt2 - ok
      15:46:21.0296 1512 [ 6DFE7F2E8E8A337263AA5C92A215F161 ] MBAMProtector C:\WINDOWS\system32\drivers\mbam.sys
      15:46:21.0312 1512 MBAMProtector - ok
      15:46:21.0421 1512 [ 43683E970F008C93C9429EF428147A54 ] MBAMService C:\Archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe
      15:46:21.0453 1512 MBAMService - ok
      15:46:21.0484 1512 [ 047E70B04B288439245DDC8DD1A31982 ] Messenger C:\WINDOWS\System32\msgsvc.dll
      15:46:21.0609 1512 Messenger - ok
      15:46:21.0656 1512 [ A7DA20AB18A1BDAE28B0F349E57DA0D1 ] mf C:\WINDOWS\system32\DRIVERS\mf.sys
      15:46:21.0781 1512 mf - ok
      15:46:21.0812 1512 [ 4AE068242760A1FB6E1A44BF4E16AFA6 ] mnmdd C:\WINDOWS\system32\drivers\mnmdd.sys
      15:46:21.0937 1512 mnmdd - ok
      15:46:21.0984 1512 [ 85ADA209695A677C9D60962CDE10696B ] mnmsrvc C:\WINDOWS\system32\mnmsrvc.exe
      15:46:22.0109 1512 mnmsrvc - ok
      15:46:22.0125 1512 [ 9024556E739B8469D2B8F5F0E4C9BC9F ] Modem C:\WINDOWS\system32\drivers\Modem.sys
      15:46:22.0250 1512 Modem - ok
      15:46:22.0328 1512 [ C7D9F9717916B34C1B00DD4834AF485C ] Monfilt C:\WINDOWS\system32\drivers\Monfilt.sys
      15:46:22.0390 1512 Monfilt - ok
      15:46:22.0437 1512 [ 6FD36B4994A2363659A65C9F970CFDB7 ] Mouclass C:\WINDOWS\system32\DRIVERS\mouclass.sys
      15:46:22.0562 1512 Mouclass - ok
      15:46:22.0593 1512 [ 8EE532E516B2D23D686CFC1CC0A15C25 ] mouhid C:\WINDOWS\system32\DRIVERS\mouhid.sys
      15:46:22.0718 1512 mouhid - ok
      15:46:22.0750 1512 [ A80B9A0BAD1B73637DBCBBA7DF72D3FD ] MountMgr C:\WINDOWS\system32\drivers\MountMgr.sys
      15:46:22.0875 1512 MountMgr - ok
      15:46:22.0937 1512 [ E8D79312373F254DC13F3965BDB3D521 ] MozillaMaintenance C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe
      15:46:22.0937 1512 MozillaMaintenance - ok
      15:46:22.0953 1512 mraid35x - ok
      15:46:22.0968 1512 [ 11D42BB6206F33FBB3BA0288D3EF81BD ] MRxDAV C:\WINDOWS\system32\DRIVERS\mrxdav.sys
      15:46:23.0109 1512 MRxDAV - ok
      15:46:23.0140 1512 [ 68755F0FF16070178B54674FE5B847B0 ] MRxSmb C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
      15:46:23.0250 1512 MRxSmb - ok
      15:46:23.0312 1512 [ 975BD2762BF355A572597CC54D97BA93 ] MSDTC C:\WINDOWS\system32\msdtc.exe
      15:46:23.0437 1512 MSDTC - ok
      15:46:23.0453 1512 [ C941EA2454BA8350021D774DAF0F1027 ] Msfs C:\WINDOWS\system32\drivers\Msfs.sys
      15:46:23.0578 1512 Msfs - ok
      15:46:23.0687 1512 [ 3F3D6E8BD31B3C017D0AB24CD5EC0D05 ] MsgPlusService C:\Archivos de programa\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe
      15:46:23.0687 1512 MsgPlusService - ok
      15:46:23.0703 1512 MSIServer - ok
      15:46:23.0750 1512 [ D1575E71568F4D9E14CA56B7B0453BF1 ] MSKSSRV C:\WINDOWS\system32\drivers\MSKSSRV.sys
      15:46:23.0859 1512 MSKSSRV - ok
      15:46:23.0890 1512 [ 325BB26842FC7CCC1FCCE2C457317F3E ] MSPCLOCK C:\WINDOWS\system32\drivers\MSPCLOCK.sys
      15:46:24.0015 1512 MSPCLOCK - ok
      15:46:24.0031 1512 [ BAD59648BA099DA4A17680B39730CB3D ] MSPQM C:\WINDOWS\system32\drivers\MSPQM.sys
      15:46:24.0156 1512 MSPQM - ok
      15:46:24.0171 1512 [ AF5F4F3F14A8EA2C26DE30F7A1E17136 ] mssmbios C:\WINDOWS\system32\DRIVERS\mssmbios.sys
      15:46:24.0296 1512 mssmbios - ok
      15:46:24.0328 1512 [ E53736A9E30C45FA9E7B5EAC55056D1D ] MSTEE C:\WINDOWS\system32\drivers\MSTEE.sys
      15:46:24.0437 1512 MSTEE - ok
      15:46:24.0484 1512 [ 2F625D11385B1A94360BFC70AAEFDEE1 ] Mup C:\WINDOWS\system32\drivers\Mup.sys
      15:46:24.0593 1512 Mup - ok
      15:46:24.0625 1512 [ 5B50F1B2A2ED47D560577B221DA734DB ] NABTSFEC C:\WINDOWS\system32\DRIVERS\NABTSFEC.sys
      15:46:24.0750 1512 NABTSFEC - ok
      15:46:24.0812 1512 [ FD578FCC03BBD76AF1E62202E6670D29 ] napagent C:\WINDOWS\System32\qagentrt.dll
      15:46:24.0937 1512 napagent - ok
      15:46:25.0062 1512 [ B498A14133BD09AD0817590ACE4470AD ] NBService C:\Archivos de programa\Nero\Nero 7\Nero BackItUp\NBService.exe
      15:46:25.0109 1512 NBService - ok
      15:46:25.0140 1512 [ 1DF7F42665C94B825322FAE71721130D ] NDIS C:\WINDOWS\system32\drivers\NDIS.sys
      15:46:25.0250 1512 NDIS - ok
      15:46:25.0281 1512 [ 7FF1F1FD8609C149AA432F95A8163D97 ] NdisIP C:\WINDOWS\system32\DRIVERS\NdisIP.sys
      15:46:25.0421 1512 NdisIP - ok
      15:46:25.0484 1512 [ 1AB3D00C991AB086E69DB84B6C0ED78F ] NdisTapi C:\WINDOWS\system32\DRIVERS\ndistapi.sys
      15:46:25.0609 1512 NdisTapi - ok
      15:46:25.0640 1512 [ F927A4434C5028758A842943EF1A3849 ] Ndisuio C:\WINDOWS\system32\DRIVERS\ndisuio.sys
      15:46:25.0750 1512 Ndisuio - ok
      15:46:25.0765 1512 [ EDC1531A49C80614B2CFDA43CA8659AB ] NdisWan C:\WINDOWS\system32\DRIVERS\ndiswan.sys
      15:46:25.0890 1512 NdisWan - ok
      15:46:25.0890 1512 [ 6215023940CFD3702B46ABC304E1D45A ] NDProxy C:\WINDOWS\system32\drivers\NDProxy.sys
      15:46:26.0015 1512 NDProxy - ok
      15:46:26.0015 1512 [ 5D81CF9A2F1A3A756B66CF684911CDF0 ] NetBIOS C:\WINDOWS\system32\DRIVERS\netbios.sys
      15:46:26.0125 1512 NetBIOS - ok
      15:46:26.0156 1512 [ 74B2B2F5BEA5E9A3DC021D685551BD3D ] NetBT C:\WINDOWS\system32\DRIVERS\netbt.sys
      15:46:26.0281 1512 NetBT - ok
      15:46:26.0359 1512 [ 96B009E5B163850CF94DC333ED2BEE93 ] NetDDE C:\WINDOWS\system32\netdde.exe
      15:46:26.0484 1512 NetDDE - ok
      15:46:26.0500 1512 [ 96B009E5B163850CF94DC333ED2BEE93 ] NetDDEdsdm C:\WINDOWS\system32\netdde.exe
      15:46:26.0609 1512 NetDDEdsdm - ok
      15:46:26.0671 1512 [ 671ACA589DA3733FAC878A751C5BF0ED ] Netlogon C:\WINDOWS\system32\lsass.exe
      15:46:26.0796 1512 Netlogon - ok
      15:46:26.0843 1512 [ A48884C9359EE9F1FC8F3F0D93FB1D95 ] Netman C:\WINDOWS\System32\netman.dll
      15:46:26.0984 1512 Netman - ok
      15:46:27.0015 1512 [ D22CD77D4F0D63D1169BB35911BFF12D ] NetTcpPortSharing C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\SMSvcHost.exe
      15:46:27.0031 1512 NetTcpPortSharing - ok
      15:46:27.0078 1512 [ 738AE6EEE9531C826E212BF686B0C5E5 ] Nla C:\WINDOWS\System32\mswsock.dll
      15:46:27.0140 1512 Nla - ok
      15:46:27.0156 1512 [ 1E421A6BCF2203CC61B821ADA9DE878B ] nm C:\WINDOWS\system32\DRIVERS\NMnt.sys
      15:46:27.0265 1512 nm - ok
      15:46:27.0343 1512 [ A328A46D87BB92CE4D8A4528E9D84787 ] NMIndexingService C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMIndexingService.exe
      15:46:27.0359 1512 NMIndexingService - ok
      15:46:27.0421 1512 [ F44ADDBF29905CB19F52FC9FE6A0EFA1 ] nosGetPlusHelper C:\Archivos de programa\NOS\bin\getPlus_Helper_3004.dll
      15:46:27.0421 1512 nosGetPlusHelper - ok
      15:46:27.0453 1512 [ 3182D64AE053D6FB034F44B6DEF8034A ] Npfs C:\WINDOWS\system32\drivers\Npfs.sys
      15:46:27.0578 1512 Npfs - ok
      15:46:27.0593 1512 npggsvc - ok
      15:46:27.0640 1512 [ 78A08DD6A8D65E697C18E1DB01C5CDCA ] Ntfs C:\WINDOWS\system32\drivers\Ntfs.sys
      15:46:27.0796 1512 Ntfs - ok
      15:46:27.0843 1512 [ 671ACA589DA3733FAC878A751C5BF0ED ] NtLmSsp C:\WINDOWS\system32\lsass.exe
      15:46:27.0953 1512 NtLmSsp - ok
      15:46:28.0000 1512 [ D60C40D71A4D874C903255E4827AFA0C ] NtmsSvc C:\WINDOWS\system32\ntmssvc.dll
      15:46:28.0156 1512 NtmsSvc - ok
      15:46:28.0187 1512 [ 73C1E1F395918BC2C6DD67AF7591A3AD ] Null C:\WINDOWS\system32\drivers\Null.sys
      15:46:28.0312 1512 Null - ok
      15:46:28.0750 1512 [ 062C16F3364C7706713282163586988E ] nv C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
      15:46:29.0203 1512 nv - ok
      15:46:29.0312 1512 [ 5150B108EA88831E1C599603D8B89621 ] NVSvc C:\WINDOWS\system32\nvsvc32.exe
      15:46:29.0328 1512 NVSvc - ok
      15:46:29.0437 1512 [ 83E8AB7BB3C8956C53FEC071C94F0BBB ] nvUpdatusService C:\Archivos de programa\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
      15:46:29.0515 1512 nvUpdatusService - ok
      15:46:29.0578 1512 [ B305F3FAD35083837EF46A0BBCE2FC57 ] NwlnkFlt C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
      15:46:29.0703 1512 NwlnkFlt - ok
      15:46:29.0734 1512 [ C99B3415198D1AAB7227F2C88FD664B9 ] NwlnkFwd C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
      15:46:29.0859 1512 NwlnkFwd - ok
      15:46:29.0953 1512 [ 7A56CF3E3F12E8AF599963B16F50FB6A ] ose C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE
      15:46:29.0968 1512 ose - ok
      15:46:30.0031 1512 [ E7855CBD8BD1FDA085A3F92CFF7906E2 ] Parport C:\WINDOWS\system32\DRIVERS\parport.sys
      15:46:30.0156 1512 Parport - ok
      15:46:30.0171 1512 [ BEB3BA25197665D82EC7065B724171C6 ] PartMgr C:\WINDOWS\system32\drivers\PartMgr.sys
      15:46:30.0296 1512 PartMgr - ok
      15:46:30.0328 1512 [ FAD44D704ECD7D39AD01415B8BB34204 ] ParVdm C:\WINDOWS\system32\drivers\ParVdm.sys
      15:46:30.0421 1512 ParVdm - ok
      15:46:30.0453 1512 [ F11BC84AE6C7B003B5E0C8EEB4A1F444 ] PCI C:\WINDOWS\system32\DRIVERS\pci.sys
      15:46:30.0593 1512 PCI - ok
      15:46:30.0625 1512 PCIDump - ok
      15:46:30.0656 1512 [ 33D63F0A9021ACB4D75D83B646B93A30 ] PCIIde C:\WINDOWS\system32\DRIVERS\pciide.sys
      15:46:30.0781 1512 PCIIde - ok
      15:46:30.0828 1512 [ F50C27CCA56DC97B3A45E7F0059BD2BA ] Pcmcia C:\WINDOWS\system32\drivers\Pcmcia.sys
      15:46:30.0937 1512 Pcmcia - ok
      15:46:30.0953 1512 PDCOMP - ok
      15:46:30.0968 1512 PDFRAME - ok
      15:46:30.0984 1512 PDRELI - ok
      15:46:31.0000 1512 PDRFRAME - ok
      15:46:31.0000 1512 perc2 - ok
      15:46:31.0015 1512 perc2hib - ok
      15:46:31.0078 1512 PEVSystemStart - ok
      15:46:31.0125 1512 [ 957B82EC80AD7EAD64E5E47DF6B0DC40 ] pfc C:\WINDOWS\system32\drivers\pfc.sys
      15:46:31.0125 1512 pfc ( UnsignedFile.Multi.Generic ) - warning
      15:46:31.0125 1512 pfc - detected UnsignedFile.Multi.Generic (1)
      15:46:31.0140 1512 [ 953DF7327510DF0DE048B8E80E504EF9 ] PlugPlay C:\WINDOWS\system32\services.exe
      15:46:31.0187 1512 PlugPlay - ok
      15:46:31.0234 1512 [ A1DD33D16F277CE34124EE52AB2C0F14 ] PnkBstrA C:\WINDOWS\system32\PnkBstrA.exe
      15:46:31.0250 1512 PnkBstrA - ok
      15:46:31.0265 1512 [ 671ACA589DA3733FAC878A751C5BF0ED ] PolicyAgent C:\WINDOWS\system32\lsass.exe
      15:46:31.0375 1512 PolicyAgent - ok
      15:46:31.0406 1512 [ 7D5A2D755B6C6579F63657B527D6FF1B ] PortTalk C:\WINDOWS\system32\Drivers\PortTalk.sys
      15:46:31.0406 1512 PortTalk ( UnsignedFile.Multi.Generic ) - warning
      15:46:31.0406 1512 PortTalk - detected UnsignedFile.Multi.Generic (1)
      15:46:31.0453 1512 [ EFEEC01B1D3CF84F16DDD24D9D9D8F99 ] PptpMiniport C:\WINDOWS\system32\DRIVERS\raspptp.sys
      15:46:31.0609 1512 PptpMiniport - ok
      15:46:31.0734 1512 [ 09921A58B4278BC16EFA91A8FE480C50 ] prodrv06 C:\WINDOWS\System32\drivers\prodrv06.sys
      15:46:31.0812 1512 prodrv06 ( UnsignedFile.Multi.Generic ) - warning
      15:46:31.0812 1512 prodrv06 - detected UnsignedFile.Multi.Generic (1)
      15:46:31.0859 1512 [ 97184F49AA0733F6EEA28ADA265BA8DA ] prohlp02 C:\WINDOWS\system32\drivers\prohlp02.sys
      15:46:31.0890 1512 prohlp02 ( UnsignedFile.Multi.Generic ) - warning
      15:46:31.0890 1512 prohlp02 - detected UnsignedFile.Multi.Generic (1)
      15:46:31.0953 1512 [ 960BCE3ED38761B446AABAC06C76BADF ] prosync1 C:\WINDOWS\system32\drivers\prosync1.sys
      15:46:31.0953 1512 prosync1 ( UnsignedFile.Multi.Generic ) - warning
      15:46:31.0953 1512 prosync1 - detected UnsignedFile.Multi.Generic (1)
      15:46:31.0968 1512 [ 671ACA589DA3733FAC878A751C5BF0ED ] ProtectedStorage C:\WINDOWS\system32\lsass.exe
      15:46:32.0156 1512 ProtectedStorage - ok
      15:46:32.0171 1512 [ 09298EC810B07E5D582CB3A3F9255424 ] PSched C:\WINDOWS\system32\DRIVERS\psched.sys
      15:46:32.0296 1512 PSched - ok
      15:46:32.0312 1512 [ 80D317BD1C3DBC5D4FE7B1678C60CADD ] Ptilink C:\WINDOWS\system32\DRIVERS\ptilink.sys
      15:46:32.0437 1512 Ptilink - ok
      15:46:32.0468 1512 [ 153D02480A0A2F45785522E814C634B6 ] PxHelp20 C:\WINDOWS\system32\Drivers\PxHelp20.sys
      15:46:32.0468 1512 PxHelp20 - ok
      15:46:32.0484 1512 ql1080 - ok
      15:46:32.0500 1512 Ql10wnt - ok
      15:46:32.0515 1512 ql12160 - ok
      15:46:32.0531 1512 ql1240 - ok
      15:46:32.0546 1512 ql1280 - ok
      15:46:32.0578 1512 [ FE0D99D6F31E4FAD8159F690D68DED9C ] RasAcd C:\WINDOWS\system32\DRIVERS\rasacd.sys
      15:46:32.0703 1512 RasAcd - ok
      15:46:32.0750 1512 [ 8345C6F52F38A95B950B9B3D064AE3EE ] RasAuto C:\WINDOWS\System32\rasauto.dll
      15:46:32.0875 1512 RasAuto - ok
      15:46:32.0906 1512 [ 11B4A627BC9614B885C4969BFA5FF8A6 ] Rasl2tp C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
      15:46:33.0031 1512 Rasl2tp - ok
      15:46:33.0093 1512 [ B279F6A9EA3ACB5844C103ED2DB65B44 ] RasMan C:\WINDOWS\System32\rasmans.dll
      15:46:33.0250 1512 RasMan - ok
      15:46:33.0296 1512 [ 5BC962F2654137C9909C3D4603587DEE ] RasPppoe C:\WINDOWS\system32\DRIVERS\raspppoe.sys
      15:46:33.0453 1512 RasPppoe - ok
      15:46:33.0515 1512 [ FDBB1D60066FCFBB7452FD8F9829B242 ] Raspti C:\WINDOWS\system32\DRIVERS\raspti.sys
      15:46:33.0656 1512 Raspti - ok
      15:46:33.0703 1512 [ 7AD224AD1A1437FE28D89CF22B17780A ] Rdbss C:\WINDOWS\system32\DRIVERS\rdbss.sys
      15:46:33.0921 1512 Rdbss - ok
      15:46:33.0968 1512 [ 4912D5B403614CE99C28420F75353332 ] RDPCDD C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
      15:46:34.0093 1512 RDPCDD - ok
      15:46:34.0156 1512 [ 15CABD0F7C00C47C70124907916AF3F1 ] rdpdr C:\WINDOWS\system32\DRIVERS\rdpdr.sys
      15:46:34.0281 1512 rdpdr - ok
      15:46:34.0328 1512 [ 6728E45B66F93C08F11DE2E316FC70DD ] RDPWD C:\WINDOWS\system32\drivers\RDPWD.sys
      15:46:34.0453 1512 RDPWD - ok
      15:46:34.0515 1512 [ 6193E6B05336C277EA4DB39AFA46BC23 ] RDSessMgr C:\WINDOWS\system32\sessmgr.exe
      15:46:34.0640 1512 RDSessMgr - ok
      15:46:34.0671 1512 [ 20950948970A0EA329B4254052BCF093 ] redbook C:\WINDOWS\system32\DRIVERS\redbook.sys
      15:46:34.0796 1512 redbook - ok
      15:46:34.0843 1512 [ 1B7481D377BD7997452352F82F4CFFED ] RemoteAccess C:\WINDOWS\System32\mprdim.dll
      15:46:34.0968 1512 RemoteAccess - ok
      15:46:35.0031 1512 [ E424F05B07AC4357DC08D06218D76C7C ] RemoteRegistry C:\WINDOWS\system32\regsvc.dll
      15:46:35.0156 1512 RemoteRegistry - ok
      15:46:35.0203 1512 [ 9FCCBDBAA0CF915AAC0132DE1C9566B3 ] RpcLocator C:\WINDOWS\system32\locator.exe
      15:46:35.0328 1512 RpcLocator - ok
      15:46:35.0375 1512 [ 97869C55F562B777987100EA30AD8108 ] RpcSs C:\WINDOWS\system32\rpcss.dll
      15:46:35.0437 1512 RpcSs - ok
      15:46:35.0484 1512 [ 5E38212C2C00DC342E2281D2F6BFB746 ] RSVP C:\WINDOWS\system32\rsvp.exe
      15:46:35.0609 1512 RSVP - ok
      15:46:35.0640 1512 [ CF84B1F0E8B14D4120AAF9CF35CBB265 ] RTL8023xp C:\WINDOWS\system32\DRIVERS\Rtnicxp.sys
      15:46:35.0734 1512 RTL8023xp - ok
      15:46:35.0796 1512 [ D507C1400284176573224903819FFDA3 ] rtl8139 C:\WINDOWS\system32\DRIVERS\RTL8139.SYS
      15:46:35.0890 1512 rtl8139 - ok
      15:46:35.0953 1512 [ 40607773FECD00708354809E233823F2 ] RTLE8023xp C:\WINDOWS\system32\DRIVERS\Rtenicxp.sys
      15:46:35.0953 1512 RTLE8023xp - ok
      15:46:35.0968 1512 [ 671ACA589DA3733FAC878A751C5BF0ED ] SamSs C:\WINDOWS\system32\lsass.exe
      15:46:36.0078 1512 SamSs - ok
      15:46:36.0125 1512 [ A50E4DD0E2A9DF762807C84153B4953A ] SCardSvr C:\WINDOWS\System32\SCardSvr.exe
      15:46:36.0250 1512 SCardSvr - ok
      15:46:36.0312 1512 [ 51BE25C404D3DD344C6079DE715E4977 ] Schedule C:\WINDOWS\system32\schedsvc.dll
      15:46:36.0437 1512 Schedule - ok
      15:46:36.0468 1512 [ D3FA9FB502AD62001101F495BBBAC42E ] SCREAMINGBDRIVER C:\WINDOWS\system32\drivers\ScreamingBAudio.sys
      15:46:36.0484 1512 SCREAMINGBDRIVER - ok
      15:46:36.0531 1512 [ 90A3935D05B494A5A39D37E71F09A677 ] Secdrv C:\WINDOWS\system32\DRIVERS\secdrv.sys
      15:46:36.0656 1512 Secdrv - ok
      15:46:36.0734 1512 [ B62C489373A1E1B949FC0FAA90F3B47A ] seclogon C:\WINDOWS\System32\seclogon.dll
      15:46:36.0843 1512 seclogon - ok
      15:46:36.0906 1512 [ A95A27C874B0931A6F8F656924F4A14A ] SENS C:\WINDOWS\system32\sens.dll
      15:46:37.0031 1512 SENS - ok
      15:46:37.0062 1512 [ 0F29512CCD6BEAD730039FB4BD2C85CE ] serenum C:\WINDOWS\system32\DRIVERS\serenum.sys
      15:46:37.0187 1512 serenum - ok
      15:46:37.0250 1512 [ F41B42B92AE9C1191858C3F80CC24A9C ] Serial C:\WINDOWS\system32\DRIVERS\serial.sys
      15:46:37.0375 1512 Serial - ok
      15:46:37.0453 1512 [ 462AEE0EA0481EA8BD45CAC876A4CCC4 ] sfhlp01 C:\WINDOWS\system32\drivers\sfhlp01.sys
      15:46:37.0468 1512 sfhlp01 ( UnsignedFile.Multi.Generic ) - warning
      15:46:37.0468 1512 sfhlp01 - detected UnsignedFile.Multi.Generic (1)
      15:46:37.0500 1512 [ 8E6B8C671615D126FDC553D1E2DE5562 ] Sfloppy C:\WINDOWS\system32\drivers\Sfloppy.sys
      15:46:37.0625 1512 Sfloppy - ok
      15:46:37.0703 1512 [ 4A4EF3EE166FAD4A04B1D767AD986329 ] SharedAccess C:\WINDOWS\System32\ipnathlp.dll
      15:46:37.0843 1512 SharedAccess - ok
      15:46:37.0875 1512 [ CA70EDBF32032EA53F114CB930741CB5 ] ShellHWDetection C:\WINDOWS\System32\shsvcs.dll
      15:46:38.0015 1512 ShellHWDetection - ok
      15:46:38.0015 1512 Simbad - ok
      15:46:38.0078 1512 [ F07AF60B152221472FBDB2FECEC4896D ] SkypeUpdate C:\Archivos de programa\Skype\Updater\Updater.exe
      15:46:38.0078 1512 SkypeUpdate - ok
      15:46:38.0125 1512 [ 866D538EBE33709A5C9F5C62B73B7D14 ] SLIP C:\WINDOWS\system32\DRIVERS\SLIP.sys
      15:46:38.0234 1512 SLIP - ok
      15:46:38.0265 1512 Sparrow - ok
      15:46:38.0296 1512 [ 3FA2E254BFBCE52B3C6F1BF23AAB6911 ] speedfan C:\WINDOWS\system32\speedfan.sys
      15:46:38.0312 1512 speedfan - ok
      15:46:38.0343 1512 [ AB8B92451ECB048A4D1DE7C3FFCB4A9F ] splitter C:\WINDOWS\system32\drivers\splitter.sys
      15:46:38.0453 1512 splitter - ok
      15:46:38.0500 1512 [ CDD2DC6AE65084481E723E746C20539A ] Spooler C:\WINDOWS\system32\spoolsv.exe
      15:46:38.0625 1512 Spooler - ok
      15:46:38.0703 1512 [ 0C1DAD75274CB6E31F053CE3E08BF9C3 ] sptd C:\WINDOWS\system32\Drivers\sptd.sys
      15:46:38.0750 1512 sptd - ok
      15:46:38.0765 1512 [ CCB3065C3EE63A4515FE84AF9E78D1DD ] sr C:\WINDOWS\system32\DRIVERS\sr.sys
      15:46:38.0906 1512 sr - ok
      15:46:39.0187 1512 [ 0F30EEC6013FCF76693405EC4A7DF899 ] srservice C:\WINDOWS\system32\srsvc.dll
      15:46:39.0390 1512 srservice - ok
      15:46:39.0453 1512 [ 25ECEA986742275ECB23A1CB6BC87A61 ] SRS_SSCFilter C:\WINDOWS\system32\drivers\srs_sscfilter_i386.sys
      15:46:39.0468 1512 SRS_SSCFilter - ok
      15:46:39.0500 1512 [ 5252605079810904E31C332E241CD59B ] Srv C:\WINDOWS\system32\DRIVERS\srv.sys
      15:46:39.0640 1512 Srv - ok
      15:46:39.0687 1512 [ B622A432EF02895DE4AA38AC8B85FA4C ] SSDPSRV C:\WINDOWS\System32\ssdpsrv.dll
      15:46:39.0812 1512 SSDPSRV - ok
      15:46:39.0875 1512 [ 7226422C95FDF8AA6092EE964912B0DF ] stisvc C:\WINDOWS\system32\wiaservc.dll
      15:46:40.0015 1512 stisvc - ok
      15:46:40.0046 1512 [ 77813007BA6265C4B6098187E6ED79D2 ] streamip C:\WINDOWS\system32\DRIVERS\StreamIP.sys
      15:46:40.0171 1512 streamip - ok
      15:46:40.0203 1512 [ 3941D127AEF12E93ADDF6FE6EE027E0F ] swenum C:\WINDOWS\system32\DRIVERS\swenum.sys
      15:46:40.0328 1512 swenum - ok
      15:46:40.0406 1512 [ F577910A133A592234EBAAD3F3AFA258 ] SwitchBoard C:\Archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe
      15:46:40.0453 1512 SwitchBoard ( UnsignedFile.Multi.Generic ) - warning
      15:46:40.0453 1512 SwitchBoard - detected UnsignedFile.Multi.Generic (1)
      15:46:40.0484 1512 [ 8CE882BCC6CF8A62F2B2323D95CB3D01 ] swmidi C:\WINDOWS\system32\drivers\swmidi.sys
      15:46:40.0625 1512 swmidi - ok
      15:46:40.0656 1512 SwPrv - ok
      15:46:40.0671 1512 symc810 - ok
      15:46:40.0687 1512 symc8xx - ok
      15:46:40.0703 1512 sym_hi - ok
      15:46:40.0718 1512 sym_u3 - ok
      15:46:40.0750 1512 [ 8B83F3ED0F1688B4958F77CD6D2BF290 ] sysaudio C:\WINDOWS\system32\drivers\sysaudio.sys
      15:46:40.0875 1512 sysaudio - ok
      15:46:40.0921 1512 [ F1F6EE807F0112AAE2259B253B6DDF89 ] SysmonLog C:\WINDOWS\system32\smlogsvc.exe
      15:46:41.0046 1512 SysmonLog - ok
      15:46:41.0093 1512 [ 04A5B8EA326951DB27DF60A14F2999FF ] TapiSrv C:\WINDOWS\System32\tapisrv.dll
      15:46:41.0218 1512 TapiSrv - ok
      15:46:41.0312 1512 [ 9AEFA14BD6B182D61E3119FA5F436D3D ] Tcpip C:\WINDOWS\system32\DRIVERS\tcpip.sys
      15:46:41.0390 1512 Tcpip - ok
      15:46:41.0468 1512 [ 6471A66807F5E104E4885F5B67349397 ] TDPIPE C:\WINDOWS\system32\drivers\TDPIPE.sys
      15:46:41.0593 1512 TDPIPE - ok
      15:46:41.0625 1512 [ C56B6D0402371CF3700EB322EF3AAF61 ] TDTCP C:\WINDOWS\system32\drivers\TDTCP.sys
      15:46:41.0750 1512 TDTCP - ok
      15:46:41.0765 1512 [ 88155247177638048422893737429D9E ] TermDD C:\WINDOWS\system32\DRIVERS\termdd.sys
      15:46:41.0890 1512 TermDD - ok
      15:46:41.0968 1512 [ 288B20D56D5F0EC4BCC77FBFA5A81740 ] TermService C:\WINDOWS\System32\termsrv.dll
      15:46:42.0109 1512 TermService - ok
      15:46:42.0156 1512 [ CA70EDBF32032EA53F114CB930741CB5 ] Themes C:\WINDOWS\System32\shsvcs.dll
      15:46:42.0265 1512 Themes - ok
      15:46:42.0281 1512 TkFsFtM - ok
      15:46:42.0328 1512 [ 65BF170815C0DF302BE038FD8891C722 ] TlntSvr C:\WINDOWS\system32\tlntsvr.exe
      15:46:42.0437 1512 TlntSvr - ok
      15:46:42.0453 1512 TosIde - ok
      15:46:42.0500 1512 [ 5F226C681049FB1DF1578AF32BB641F1 ] TPkd C:\WINDOWS\system32\drivers\TPkd.sys
      15:46:42.0515 1512 TPkd - ok
      15:46:42.0562 1512 [ 321761D0D12EE5285CE79AC175CBA672 ] TrkWks C:\WINDOWS\system32\trkwks.dll
      15:46:42.0687 1512 TrkWks - ok
      15:46:42.0734 1512 [ FBC7D7A6F72BC231774B79735C888FA5 ] TuneUp.Defrag C:\WINDOWS\System32\TuneUpDefragService.exe
      15:46:42.0765 1512 TuneUp.Defrag - ok
      15:46:42.0828 1512 [ 52B1899DF89DFFFC9C94F2214459C386 ] TuneUp.ProgramStatisticsSvc C:\WINDOWS\System32\TUProgSt.exe
      15:46:42.0859 1512 TuneUp.ProgramStatisticsSvc - ok
      15:46:42.0890 1512 [ 5787B80C2E3C5E2F56C2A233D91FA2C9 ] Udfs C:\WINDOWS\system32\drivers\Udfs.sys
      15:46:43.0000 1512 Udfs - ok
      15:46:43.0015 1512 ultra - ok
      15:46:43.0078 1512 [ F365FA561C3AB455D8685770D208691A ] UnlockerDriver5 C:\Archivos de programa\Unlocker\UnlockerDriver5.sys
      15:46:43.0078 1512 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - warning
      15:46:43.0078 1512 UnlockerDriver5 - detected UnsignedFile.Multi.Generic (1)
      15:46:43.0140 1512 [ 402DDC88356B1BAC0EE3DD1580C76A31 ] Update C:\WINDOWS\system32\DRIVERS\update.sys
      15:46:43.0265 1512 Update - ok
      15:46:43.0343 1512 [ 7594203F459ABDB5FE53C08D6B1BD53B ] upnphost C:\WINDOWS\System32\upnphost.dll
      15:46:43.0468 1512 upnphost - ok
      15:46:43.0515 1512 [ 575BAFEB33AF057B13A10579D0DC884A ] UPS C:\WINDOWS\System32\ups.exe
      15:46:43.0625 1512 UPS - ok
      15:46:43.0687 1512 [ E919708DB44ED8543A7C017953148330 ] usbaudio C:\WINDOWS\system32\drivers\usbaudio.sys
      15:46:43.0812 1512 usbaudio - ok
      15:46:43.0859 1512 [ 173F317CE0DB8E21322E71B7E60A27E8 ] usbccgp C:\WINDOWS\system32\DRIVERS\usbccgp.sys
      15:46:43.0984 1512 usbccgp - ok
      15:46:44.0031 1512 [ 65DCF09D0E37D4C6B11B5B0B76D470A7 ] usbehci C:\WINDOWS\system32\DRIVERS\usbehci.sys
      15:46:44.0140 1512 usbehci - ok
      15:46:44.0171 1512 [ 1AB3CDDE553B6E064D2E754EFE20285C ] usbhub C:\WINDOWS\system32\DRIVERS\usbhub.sys
      15:46:44.0296 1512 usbhub - ok
      15:46:44.0359 1512 [ A0B8CF9DEB1184FBDD20784A58FA75D4 ] usbscan C:\WINDOWS\system32\DRIVERS\usbscan.sys
      15:46:44.0468 1512 usbscan - ok
      15:46:44.0500 1512 [ A32426D9B14A089EAA1D922E0C5801A9 ] USBSTOR C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
      15:46:44.0640 1512 USBSTOR - ok
      15:46:44.0656 1512 [ 26496F9DEE2D787FC3E61AD54821FFE6 ] usbuhci C:\WINDOWS\system32\DRIVERS\usbuhci.sys
      15:46:44.0781 1512 usbuhci - ok
      15:46:44.0812 1512 [ 63BBFCA7F390F4C49ED4B96BFB1633E0 ] usbvideo C:\WINDOWS\system32\Drivers\usbvideo.sys
      15:46:44.0921 1512 usbvideo - ok
      15:46:44.0968 1512 [ 0D3A8FAFCEACD8B7625CD549757A7DF1 ] VgaSave C:\WINDOWS\System32\drivers\vga.sys
      15:46:45.0109 1512 VgaSave - ok
      15:46:45.0125 1512 ViaIde - ok
      15:46:45.0171 1512 [ 0F0CFDB1EBFF88AB998003C65CD79B4B ] VMUVC C:\WINDOWS\system32\Drivers\VMUVC.sys
      15:46:45.0187 1512 VMUVC ( UnsignedFile.Multi.Generic ) - warning
      15:46:45.0187 1512 VMUVC - detected UnsignedFile.Multi.Generic (1)
      15:46:45.0203 1512 [ C41FFDC191E6C832E2E53C967EAE0A16 ] VolSnap C:\WINDOWS\system32\drivers\VolSnap.sys
      15:46:45.0328 1512 VolSnap - ok
      15:46:45.0406 1512 [ 60F28DE3FAE525D026E4D66405B80DB8 ] VSS C:\WINDOWS\System32\vssvc.exe
      15:46:45.0546 1512 VSS - ok
      15:46:45.0593 1512 [ C9A8BA443F809B70BCCCCD60CC73FA5C ] vulfnths C:\WINDOWS\System32\Drivers\vulfnth.sys
      15:46:45.0593 1512 vulfnths ( UnsignedFile.Multi.Generic ) - warning
      15:46:45.0593 1512 vulfnths - detected UnsignedFile.Multi.Generic (1)
      15:46:45.0625 1512 [ 2D8C55889616F7767E9FB8ADEE37A02A ] vulfntrs C:\WINDOWS\System32\Drivers\vulfntr.sys
      15:46:45.0656 1512 vulfntrs ( UnsignedFile.Multi.Generic ) - warning
      15:46:45.0656 1512 vulfntrs - detected UnsignedFile.Multi.Generic (1)
      15:46:45.0687 1512 [ D3EE7CC6B0C29083A874DB9D890BCEB5 ] vvftUVC C:\WINDOWS\system32\drivers\vvftUVC.sys
      15:46:45.0703 1512 vvftUVC ( UnsignedFile.Multi.Generic ) - warning
      15:46:45.0703 1512 vvftUVC - detected UnsignedFile.Multi.Generic (1)
      15:46:45.0781 1512 [ C71CFACDBFADD819736F61F5738BDDC1 ] W32Time C:\WINDOWS\system32\w32time.dll
      15:46:45.0906 1512 W32Time - ok
      15:46:45.0953 1512 [ E20B95BAEDB550F32DD489265C1DA1F6 ] Wanarp C:\WINDOWS\system32\DRIVERS\wanarp.sys
      15:46:46.0078 1512 Wanarp - ok
      15:46:46.0093 1512 WDICA - ok
      15:46:46.0125 1512 [ 6768ACF64B18196494413695F0C3A00F ] wdmaud C:\WINDOWS\system32\drivers\wdmaud.sys
      15:46:46.0250 1512 wdmaud - ok
      15:46:46.0296 1512 [ D90C1C67567CBDC7D55015A8C102C120 ] wdm_au8810 C:\WINDOWS\system32\drivers\adm8810.sys
      15:46:46.0437 1512 wdm_au8810 - ok
      15:46:46.0500 1512 [ 340A4FD9017D1EBD1F6DC435282A39DC ] WebClient C:\WINDOWS\System32\webclnt.dll
      15:46:46.0625 1512 WebClient - ok
      15:46:46.0734 1512 [ A5FC75CAB140CF6A78E16C3681001872 ] winmgmt C:\WINDOWS\system32\wbem\WMIsvc.dll
      15:46:46.0859 1512 winmgmt - ok
      15:46:46.0953 1512 [ F4DB1F1417FF329E8FF217D5C474D5D7 ] WmdmPmSN C:\WINDOWS\system32\MsPMSNSv.dll
      15:46:47.0000 1512 WmdmPmSN - ok
      15:46:47.0046 1512 [ C40A0AF014D54DA0E729066845A2A6DC ] Wmi C:\WINDOWS\System32\advapi32.dll
      15:46:47.0125 1512 Wmi - ok
      15:46:47.0156 1512 [ CA1A5270ACC0062B13F62CA5A0CD8DA8 ] WmiApSrv C:\WINDOWS\system32\wbem\wmiapsrv.exe
      15:46:47.0265 1512 WmiApSrv - ok
      15:46:47.0359 1512 [ BB47DB10551657628268BEE11D025777 ] WMPNetworkSvc C:\Archivos de programa\Windows Media Player\WMPNetwk.exe
      15:46:47.0421 1512 WMPNetworkSvc - ok
      15:46:47.0546 1512 [ DCF3E3EDF5109EE8BC02FE6E1F045795 ] WPFFontCache_v0400 C:\WINDOWS\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe
      15:46:47.0593 1512 WPFFontCache_v0400 - ok
      15:46:47.0593 1512 WPRO_40_1123 - ok
      15:46:47.0640 1512 [ 6ABE6E225ADB5A751622A9CC3BC19CE8 ] WS2IFSL C:\WINDOWS\System32\drivers\ws2ifsl.sys
      15:46:47.0765 1512 WS2IFSL - ok
      15:46:47.0843 1512 [ 8CD684FD248DFE208C2F8F5052838A81 ] wscsvc C:\WINDOWS\system32\wscsvc.dll
      15:46:47.0968 1512 wscsvc - ok
      15:46:47.0984 1512 [ C98B39829C2BBD34E454150633C62C78 ] WSTCODEC C:\WINDOWS\system32\DRIVERS\WSTCODEC.SYS
      15:46:48.0125 1512 WSTCODEC - ok
      15:46:48.0171 1512 [ 0B8FC4D0F9D6964713E81AD558B50A71 ] wuauserv C:\WINDOWS\system32\wuauserv.dll
      15:46:48.0296 1512 wuauserv - ok
      15:46:48.0343 1512 [ 443F0A35CB3BE5D176053DA39157A898 ] WudfPf C:\WINDOWS\system32\DRIVERS\WudfPf.sys
      15:46:48.0390 1512 WudfPf - ok
      15:46:48.0406 1512 [ E12D4C486D7EB4E0961C27558DC25AF7 ] WudfRd C:\WINDOWS\system32\DRIVERS\wudfrd.sys
      15:46:48.0437 1512 WudfRd - ok
      15:46:48.0484 1512 [ 8A92B1F02571B634F50DB35A934989F6 ] WudfSvc C:\WINDOWS\System32\WUDFSvc.dll
      15:46:48.0515 1512 WudfSvc - ok
      15:46:48.0562 1512 [ D2CAF9FF9DA12F0CC6398C6E331015E4 ] WZCSVC C:\WINDOWS\System32\wzcsvc.dll
      15:46:48.0703 1512 WZCSVC - ok
      15:46:48.0765 1512 [ 14FDADCF05A37582399DAF1DA1DE1C7B ] xmlprov C:\WINDOWS\System32\xmlprov.dll
      15:46:48.0890 1512 xmlprov - ok
      15:46:48.0953 1512 ================ Scan global ===============================
      15:46:49.0015 1512 [ 5E83265291342AE4B13481CA25B115A0 ] C:\WINDOWS\system32\basesrv.dll
      15:46:49.0031 1512 [ F24ABBB52A7895B77CB70AB05F01F2C3 ] C:\WINDOWS\system32\winsrv.dll
      15:46:49.0046 1512 [ F24ABBB52A7895B77CB70AB05F01F2C3 ] C:\WINDOWS\system32\winsrv.dll
      15:46:49.0062 1512 [ 953DF7327510DF0DE048B8E80E504EF9 ] C:\WINDOWS\system32\services.exe
      15:46:49.0062 1512 [Global] - ok
      15:46:49.0062 1512 ================ Scan MBR ==================================
      15:46:49.0093 1512 [ 792F61657FECE3D17A9122B4EE282847 ] \Device\Harddisk0\DR0
      15:46:49.0406 1512 \Device\Harddisk0\DR0 - ok
      15:46:49.0406 1512 ================ Scan VBR ==================================
      15:46:49.0406 1512 [ 76285885B36DB76D86DD32A03DE35337 ] \Device\Harddisk0\DR0\Partition1
      15:46:49.0406 1512 \Device\Harddisk0\DR0\Partition1 - ok
      15:46:49.0406 1512 ============================================================
      15:46:49.0406 1512 Scan finished
      15:46:49.0406 1512 ============================================================
      15:46:49.0531 1748 Detected object count: 18
      15:46:49.0531 1748 Actual detected object count: 18
      15:47:28.0359 1748 C:\WINDOWS\System32\Drivers\7bfa143bd65a6d6a.sys - copied to quarantine
      15:47:28.0375 1748 HKLM\SYSTEM\ControlSet001\services\7bfa143bd65a6d6a - will be deleted on reboot
      15:47:28.0390 1748 HKLM\SYSTEM\ControlSet002\services\7bfa143bd65a6d6a - will be deleted on reboot
      15:47:28.0421 1748 HKLM\SYSTEM\ControlSet003\services\7bfa143bd65a6d6a - will be deleted on reboot
      15:47:28.0468 1748 HKLM\SYSTEM\ControlSet004\services\7bfa143bd65a6d6a - will be deleted on reboot
      15:47:28.0640 1748 C:\WINDOWS\System32\Drivers\7bfa143bd65a6d6a.sys - will be deleted on reboot
      15:47:28.0640 1748 7bfa143bd65a6d6a ( Rootkit.Win32.Necurs.gen ) - User select action: Delete
      15:47:28.0656 1748 ACRUSBTM ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0656 1748 ACRUSBTM ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0656 1748 Akamai ( HiddenFile.Multi.Generic ) - skipped by user
      15:47:28.0656 1748 Akamai ( HiddenFile.Multi.Generic ) - User select action: Skip
      15:47:28.0656 1748 DCamUSBUVT ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0656 1748 DCamUSBUVT ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0656 1748 giveio ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0656 1748 giveio ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0656 1748 IDriverT ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0671 1748 IDriverT ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0671 1748 pfc ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0671 1748 pfc ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0671 1748 PortTalk ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0671 1748 PortTalk ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0671 1748 prodrv06 ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0671 1748 prodrv06 ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0671 1748 prohlp02 ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0671 1748 prohlp02 ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0687 1748 prosync1 ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0687 1748 prosync1 ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0687 1748 sfhlp01 ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0687 1748 sfhlp01 ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0687 1748 SwitchBoard ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0687 1748 SwitchBoard ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0687 1748 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0687 1748 UnlockerDriver5 ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0687 1748 VMUVC ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0687 1748 VMUVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0703 1748 vulfnths ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0703 1748 vulfnths ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0703 1748 vulfntrs ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0703 1748 vulfntrs ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:47:28.0703 1748 vvftUVC ( UnsignedFile.Multi.Generic ) - skipped by user
      15:47:28.0703 1748 vvftUVC ( UnsignedFile.Multi.Generic ) - User select action: Skip
      15:48:01.0078 2648 Deinitialize success


      El segundo es TDSSKiller.2.8.8.0_05.09.2012_15.49.35_log.txt

      15:49:35.0375 0836 TDSS rootkit removing tool 2.8.8.0 Aug 24 2012 13:27:48
      15:49:37.0390 0836 ============================================================
      15:49:37.0390 0836 Current date / time: 2012/09/05 15:49:37.0390
      15:49:37.0390 0836 SystemInfo:
      15:49:37.0390 0836
      15:49:37.0390 0836 OS Version: 5.1.2600 ServicePack: 3.0
      15:49:37.0390 0836 Product type: Workstation
      15:49:37.0390 0836 ComputerName: CAMEL
      15:49:37.0390 0836 UserName: Eduardo
      15:49:37.0390 0836 Windows directory: C:\WINDOWS
      15:49:37.0390 0836 System windows directory: C:\WINDOWS
      15:49:37.0390 0836 Processor architecture: Intel x86
      15:49:37.0390 0836 Number of processors: 2
      15:49:37.0390 0836 Page size: 0x1000
      15:49:37.0390 0836 Boot type: Normal boot
      15:49:37.0390 0836 ============================================================
      15:49:44.0343 0836 BG loaded
      15:49:45.0015 0836 Drive \Device\Harddisk0\DR0 - Size: 0x12A1F16000 (74.53 Gb), SectorSize: 0x200, Cylinders: 0x2601, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000054
      15:49:45.0031 0836 ============================================================
      15:49:45.0031 0836 \Device\Harddisk0\DR0:
      15:49:45.0031 0836 MBR partitions:
      15:49:45.0031 0836 \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x3F, BlocksNum 0x950E482
      15:49:45.0031 0836 ============================================================
      15:50:10.0156 0836 C: <-> \Device\Harddisk0\DR0\Partition1
      15:50:10.0187 0836 ============================================================
      15:50:10.0187 0836 Initialize success
      15:50:10.0187 0836 ============================================================
      15:50:17.0562 0648 Deinitialize success

    6. #6
      Moderadora Gral.
      Avatar de SanMar
      Registrado
      jun 2008
      Ubicación
      Argentina
      Mensajes
      21.029

      Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Hola Edushyan:


      Tenias un lindo rootkit por eso los bloqueos.


      Sobre Comodo tal vez al final tengas que reinstalarlo ya que puede haber quedado dañado por el Rootkit.





      Botón Derecho sobre el ejecutable de ComboFix en tu escritorio>>> eliminar>>> vaciás la papelera.


      Vuelves a descargarlo y a correrlo de la siguiente manera:



      - Descarga la herramienta ComboFix.exe y guárdala en el escritorio.
      • Desactiva temporalmente el Antivirus y/o Antispyware.
      • Cierra todas las ventanas abiertas.
      • Hacele doble clic al archivo ComboFix.exe y seguí las instrucciones.
      • Si te pide actualizar Aceptas.
      • Cuando termine, generara un registro en C:\ComboFix.txt.
        • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
        • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.
      Atención!! No use ComboFix a menos que se le haya indicado específicamente en su mensaje por un integrante de nuestro Staff. Es una herramienta de gran alcance destinada por su creador a ser usada bajo la orientación y supervisión de un experto, no para uso privado. El uso de ComboFix incorrectamente podría generar problemas en su sistema. Por favor, lea las "Negaciones de la Garantía" de ComboFix.
      • Reinicia y pega el reporte de C:\ComboFix.txt en este mismo mensaje.



      No olvides comentar como sigue el equipo.


      Salu2.

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    7. #7
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Wink Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Primera parte:

      ComboFix 12-09-03.07 - Eduardo 07/09/2012 3:10.1.2 - x86
      Microsoft Windows XP Professional 5.1.2600.3.1252.598.3082.18.2045.1492 [GMT -3:00]
      Running from: c:\documents and settings\Eduardo\Escritorio\ComboFix.exe
      AV: AVG Internet Security 2012 *Disabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
      AV: McAfee VirusScan *Disabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
      FW: AVG Internet Security 2012 *Disabled* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
      FW: McAfee Personal Firewall *Enabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}
      .
      WARNING -THIS MACHINE DOES NOT HAVE THE RECOVERY CONSOLE INSTALLED !!
      .
      ADS - WINDOWS: deleted 24 bytes in 1 streams.
      .
      ((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      c:\documents and settings\All Users\Datos de programa\TEMP
      c:\documents and settings\All Users\Datos de programa\TEMP\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\PostBuild.exe
      c:\documents and settings\All Users\Datos de programa\TEMP\{01FB4998-33C4-4431-85ED-079E3EEFE75D}\Setup.exe
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np000_nspavxml.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np001_nspavcr.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np003_nspavsvc.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np044_TyScanLicu.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np046_TyScanu.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np047_TySUtilu.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np048_TyMInfou.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np050_TyScanRTu.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np051_TyMScanu.com
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np052_TeCtrlu.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np053_nspavpi.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np058_nspavsdei.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np059_nspavsd.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np062_nspavno.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\np063_nsphps.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Patch\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspav\Pattern\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np001_nspfwres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np003_nspmainres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np008_nspavres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np009_nspclres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np025_NGP.nsk
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np028_nspfwres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np030_nspmainres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np035_nspavres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np036_nspclres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np052_NGP.nsk
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np059_nspavres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np060_nspclres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np063_nspfwres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np064_nspmainres.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\np080_NGP.nsk
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Patch\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Pattern\update.hash
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspcus\Pattern\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspfw\Patch\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspfw\Pattern\update.hash
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspfw\Pattern\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np000_WINHTTP5.DL_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np004_nspcutil.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np009_nspsysopt.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np010_nspsvc.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np011_nspsvc.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np013_nspclsvc.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np014_nsutility.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np016_nspmainpi.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np017_nspmain.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np019_nsperaser.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np020_nspenpi.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np021_nspencrpt.ex_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np022_nspclpi.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np023_nspencrpt.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np024_nsperaser.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np030_TKFsAv.sys
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np034_TKPcFtCb.sys
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np036_TKPcFtHk.sys
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np045_TKFsAvMU.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np050_TKCtrlU.dl_
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\np051_TKCtrl2k.sys
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Patch\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Pattern\np002_nspprot.nsx
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspmain\Pattern\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupcpy.exe
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np000_nspupdt.exe.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np001_nspupopt.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np002_nspupdt.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np003_nspupcpy.exe.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np004_nspupsvc.exe.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np005_nspupwat.exe.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np007_nspupres.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np008_nspupres.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\np0310_nspupres.dll.npz
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\update.nsx
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Patch\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Pattern\update.hash
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupdt\Pattern\update.xml
      c:\documents and settings\All Users\Datos de programa\TEMP\Update\nspupmnl.nsx
      c:\documents and settings\Eduardo\Datos de programa\.#
      c:\documents and settings\Eduardo\kowuzpecxaxj.exe
      c:\documents and settings\Eduardo\WINDOWS
      c:\windows\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\@
      c:\windows\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\n
      c:\windows\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\U\00000001.@
      c:\windows\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\U\80000000.@
      c:\windows\Installer\{a1c074b0-e070-03bb-e140-f3f2bfb8b081}\U\800000cb.@
      c:\windows\system32\0A-4a.dat
      c:\windows\system32\msvcsv60.dll
      c:\windows\system32\nspupdt.dll.tmp
      c:\windows\system32\SET14D.tmp
      c:\windows\system32\SET14F.tmp
      c:\windows\system32\SET15D.tmp
      c:\windows\system32\SET198.tmp
      c:\windows\system32\uxtheme.dll.tmp
      .
      .
      ((((((((((((((((((((((((((((((((((((((( Drivers/Services )))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      -------\Legacy_FWHOOKDRV
      -------\Service_npf
      .
      .
      ((((((((((((((((((((((((( Files Created from 2012-08-07 to 2012-09-07 )))))))))))))))))))))))))))))))
      .
      .
      2012-09-06 02:13 . 2012-09-06 02:14 -------- d-----w- c:\documents and settings\Eduardo\Datos de programa\AVG
      2012-09-05 23:57 . 2012-09-07 01:41 -------- d-----w- c:\windows\system32\drivers\AVG
      2012-09-05 23:57 . 2012-09-06 00:10 -------- d-----w- c:\documents and settings\All Users\Datos de programa\AVG2012
      2012-09-05 23:57 . 2012-09-05 23:57 -------- d-----w- C:\$AVG
      2012-09-05 23:55 . 2012-09-06 02:06 -------- d-----w- c:\archivos de programa\AVG
      2012-09-05 22:13 . 2012-09-05 22:19 -------- d-----w- c:\windows\ie8updates
      2012-09-05 20:47 . 2012-09-05 20:47 -------- d-----w- C:\VritualRoot
      2012-09-05 19:35 . 2010-09-18 06:53 953856 -c----w- c:\windows\system32\dllcache\mfc40u.dll
      2012-09-05 19:32 . 2010-08-27 08:03 119808 -c----w- c:\windows\system32\dllcache\t2embed.dll
      2012-09-05 19:32 . 2009-10-15 16:32 81920 -c----w- c:\windows\system32\dllcache\fontsub.dll
      2012-09-05 19:29 . 2011-07-15 13:29 456320 -c----w- c:\windows\system32\dllcache\mrxsmb.sys
      2012-09-05 19:27 . 2010-11-02 15:17 40960 -c----w- c:\windows\system32\dllcache\ndproxy.sys
      2012-09-05 19:27 . 2010-08-23 16:12 617472 -c----w- c:\windows\system32\dllcache\comctl32.dll
      2012-09-05 19:22 . 2011-04-21 13:37 105472 -c----w- c:\windows\system32\dllcache\mup.sys
      2012-09-05 18:58 . 2011-07-08 14:02 10496 -c----w- c:\windows\system32\dllcache\ndistapi.sys
      2012-09-05 18:55 . 2010-10-11 14:59 45568 -c----w- c:\windows\system32\dllcache\wab.exe
      2012-09-05 18:55 . 2010-08-16 08:44 590848 -c----w- c:\windows\system32\dllcache\rpcrt4.dll
      2012-09-05 18:47 . 2012-09-05 18:47 -------- d-----w- C:\TDSSKiller_Quarantine
      2012-09-01 19:14 . 2012-09-01 19:14 -------- d-----w- c:\documents and settings\Eduardo\Configuración local\Datos de programa\Sun
      2012-09-01 18:56 . 2012-09-01 18:56 -------- d-----w- c:\documents and settings\All Users\Datos de programa\NVIDIA
      2012-09-01 18:56 . 2012-09-01 18:56 -------- d-----w- c:\documents and settings\UpdatusUser
      2012-09-01 18:54 . 2012-02-29 23:58 4309760 -c--a-w- c:\windows\system32\dllcache\nv4_disp.dll
      2012-09-01 18:54 . 2012-02-29 23:58 4309760 ----a-w- c:\windows\system32\nv4_disp.dll
      2012-09-01 18:54 . 2012-02-29 23:58 13417632 -c--a-w- c:\windows\system32\dllcache\nv4_mini.sys
      2012-09-01 18:54 . 2012-02-29 23:58 13417632 ----a-w- c:\windows\system32\drivers\nv4_mini.sys
      2012-09-01 18:51 . 2012-09-01 18:51 -------- d-----w- C:\NVIDIA
      2012-09-01 18:27 . 2012-09-01 18:27 -------- d-----w- c:\documents and settings\All Users\Datos de programa\Comodo Downloader
      2012-09-01 17:47 . 2012-09-05 23:41 -------- d-----w- c:\archivos de programa\COMODO
      2012-09-01 06:12 . 2012-09-01 06:12 -------- d-----w- c:\documents and settings\All Users\Datos de programa\NVIDIA Corporation
      2012-09-01 06:11 . 2012-09-01 19:08 -------- d-----w- c:\archivos de programa\NVIDIA Corporation
      2012-09-01 03:41 . 2012-09-01 19:09 293992 ----a-w- c:\windows\system32\nvdrsdb0.bin
      2012-09-01 03:41 . 2012-09-01 19:09 1 ----a-w- c:\windows\system32\nvdrssel.bin
      2012-09-01 03:41 . 2012-09-01 19:09 293992 ----a-w- c:\windows\system32\nvdrsdb1.bin
      2012-09-01 03:17 . 2012-02-29 23:58 17534976 ----a-w- c:\windows\system32\nvcompiler.dll
      2012-09-01 03:17 . 2012-02-29 23:58 65536 ----a-w- c:\windows\system32\OpenCL.dll
      2012-09-01 02:23 . 2012-09-01 02:23 -------- d-----w- c:\archivos de programa\Archivos comunes\Java
      2012-09-01 02:23 . 2012-09-01 02:22 821736 ----a-w- c:\windows\system32\npDeployJava1.dll
      2012-09-01 02:22 . 2012-09-01 02:22 93672 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
      2012-08-31 20:59 . 2012-08-31 20:59 -------- d-----w- c:\documents and settings\Eduardo\Datos de programa\SUPERAntiSpyware.com
      2012-08-31 20:58 . 2012-08-31 20:58 -------- d-----w- c:\documents and settings\All Users\Datos de programa\SUPERAntiSpyware.com
      2012-08-31 20:41 . 2012-08-31 20:41 -------- d-----w- c:\archivos de programa\VS Revo Group
      2012-08-31 17:51 . 2012-08-31 18:21 -------- d-----w- c:\documents and settings\Eduardo\Configuración local\Datos de programa\PMB Files
      2012-08-31 03:48 . 2012-08-31 04:40 -------- d-----w- c:\archivos de programa\Archivos comunes\Mcafee
      2012-08-31 03:19 . 2012-08-31 04:41 -------- d-----w- c:\documents and settings\All Users\Datos de programa\McAfee
      2012-08-31 03:02 . 2012-08-31 03:02 -------- d--h--w- c:\documents and settings\All Users\Datos de programa\Common Files
      2012-08-31 02:52 . 2012-09-07 01:42 -------- d-----w- c:\documents and settings\All Users\Datos de programa\MFAData
      2012-08-30 19:22 . 2008-04-14 03:46 141056 -c--a-w- c:\windows\system32\dllcache\ks.sys
      2012-08-30 19:22 . 2008-04-14 03:46 141056 ----a-w- c:\windows\system32\drivers\ks.sys
      2012-08-30 19:22 . 2008-04-14 03:49 146048 -c--a-w- c:\windows\system32\dllcache\portcls.sys
      2012-08-30 19:22 . 2008-04-14 03:49 146048 ----a-w- c:\windows\system32\drivers\portcls.sys
      2012-08-30 19:22 . 2008-04-14 03:15 60160 -c--a-w- c:\windows\system32\dllcache\drmk.sys
      2012-08-30 19:22 . 2008-04-14 03:15 60160 ----a-w- c:\windows\system32\drivers\drmk.sys
      2012-08-30 19:21 . 2008-04-14 03:15 49408 -c--a-w- c:\windows\system32\dllcache\stream.sys
      2012-08-30 19:21 . 2008-04-14 03:15 49408 ----a-w- c:\windows\system32\drivers\stream.sys
      2012-08-30 19:21 . 2009-11-18 10:17 1395800 ----a-w- c:\windows\system32\drivers\Monfilt.sys
      2012-08-30 19:21 . 2010-07-06 21:26 6088296 ----a-w- c:\windows\system32\drivers\RtkHDAud.sys
      2012-08-30 19:21 . 2009-11-18 10:16 1691480 ----a-w- c:\windows\system32\drivers\Ambfilt.sys
      2012-08-30 19:19 . 2012-02-29 23:58 1000256 ----a-w- c:\windows\system32\nvdispco32.dll
      2012-08-30 19:19 . 2012-02-29 23:58 881984 ----a-w- c:\windows\system32\nvgenco32.dll
      2012-08-30 19:01 . 2012-06-22 18:48 25816 ----a-w- c:\windows\system32\drivers\RTAIODAT.DAT
      2012-08-30 19:01 . 2011-11-22 19:28 11368 ----a-w- c:\windows\system32\RtkCoLDRXP.dll
      2012-08-30 19:01 . 2012-07-24 18:06 67728 ----a-w- c:\windows\system32\RtkCoInstIIXP.dll
      2012-08-30 18:59 . 2012-08-22 17:42 5939200 ----a-w- c:\windows\system32\nvopencl.dll
      2012-08-30 18:59 . 2012-08-22 17:42 888168 ----a-w- c:\windows\system32\nvdispgenco32.dll
      2012-08-30 18:06 . 2012-08-30 18:06 -------- d-----w- c:\documents and settings\Eduardo\Configuración local\Datos de programa\Innovative Solutions
      2012-08-30 04:48 . 2012-08-30 17:25 -------- d-----w- c:\archivos de programa\Archivos comunes\INCAInternet
      2012-08-30 04:48 . 2011-03-28 13:49 172032 ----a-w- c:\windows\system32\dzip32.dll
      2012-08-30 04:48 . 2011-03-28 13:49 139264 ----a-w- c:\windows\system32\dunzip32.dll
      2012-08-29 21:40 . 2012-08-29 21:40 -------- d-----w- c:\documents and settings\Eduardo\Datos de programa\GarenaPlus
      2012-08-29 21:17 . 2012-09-01 02:09 -------- d-----w- c:\archivos de programa\Garena Plus
      2012-08-29 19:59 . 2012-08-29 21:40 -------- d-----w- c:\documents and settings\All Users\Datos de programa\GarenaMessenger
      2012-08-29 16:55 . 2012-08-29 16:55 -------- d-----w- c:\archivos de programa\LogMeIn Hamachi
      2012-08-29 08:55 . 2012-08-29 08:55 73696 ----a-w- c:\archivos de programa\Mozilla Firefox\breakpadinjector.dll
      2012-08-23 19:27 . 2012-08-23 19:27 -------- d-----w- c:\documents and settings\Eduardo\Datos de programa\BANDISOFT
      2012-08-23 19:26 . 2012-08-23 19:26 -------- d-----w- c:\archivos de programa\Bandicam
      2012-08-19 22:35 . 2012-08-19 22:35 -------- d-----w- c:\documents and settings\Eduardo\Configuración local\Datos de programa\TechSmith
      2012-08-17 06:36 . 2012-08-17 06:37 -------- d-----w- c:\documents and settings\All Users\Datos de programa\CyberLink
      2012-08-17 06:36 . 2012-08-17 06:36 -------- d-----w- c:\documents and settings\Eduardo\Datos de programa\CyberLink
      2012-08-17 06:34 . 2012-08-17 06:34 -------- d-----w- c:\documents and settings\Eduardo\Configuración local\Datos de programa\CyberLink
      2012-08-17 06:33 . 2008-04-14 10:48 54784 ----a-w- c:\windows\system32\drivers\vfwwdm32.dll
      2012-08-17 06:33 . 2011-04-14 03:48 27760 ----a-w- c:\windows\system32\drivers\clwvd.sys
      2012-08-17 06:32 . 2012-08-17 06:33 -------- d-----w- c:\archivos de programa\CyberLink
      2012-08-17 06:30 . 2012-08-17 06:30 -------- d-----w- c:\documents and settings\All Users\Datos de programa\install_clap
      .
      .
      .
      (((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      2012-09-01 02:22 . 2012-02-29 03:42 746984 ----a-w- c:\windows\system32\deployJava1.dll
      2012-09-01 02:22 . 2012-02-29 03:42 143872 ----a-w- c:\windows\system32\javacpl.cpl
      2012-08-29 21:52 . 2009-12-18 19:13 715248 ----a-w- c:\windows\system32\drivers\sptd.sys
      2012-08-29 21:44 . 2012-03-29 04:54 696520 ----a-w- c:\windows\system32\FlashPlayerApp.exe
      2012-08-29 21:44 . 2011-05-17 13:30 73416 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
      2012-07-03 16:46 . 2010-10-07 16:13 22344 ----a-w- c:\windows\system32\drivers\mbam.sys
      2011-03-12 20:23 . 2011-03-12 20:23 730580 ----a-w- c:\archivos de programa\Archivos comunes\unins000.exe
      2011-02-11 03:03 . 2011-02-11 03:03 36868 ----a-w- c:\archivos de programa\uninst-Lux.exe
      2008-03-09 10:25 . 2011-03-12 20:08 236 ---ha-w- c:\archivos de programa\Archivos comunes\dx.reg
      2012-08-29 08:55 . 2012-01-17 18:56 266720 ----a-w- c:\archivos de programa\mozilla firefox\components\browsercomps.dll
      .
      .
      ------- Sigcheck -------
      Note: Unsigned files aren't necessarily malware.
      .
      [7] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\atapi.sys
      [7] 2008-04-14 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\system32\drivers\atapi.sys
      [7] 2008-04-13 . 9F3A2F5AA6875C72BF062C712CFA2674 . 96512 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\atapi.sys
      [7] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0013\DriverFiles\i386\atapi.sys
      [7] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\atapi.sys
      [7] 2004-08-04 . CDFE4411A69C224BD1D11B2DA92DAC51 . 95360 . . [5.1.2600.2180] . . c:\windows\system32\ReinstallBackups\0006\DriverFiles\i386\atapi.sys
      .
      [7] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\asyncmac.sys
      [7] 2008-04-14 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\system32\drivers\asyncmac.sys
      [7] 2008-04-13 . B153AFFAC761E7F5FCFA822B9C4E97BC . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\asyncmac.sys
      [7] 2004-08-03 . 02000ABF34AF4C218C35D257024807D6 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\asyncmac.sys
      .
      [7] 2002-09-24 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\dllcache\beep.sys
      [7] 2002-09-24 . DA1F27D85E0D1525F6621372E7B685E9 . 4224 . . [5.1.2600.0] . . c:\windows\system32\drivers\beep.sys
      .
      [7] 2008-04-14 . 188DDD286BC0DAEA6984858C6A4D7BBF . 25088 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kbdclass.sys
      [7] 2008-04-14 . 188DDD286BC0DAEA6984858C6A4D7BBF . 25088 . . [5.1.2600.5512] . . c:\windows\system32\drivers\kbdclass.sys
      [7] 2008-04-14 . 188DDD286BC0DAEA6984858C6A4D7BBF . 25088 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\kbdclass.sys
      [7] 2004-08-19 . 71BFDDA7B3006B45B18D8BAC92BC9993 . 25088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\kbdclass.sys
      .
      [7] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ndis.sys
      [7] 2008-04-14 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ndis.sys
      [7] 2008-04-13 . 1DF7F42665C94B825322FAE71721130D . 182656 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ndis.sys
      [7] 2007-06-20 . 558635D3AF1C7546D26067D5D9B6959E . 182912 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ndis.sys
      .
      [7] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntfs.sys
      [7] 2008-04-14 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ntfs.sys
      [7] 2008-04-13 . 78A08DD6A8D65E697C18E1DB01C5CDCA . 574976 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ntfs.sys
      [7] 2004-08-03 . B78BE402C3F63DD55521F73876951CDD . 574592 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ntfs.sys
      .
      [7] 2002-09-24 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\dllcache\null.sys
      [7] 2002-09-24 . 73C1E1F395918BC2C6DD67AF7591A3AD . 2944 . . [5.1.2600.0] . . c:\windows\system32\drivers\null.sys
      .
      [7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\tcpip.sys
      [7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\tcpip.sys
      [7] 2008-06-20 . AD978A1B783B5719720CFF204B666C8E . 361600 . . [5.1.2600.5625] . . c:\windows\SoftwareDistribution\Download\a423ce24d0e3185b8f40e44ae39242a3\sp3qfe\tcpip.sys
      [7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\tcpip.sys
      [7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\tcpip.sys
      [7] 2008-06-20 . 9AEFA14BD6B182D61E3119FA5F436D3D . 361600 . . [5.1.2600.5625] . . c:\windows\system32\drivers\tcpip.sys
      [7] 2008-06-20 . 2A5554FC5B1E04E131230E3CE035C3F9 . 360320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\tcpip.sys
      [7] 2008-06-20 . 744E57C99232201AE98C49168B918F48 . 360960 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\tcpip.sys
      [7] 2008-04-14 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tcpip.sys
      [7] 2008-04-13 . 93EA8D04EC73A85DB02EB8805988F733 . 361344 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\tcpip.sys
      .
      [7] 2008-04-14 . E28818BD591F8AF8FBE9897472B9665E . 77824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\browser.dll
      [7] 2008-04-14 . E28818BD591F8AF8FBE9897472B9665E . 77824 . . [5.1.2600.5512] . . c:\windows\system32\browser.dll
      [7] 2008-04-14 . E28818BD591F8AF8FBE9897472B9665E . 77824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\browser.dll
      [7] 2004-08-19 . D01CFCC753B09E70F5B7622501FF5383 . 77312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\browser.dll
      .
      [7] 2008-04-14 . 671ACA589DA3733FAC878A751C5BF0ED . 13312 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lsass.exe
      [7] 2008-04-14 . 671ACA589DA3733FAC878A751C5BF0ED . 13312 . . [5.1.2600.5512] . . c:\windows\system32\lsass.exe
      [7] 2008-04-14 . 671ACA589DA3733FAC878A751C5BF0ED . 13312 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\lsass.exe
      [7] 2004-08-19 . 2B0B88652C9F6714FD4886839B3B0442 . 13312 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lsass.exe
      .
      [7] 2008-04-14 . A48884C9359EE9F1FC8F3F0D93FB1D95 . 198144 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netman.dll
      [7] 2008-04-14 . A48884C9359EE9F1FC8F3F0D93FB1D95 . 198144 . . [5.1.2600.5512] . . c:\windows\system32\netman.dll
      [7] 2008-04-14 . A48884C9359EE9F1FC8F3F0D93FB1D95 . 198144 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\netman.dll
      [7] 2004-08-19 . 25128473F0D3FD431F74CC5BAFA123CA . 198144 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netman.dll
      .
      [7] 2008-04-14 10:48 . 93F4E612C695E81512110956454E6E25 . 837120 . . [2001.12.4414.700] . . c:\windows\ServicePackFiles\i386\comres.dll
      [7] 2008-04-14 10:48 . 93F4E612C695E81512110956454E6E25 . 837120 . . [2001.12.4414.700] . . c:\windows\system32\comres.dll
      [7] 2008-04-14 02:18 . 93F4E612C695E81512110956454E6E25 . 837120 . . [2001.12.4414.700] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\comres.dll
      [7] 2004-08-19 11:41 . DECF5947EF11B06D716E08D0B86FC62A . 837120 . . [2001.12.4414.258] . . c:\windows\$NtServicePackUninstall$\comres.dll
      .
      [7] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\ServicePackFiles\i386\qmgr.dll
      [7] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\system32\qmgr.dll
      [7] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\system32\bits\qmgr.dll
      [7] 2008-04-14 . 8EE9639C01B92490E09638CAA1B16C3C . 409088 . . [6.7.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\qmgr.dll
      [7] 2004-08-19 . 02451268DC47E4DC228210DA0E3C3274 . 382464 . . [6.6.2600.2180] . . c:\windows\$NtServicePackUninstall$\qmgr.dll
      .
      [7] 2009-02-09 . AEF41FC6F108CC4F94F9B4E96AFA9C70 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\rpcss.dll
      [7] 2009-02-09 . 97869C55F562B777987100EA30AD8108 . 401408 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\rpcss.dll
      [7] 2009-02-09 . 97869C55F562B777987100EA30AD8108 . 401408 . . [5.1.2600.5755] . . c:\windows\system32\rpcss.dll
      [7] 2009-02-09 . 97869C55F562B777987100EA30AD8108 . 401408 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\rpcss.dll
      [7] 2009-02-09 . 7A828726797A542BE390C054563E60BA . 399360 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\rpcss.dll
      [7] 2009-02-09 . D326677E8A052EABA778B9767ECB7724 . 401408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\rpcss.dll
      [7] 2008-04-14 . 53D02EFFA72CA5C57687BEE20610ABA6 . 399360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rpcss.dll
      [7] 2008-04-14 . 53D02EFFA72CA5C57687BEE20610ABA6 . 399360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\rpcss.dll
      .
      [7] 2009-02-09 . 953DF7327510DF0DE048B8E80E504EF9 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\services.exe
      [7] 2009-02-09 . 953DF7327510DF0DE048B8E80E504EF9 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\services.exe
      [7] 2009-02-09 . 953DF7327510DF0DE048B8E80E504EF9 . 111104 . . [5.1.2600.5755] . . c:\windows\system32\dllcache\services.exe
      [7] 2009-02-09 . AA6E1769469F9D15603A619FC1FB9E18 . 111104 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\services.exe
      [7] 2009-02-09 . 35A8E2160C1481D08FB97666C2127FE2 . 111104 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\services.exe
      [7] 2009-02-09 . 14BDC84F56A5DB7A01FDAA6FA7893759 . 111104 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\services.exe
      [7] 2008-04-14 . D658A8C2FC7B2AD53D1259741A09EE04 . 109056 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\services.exe
      [7] 2008-04-14 . D658A8C2FC7B2AD53D1259741A09EE04 . 109056 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\services.exe
      .
      [7] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\$hf_mig$\KB2347290\SP3QFE\spoolsv.exe
      [7] 2010-08-17 . 258DD5D4283FD9F9A7166BE9AE45CE73 . 58880 . . [5.1.2600.6024] . . c:\windows\SoftwareDistribution\Download\61bac4a88aea868b86d069809e438bee\sp3qfe\spoolsv.exe
      [7] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\SoftwareDistribution\Download\61bac4a88aea868b86d069809e438bee\sp3gdr\spoolsv.exe
      [7] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\spoolsv.exe
      [7] 2010-08-17 . 60784F891563FB1B767F70117FC2428F . 58880 . . [5.1.2600.6024] . . c:\windows\system32\dllcache\spoolsv.exe
      [7] 2008-04-14 . CDD2DC6AE65084481E723E746C20539A . 57856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\spoolsv.exe
      [7] 2008-04-14 . CDD2DC6AE65084481E723E746C20539A . 57856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\spoolsv.exe
      [7] 2004-08-19 . 1CF5AF263287CF6FEBF31539833EAF4A . 57856 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\spoolsv.exe
      .
      [7] 2008-04-14 . 213C80D912880BBF04453D09FFCCB28C . 510976 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\winlogon.exe
      [7] 2008-04-14 . 213C80D912880BBF04453D09FFCCB28C . 510976 . . [5.1.2600.5512] . . c:\windows\system32\winlogon.exe
      [7] 2008-04-14 . 213C80D912880BBF04453D09FFCCB28C . 510976 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\winlogon.exe
      [7] 2004-08-19 . FCB59D25D628B4D3181DC816D14679DD . 505344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\winlogon.exe
      .
      [7] 2012-06-02 . 2E0B0A051FFAA86E358465BB0880D453 . 53784 . . [7.6.7600.256] . . c:\windows\system32\wuauclt.exe
      .
      [7] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
      [7] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
      [7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ipsec.sys
      [7] 2004-08-03 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
      .
      [7] 2010-08-23 . 3DDEC846E57F668C07407F3AC3B66220 . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\a4bcdc4b3a0a3f8102522b66a8b15591\SP3QFE\comctl32.dll
      [7] 2010-08-23 . 3DDEC846E57F668C07407F3AC3B66220 . 617472 . . [5.82] . . c:\windows\system32\comctl32.dll
      [7] 2010-08-23 . 3DDEC846E57F668C07407F3AC3B66220 . 617472 . . [5.82] . . c:\windows\system32\dllcache\comctl32.dll
      [7] 2010-08-23 . 24B09ED0C5B019A5198A74504179EEB0 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\a4bcdc4b3a0a3f8102522b66a8b15591\asms\60\msft\windows\common\controls\comctl32.dll
      [7] 2010-08-23 . 24B09ED0C5B019A5198A74504179EEB0 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\a4bcdc4b3a0a3f8102522b66a8b15591\SP3QFE\asms\60\msft\windows\common\controls\comctl32.dll
      [7] 2010-08-23 . 24B09ED0C5B019A5198A74504179EEB0 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll
      [7] 2008-04-14 . 618A4C7A7C0CA86DA884C8C0FACAD8C2 . 617472 . . [5.82] . . c:\windows\ServicePackFiles\i386\comctl32.dll
      [7] 2008-04-14 . 08D17A982CD6191B34D1B8C8A2E694B6 . 1054208 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.5512_x-ww_35d4ce83\comctl32.dll
      [7] 2008-04-14 . 618A4C7A7C0CA86DA884C8C0FACAD8C2 . 617472 . . [5.82] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\comctl32.dll
      [7] 2008-04-14 . 08D17A982CD6191B34D1B8C8A2E694B6 . 1054208 . . [6.0] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\asms\60\msft\windows\common\controls\comctl32.dll
      [7] 2004-08-19 . EDA7A1054484AF5DD29A648081E93107 . 611328 . . [5.82] . . c:\windows\$NtServicePackUninstall$\comctl32.dll
      [7] 2004-08-19 . A2126F1E83B97EEA496164748A9E3A8E . 1050624 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.2180_x-ww_a84f1ff9\comctl32.dll
      [7] 2002-09-24 . AEF3D788DBF40C7C4D204EA45EB0C505 . 921088 . . [6.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a\comctl32.dll
      .
      [7] 2008-04-14 . E423C9C1946C656E0E4840210A0A8681 . 62464 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\cryptsvc.dll
      [7] 2008-04-14 . E423C9C1946C656E0E4840210A0A8681 . 62464 . . [5.1.2600.5512] . . c:\windows\system32\cryptsvc.dll
      [7] 2008-04-14 . E423C9C1946C656E0E4840210A0A8681 . 62464 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\cryptsvc.dll
      [7] 2004-08-19 . 149CFFBF77CC1306FC535557CF513B91 . 60416 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\cryptsvc.dll
      .
      [7] 2008-07-07 20:31 . 5BB73A064A19A5A3531A1EC6339F5082 . 253952 . . [2001.12.4414.320] . . c:\windows\$NtServicePackUninstall$\es.dll
      [7] 2008-07-07 20:27 . A225DD0D0489BD580781D19524A10B19 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3GDR\es.dll
      [7] 2008-07-07 20:27 . A225DD0D0489BD580781D19524A10B19 . 253952 . . [2001.12.4414.706] . . c:\windows\system32\es.dll
      [7] 2008-07-07 20:27 . A225DD0D0489BD580781D19524A10B19 . 253952 . . [2001.12.4414.706] . . c:\windows\system32\dllcache\es.dll
      [7] 2008-07-07 20:25 . 6EC3C2A5CEA41B78BB55B30444292CB8 . 253952 . . [2001.12.4414.706] . . c:\windows\$hf_mig$\KB950974\SP3QFE\es.dll
      [7] 2008-07-07 20:18 . 9B8FE9DB4DB64DB5CB3B76DBA8C38B8B . 253952 . . [2001.12.4414.320] . . c:\windows\$hf_mig$\KB950974\SP2QFE\es.dll
      [7] 2008-04-14 10:48 . 76ABF3BB5A6D684641EC92B28240811D . 246272 . . [2001.12.4414.701] . . c:\windows\ServicePackFiles\i386\es.dll
      [7] 2008-04-14 02:18 . 76ABF3BB5A6D684641EC92B28240811D . 246272 . . [2001.12.4414.701] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\es.dll
      .
      [7] 2008-04-14 . 95DF6A7520912B1040F748A287EA382A . 110080 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\imm32.dll
      [7] 2008-04-14 . 95DF6A7520912B1040F748A287EA382A . 110080 . . [5.1.2600.5512] . . c:\windows\system32\imm32.dll
      [7] 2008-04-14 . 95DF6A7520912B1040F748A287EA382A . 110080 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\imm32.dll
      [7] 2004-08-19 . BE2282FBEAFBB76577D47B06071139BB . 110080 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\imm32.dll
      .
      [7] 2009-03-21 . B609BF6A4313087010F1F062B4490989 . 1039360 . . [5.1.2600.3541] . . c:\windows\$NtServicePackUninstall$\kernel32.dll
      [7] 2009-03-21 . 7DC06BF4CBC3FCD7557D8D69DFBD49F5 . 1042944 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3GDR\kernel32.dll
      [7] 2009-03-21 . 7DC06BF4CBC3FCD7557D8D69DFBD49F5 . 1042944 . . [5.1.2600.5781] . . c:\windows\SoftwareDistribution\Download\4b55bbfd942ab90d6dfaf60485ad06e7\sp3gdr\kernel32.dll
      [7] 2009-03-21 . 7DC06BF4CBC3FCD7557D8D69DFBD49F5 . 1042944 . . [5.1.2600.5781] . . c:\windows\system32\kernel32.dll
      [7] 2009-03-21 . 7DC06BF4CBC3FCD7557D8D69DFBD49F5 . 1042944 . . [5.1.2600.5781] . . c:\windows\system32\dllcache\kernel32.dll
      [7] 2009-03-21 . 97D5372816EC546BD035EDAEDB5E6918 . 1044992 . . [5.1.2600.5781] . . c:\windows\$hf_mig$\KB959426\SP3QFE\kernel32.dll
      [7] 2009-03-21 . 6FB482ABD03E16295A73270A3D30808F . 1042432 . . [5.1.2600.3541] . . c:\windows\$hf_mig$\KB959426\SP2QFE\kernel32.dll
      [7] 2008-04-14 . F43FE49CF77EC1CEF9DB9E67BDDB970F . 1042944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\kernel32.dll
      [7] 2008-04-14 . F43FE49CF77EC1CEF9DB9E67BDDB970F . 1042944 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\kernel32.dll
      .
      [7] 2008-04-14 . FB67F1E092AB9967D0CD17300D751874 . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\linkinfo.dll
      [7] 2008-04-14 . FB67F1E092AB9967D0CD17300D751874 . 19968 . . [5.1.2600.5512] . . c:\windows\system32\linkinfo.dll
      [7] 2008-04-14 . FB67F1E092AB9967D0CD17300D751874 . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\linkinfo.dll
      [7] 2004-08-19 . 30FD47F2A925D0BB59792AB3920A1DAD . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\linkinfo.dll
      .
      [7] 2008-04-14 . 87F15A88AA3376B48F75D7D176B312A0 . 22016 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\lpk.dll
      [7] 2008-04-14 . 87F15A88AA3376B48F75D7D176B312A0 . 22016 . . [5.1.2600.5512] . . c:\windows\system32\lpk.dll
      [7] 2008-04-14 . 87F15A88AA3376B48F75D7D176B312A0 . 22016 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\lpk.dll
      [7] 2004-08-19 . 24B2A5D3EE366A3E9C1E0941363618C7 . 22016 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\lpk.dll
      .
      [-] 2010-05-06 . 4B1BB5DB92DF08ACA55EA93B29F4BCF5 . 5950976 . . [8.00.6001.18928] . . c:\windows\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\mshtml.dll
      [-] 2010-05-06 . 5D7062AA7BBC8A5FF8ED8109325984E1 . 5953024 . . [8.00.6001.23019] . . c:\windows\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\mshtml.dll
      [7] 2010-04-16 . 0F34C6110C2B963AA8F96D2D89E6751B . 3094016 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3GDR\mshtml.dll
      [7] 2010-04-16 . 3FF46A47986827428264AAE40C912529 . 3094528 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3QFE\mshtml.dll
      [7] 2010-04-16 . 0BC8C27CE9286656B2E08D44DF5D3B8B . 3086336 . . [6.00.2900.3698] . . c:\windows\ie8\mshtml.dll
      [7] 2010-04-16 . 843E96F1D8B8E6B10C911D862EC73326 . 3094016 . . [6.00.2900.3698] . . c:\windows\$hf_mig$\KB982381\SP2QFE\mshtml.dll
      [7] 2010-02-26 . 971E2204BA2FA7178376F4E3358A7F27 . 3094016 . . [6.00.2900.3676] . . c:\windows\$hf_mig$\KB980182\SP2QFE\mshtml.dll
      [7] 2010-02-26 . B74604BFC1FB68C1D300BFE50B165E34 . 3094016 . . [6.00.2900.5945] . . c:\windows\$hf_mig$\KB980182\SP3GDR\mshtml.dll
      [7] 2010-02-26 . B599E6AAE5EB241A2D483696A98FBFFD . 3094528 . . [6.00.2900.5945] . . c:\windows\$hf_mig$\KB980182\SP3QFE\mshtml.dll
      [-] 2010-02-25 . 578258F027B2FD23D4F923BAC4772991 . 5944832 . . [8.00.6001.18904] . . c:\windows\SoftwareDistribution\Download\0d87505a228ab53eeb6bea5c2753feaa\SP3GDR\mshtml.dll
      [-] 2010-02-25 . 0851CEA04FE9A2C9DBACED7AC3D37D3B . 5946880 . . [8.00.6001.22995] . . c:\windows\SoftwareDistribution\Download\0d87505a228ab53eeb6bea5c2753feaa\SP3QFE\mshtml.dll
      [7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\system32\mshtml.dll
      [7] 2009-03-08 . D469A0EBA2EF5C6BEE8065B7E3196E5E . 5937152 . . [8.00.6001.18702] . . c:\windows\system32\dllcache\mshtml.dll
      [7] 2008-04-14 . 85B88C504D1527978F1C2FBE6A41E799 . 3066880 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\mshtml.dll
      [7] 2008-04-14 . 85B88C504D1527978F1C2FBE6A41E799 . 3066880 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\mshtml.dll
      .
      [7] 2008-04-14 . 0F021B29E0C2C9D897258399FB2149CD . 343040 . . [7.0.2600.5512] . . c:\windows\ServicePackFiles\i386\msvcrt.dll
      [7] 2008-04-14 . 0F021B29E0C2C9D897258399FB2149CD . 343040 . . [7.0.2600.5512] . . c:\windows\system32\msvcrt.dll
      [7] 2008-04-14 . B1CB86D70023988360DA136B317D8546 . 343040 . . [7.0.2600.5512] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.5512_x-ww_3fd60d63\msvcrt.dll
      [7] 2008-04-14 . 0F021B29E0C2C9D897258399FB2149CD . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\msvcrt.dll
      [7] 2008-04-14 . B1CB86D70023988360DA136B317D8546 . 343040 . . [7.0.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\asms\70\msft\windows\mswincrt\msvcrt.dll
      [7] 2004-08-19 . 3CDD949F8340F06FD99667B4F75409D0 . 343040 . . [7.0.2600.2180] . . c:\windows\$NtServicePackUninstall$\msvcrt.dll
      [7] 2004-08-19 . C19174138C9DAB560E4324374C5F739E . 343040 . . [7.0.2600.2180] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.2600.2180_x-ww_b2505ed9\msvcrt.dll
      [7] 2002-09-24 . 4200BE3808F6406DBE45A7B88DAE5035 . 322560 . . [7.0.2600.0] . . c:\windows\WinSxS\x86_Microsoft.Windows.CPlusPlusRuntime_6595b64144ccf1df_7.0.0.0_x-ww_2726e76a\msvcrt.dll
      .
      [7] 2008-06-20 . 738AE6EEE9531C826E212BF686B0C5E5 . 248320 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3GDR\mswsock.dll
      [7] 2008-06-20 . DC10B07F256C8EDF6642015E380C741E . 248320 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB2509553\SP3QFE\mswsock.dll
      [7] 2008-06-20 . DC10B07F256C8EDF6642015E380C741E . 248320 . . [5.1.2600.5625] . . c:\windows\$hf_mig$\KB951748\SP3QFE\mswsock.dll
      [7] 2008-06-20 . DC10B07F256C8EDF6642015E380C741E . 248320 . . [5.1.2600.5625] . . c:\windows\SoftwareDistribution\Download\a423ce24d0e3185b8f40e44ae39242a3\sp3qfe\mswsock.dll
      [7] 2008-06-20 . 1FAE3DDB8D36C5D7DCA7CB1FDA03ECAE . 248320 . . [5.1.2600.3394] . . c:\windows\$NtServicePackUninstall$\mswsock.dll
      [7] 2008-06-20 . C7C251D08747385131AF5D6E10653514 . 248320 . . [5.1.2600.3394] . . c:\windows\$hf_mig$\KB951748\SP2QFE\mswsock.dll
      [7] 2008-06-20 . 5E11D375C92A0DDA7AC4D487FC4E1978 . 248320 . . [5.1.2600.5625] . . c:\windows\SoftwareDistribution\Download\a423ce24d0e3185b8f40e44ae39242a3\sp3gdr\mswsock.dll
      [7] 2008-06-20 . 5E11D375C92A0DDA7AC4D487FC4E1978 . 248320 . . [5.1.2600.5625] . . c:\windows\system32\mswsock.dll
      [7] 2008-06-20 . 5E11D375C92A0DDA7AC4D487FC4E1978 . 248320 . . [5.1.2600.5625] . . c:\windows\system32\dllcache\mswsock.dll
      [7] 2008-04-14 . AD893C9D3A09081D55A4BDFBC66AD592 . 248320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\mswsock.dll
      [7] 2008-04-14 . AD893C9D3A09081D55A4BDFBC66AD592 . 248320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\mswsock.dll
      .
      [7] 2009-02-06 . E24DE816D7A868A11A320C0A09164BFF . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB968389\SP2QFE\netlogon.dll
      [7] 2009-02-06 . E24DE816D7A868A11A320C0A09164BFF . 408064 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB975467\SP2QFE\netlogon.dll
      [7] 2008-04-14 . CD2BBB52DFAAB666B812A51B1E96F2A0 . 407040 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\netlogon.dll
      [7] 2008-04-14 . CD2BBB52DFAAB666B812A51B1E96F2A0 . 407040 . . [5.1.2600.5512] . . c:\windows\system32\netlogon.dll
      [7] 2008-04-14 . CD2BBB52DFAAB666B812A51B1E96F2A0 . 407040 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\netlogon.dll
      [7] 2004-08-19 . 7FD182B1B80117C353983565D60B1CAF . 407040 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\netlogon.dll
      .
      [7] 2008-04-14 . 56DE6FD410B277C4345D7A2C3414DB64 . 17408 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\powrprof.dll
      [7] 2008-04-14 . 56DE6FD410B277C4345D7A2C3414DB64 . 17408 . . [6.00.2900.5512] . . c:\windows\system32\powrprof.dll
      [7] 2008-04-14 . 56DE6FD410B277C4345D7A2C3414DB64 . 17408 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\powrprof.dll
      [7] 2004-08-19 . 75EFF6383C2F9BC1198C5351754D27AC . 17408 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\powrprof.dll
      .
      [7] 2008-04-14 . B6BE3C96CD33336A551DB3F2299A8E69 . 185856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\scecli.dll
      [7] 2008-04-14 . B6BE3C96CD33336A551DB3F2299A8E69 . 185856 . . [5.1.2600.5512] . . c:\windows\system32\scecli.dll
      [7] 2008-04-14 . B6BE3C96CD33336A551DB3F2299A8E69 . 185856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\scecli.dll
      [7] 2004-08-19 . C6347748F2E9F310EA1E1915482ABFEF . 184832 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\scecli.dll
      .
      [7] 2008-04-14 . D5AC9FA63EBEFD7AACCB14BA0DB1BAC3 . 5120 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfc.dll
      [7] 2008-04-14 . D5AC9FA63EBEFD7AACCB14BA0DB1BAC3 . 5120 . . [5.1.2600.5512] . . c:\windows\system32\sfc.dll
      [7] 2008-04-14 . D5AC9FA63EBEFD7AACCB14BA0DB1BAC3 . 5120 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\sfc.dll
      [7] 2004-08-19 . CA557E5E31C7BCFC2CB61CCFE9F6C945 . 5120 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfc.dll
      .
      [7] 2008-04-14 . 4F2340F0BD5B6365C38E74DD391919A8 . 14336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\svchost.exe
      [7] 2008-04-14 . 4F2340F0BD5B6365C38E74DD391919A8 . 14336 . . [5.1.2600.5512] . . c:\windows\system32\svchost.exe
      [7] 2008-04-14 . 4F2340F0BD5B6365C38E74DD391919A8 . 14336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\svchost.exe
      [7] 2004-08-19 . FA03E1FC17F38FBDBA81470D08B3E416 . 14336 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\svchost.exe
      .
      [7] 2008-04-14 . 04A5B8EA326951DB27DF60A14F2999FF . 249856 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\tapisrv.dll
      [7] 2008-04-14 . 04A5B8EA326951DB27DF60A14F2999FF . 249856 . . [5.1.2600.5512] . . c:\windows\system32\tapisrv.dll
      [7] 2008-04-14 . 04A5B8EA326951DB27DF60A14F2999FF . 249856 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\tapisrv.dll
      [7] 2004-08-19 . C2DC3F102C351FA6D4BDAF2B927EAFC2 . 246272 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\tapisrv.dll
      .
      [7] 2008-04-14 . DA8898129E0075C7DE4DEE457514A73C . 579584 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\user32.dll
      [7] 2008-04-14 . DA8898129E0075C7DE4DEE457514A73C . 579584 . . [5.1.2600.5512] . . c:\windows\system32\user32.dll
      [7] 2008-04-14 . DA8898129E0075C7DE4DEE457514A73C . 579584 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\user32.dll
      [7] 2004-08-19 . 5D5C9CC377A70D036816E7EA55F3CA73 . 578048 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\user32.dll
      .
      [7] 2008-04-14 . F5B8745B9A90EAF17E30C0574E049AA3 . 26624 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\userinit.exe
      [7] 2008-04-14 . F5B8745B9A90EAF17E30C0574E049AA3 . 26624 . . [5.1.2600.5512] . . c:\windows\system32\userinit.exe
      [7] 2008-04-14 . F5B8745B9A90EAF17E30C0574E049AA3 . 26624 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\userinit.exe
      [7] 2004-08-19 . 7B30B4D55B4562C733A5DDF6D6F72B3F . 25088 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\userinit.exe
      .
      [-] 2010-05-06 . 26412D06783E47EAC7667569BF6962D3 . 916480 . . [8.00.6001.18923] . . c:\windows\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3GDR\wininet.dll
      [-] 2010-05-06 . 9ACFBEE8E9573EE39CB93C636DF36F78 . 919040 . . [8.00.6001.23014] . . c:\windows\SoftwareDistribution\Download\4c63122518a43a5948b889f6ab73e322\SP3QFE\wininet.dll
      [7] 2010-04-16 . 115937820768413A92406553800F5BD3 . 669696 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3GDR\wininet.dll
      [7] 2010-04-16 . 0EB575B84044049E8C9E95D000DE6923 . 671232 . . [6.00.2900.5969] . . c:\windows\$hf_mig$\KB982381\SP3QFE\wininet.dll
      [7] 2010-04-16 . C7F8944AC44A3D8594E4B5080A2D8FEB . 664576 . . [6.00.2900.3698] . . c:\windows\ie8\wininet.dll
      [7] 2010-04-16 . E6DE7B128DC704860B96A0CA14BD2B06 . 671232 . . [6.00.2900.3698] . . c:\windows\$hf_mig$\KB982381\SP2QFE\wininet.dll
      [7] 2010-02-26 . 3FD5B0FBD05EC7A4DCC286D0149579D4 . 671232 . . [6.00.2900.3676] . . c:\windows\$hf_mig$\KB980182\SP2QFE\wininet.dll
      [7] 2010-02-26 . 786543C848BB9EC0318EE4B3A4D534B1 . 669696 . . [6.00.2900.5945] . . c:\windows\$hf_mig$\KB980182\SP3GDR\wininet.dll
      [7] 2010-02-26 . 45AEF1CDA901FA09898D38AAC10EFC63 . 671232 . . [6.00.2900.5945] . . c:\windows\$hf_mig$\KB980182\SP3QFE\wininet.dll
      [-] 2010-02-25 . 3DAABAD8F6F851E7184C71EC3ECBA180 . 916480 . . [8.00.6001.18904] . . c:\windows\SoftwareDistribution\Download\0d87505a228ab53eeb6bea5c2753feaa\SP3GDR\wininet.dll
      [-] 2010-02-25 . F29707EC7FE2CA7ABFC8462211A5BD30 . 919040 . . [8.00.6001.22995] . . c:\windows\SoftwareDistribution\Download\0d87505a228ab53eeb6bea5c2753feaa\SP3QFE\wininet.dll
      [7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\system32\wininet.dll
      [7] 2009-03-08 . 6CE32F7778061CCC5814D5E0F282D369 . 914944 . . [8.00.6001.18702] . . c:\windows\system32\dllcache\wininet.dll
      [7] 2008-04-14 . A9A84CFC20D5F4C609E9CBF9491B8DF6 . 668672 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\wininet.dll
      [7] 2008-04-14 . A9A84CFC20D5F4C609E9CBF9491B8DF6 . 668672 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\wininet.dll
      .
      [7] 2008-04-14 . 22DB5B3DA7005C6472D35BEF3FFDA5EC . 82432 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2_32.dll
      [7] 2008-04-14 . 22DB5B3DA7005C6472D35BEF3FFDA5EC . 82432 . . [5.1.2600.5512] . . c:\windows\system32\ws2_32.dll
      [7] 2008-04-14 . 22DB5B3DA7005C6472D35BEF3FFDA5EC . 82432 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ws2_32.dll
      [7] 2004-08-19 . B4A90738BA4355F187BD26D6C112082B . 82944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2_32.dll
      .
      [7] 2008-04-14 . F7EE4BBFB48437EDC6F7F061DE1E8F2F . 19968 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ws2help.dll
      [7] 2008-04-14 . F7EE4BBFB48437EDC6F7F061DE1E8F2F . 19968 . . [5.1.2600.5512] . . c:\windows\system32\ws2help.dll
      [7] 2008-04-14 . F7EE4BBFB48437EDC6F7F061DE1E8F2F . 19968 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ws2help.dll
      [7] 2004-08-19 . 0EDF3501370A14BEFB27526CD06FACEE . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ws2help.dll
      .
      [7] 2008-04-14 . 7522F548A84ABAD8FA516DE5AB3931EF . 1036288 . . [6.00.2900.5512] . . c:\windows\explorer.exe
      [7] 2008-04-14 . 7522F548A84ABAD8FA516DE5AB3931EF . 1036288 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\explorer.exe
      [7] 2008-04-14 . 7522F548A84ABAD8FA516DE5AB3931EF . 1036288 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\explorer.exe
      [7] 2004-08-19 . 89C8DD146CEAF482D82822766437D93F . 1034752 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\explorer.exe
      .
      [7] 2008-04-14 . F4B9F9AA2F72FAD20D09C3E3FF2BE224 . 152064 . . [5.1.2600.5512] . . c:\windows\regedit.exe
      [7] 2008-04-14 . F4B9F9AA2F72FAD20D09C3E3FF2BE224 . 152064 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regedit.exe
      [7] 2008-04-14 . F4B9F9AA2F72FAD20D09C3E3FF2BE224 . 152064 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\regedit.exe
      [7] 2004-08-19 . 2BA8F4A46C83C6D3A02E9073A304F82C . 152064 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regedit.exe
      .
      [7] 2011-11-01 . 494276CFE71555AE0F3234C1B227E67A . 1288192 . . [5.1.2600.6168] . . c:\windows\SoftwareDistribution\Download\11538836b8d2501e18216634e695c34c\sp3gdr\ole32.dll
      [7] 2011-11-01 . 494276CFE71555AE0F3234C1B227E67A . 1288192 . . [5.1.2600.6168] . . c:\windows\system32\ole32.dll
      [7] 2011-11-01 . 494276CFE71555AE0F3234C1B227E67A . 1288192 . . [5.1.2600.6168] . . c:\windows\system32\dllcache\ole32.dll
      [7] 2011-11-01 . E8C2FA9AC16C25C0AB0677BA12D74BC1 . 1288704 . . [5.1.2600.6168] . . c:\windows\$hf_mig$\KB2624667\SP3QFE\ole32.dll
      [7] 2011-11-01 . E8C2FA9AC16C25C0AB0677BA12D74BC1 . 1288704 . . [5.1.2600.6168] . . c:\windows\SoftwareDistribution\Download\11538836b8d2501e18216634e695c34c\sp3qfe\ole32.dll
      [7] 2010-07-16 . 448FE53C1B2671DB712C8E8838E4263F . 1287680 . . [5.1.2600.6010] . . c:\windows\SoftwareDistribution\Download\b3bb00bd787534d7902d59d672aee550\sp3gdr\ole32.dll
      [7] 2010-07-16 . BCFEA258277FB42DD7F447EB61C34D06 . 1288704 . . [5.1.2600.6010] . . c:\windows\$hf_mig$\KB979687\SP3QFE\ole32.dll
      [7] 2010-07-16 . BCFEA258277FB42DD7F447EB61C34D06 . 1288704 . . [5.1.2600.6010] . . c:\windows\SoftwareDistribution\Download\b3bb00bd787534d7902d59d672aee550\sp3qfe\ole32.dll
      [7] 2008-04-14 . 463D57BF9FE5871208FF99399360A57D . 1287168 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ole32.dll
      [7] 2008-04-14 . 463D57BF9FE5871208FF99399360A57D . 1287168 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ole32.dll
      [7] 2007-06-20 . 4284D0170197D37F0D37F55B89B3FDB7 . 1281024 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ole32.dll
      .
      [7] 2010-04-16 . A8374FF31AC6EDEBB806D2B61D44618D . 406016 . . [1.0420.2600.5969] . . c:\windows\SoftwareDistribution\Download\f8b6902dc5bb0a10a3d59d6b44e5c19f\sp3gdr\usp10.dll
      [7] 2010-04-16 . A8374FF31AC6EDEBB806D2B61D44618D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\usp10.dll
      [7] 2010-04-16 . A8374FF31AC6EDEBB806D2B61D44618D . 406016 . . [1.0420.2600.5969] . . c:\windows\system32\dllcache\usp10.dll
      [7] 2010-04-16 . 964D29711065A944E1BEC7FD676E61D9 . 406016 . . [1.0420.2600.5969] . . c:\windows\$hf_mig$\KB981322\SP3QFE\usp10.dll
      [7] 2010-04-16 . 964D29711065A944E1BEC7FD676E61D9 . 406016 . . [1.0420.2600.5969] . . c:\windows\SoftwareDistribution\Download\f8b6902dc5bb0a10a3d59d6b44e5c19f\sp3qfe\usp10.dll
      [7] 2008-04-14 . D2ABEB6AF76DA414D1FFF8B409F00635 . 406016 . . [1.0420.2600.5512] . . c:\windows\ServicePackFiles\i386\usp10.dll
      [7] 2008-04-14 . D2ABEB6AF76DA414D1FFF8B409F00635 . 406016 . . [1.0420.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\usp10.dll
      [7] 2004-08-19 . 0405987EE320AB0572E463C1E69C0121 . 406528 . . [1.0420.2600.2180] . . c:\windows\$NtServicePackUninstall$\usp10.dll
      .
      [7] 2008-04-14 . D9A84134776399F6BD244BC456076575 . 4096 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\ksuser.dll
      [7] 2008-04-14 . D9A84134776399F6BD244BC456076575 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ksuser.dll
      [7] 2008-04-14 . D9A84134776399F6BD244BC456076575 . 4096 . . [5.3.2600.5512] . . c:\windows\system32\ReinstallBackups\0019\DriverFiles\i386\ksuser.dll
      [7] 2008-04-14 . D9A84134776399F6BD244BC456076575 . 4096 . . [5.3.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ksuser.dll
      [7] 2004-08-19 . 13A247D9214BB41BE25F2B491DCB7962 . 4096 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\ksuser.dll
      [7] 2004-08-19 . 13A247D9214BB41BE25F2B491DCB7962 . 4096 . . [5.3.2600.2180] . . c:\windows\system32\ReinstallBackups\0022\DriverFiles\i386\ksuser.dll
      .
      [7] 2008-04-14 . DAAE1CB1B1875B760496E7D3336DA1AD . 15360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ctfmon.exe
      [7] 2008-04-14 . DAAE1CB1B1875B760496E7D3336DA1AD . 15360 . . [5.1.2600.5512] . . c:\windows\system32\ctfmon.exe
      [7] 2008-04-14 . DAAE1CB1B1875B760496E7D3336DA1AD . 15360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ctfmon.exe
      [7] 2004-08-19 . 25ECFA69AF1563FDE8DFD31F9954497A . 15360 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ctfmon.exe
      .
      [7] 2009-07-27 . 1F617C5A76215C380478D750CE92CC73 . 135168 . . [6.00.2900.5853] . . c:\windows\SoftwareDistribution\Download\eb04da1054d038e5b8db414c8e7b5bf3\sp3gdr\shsvcs.dll
      [7] 2009-07-27 . 1F617C5A76215C380478D750CE92CC73 . 135168 . . [6.00.2900.5853] . . c:\windows\system32\shsvcs.dll
      [7] 2009-07-27 . 1F617C5A76215C380478D750CE92CC73 . 135168 . . [6.00.2900.5853] . . c:\windows\system32\dllcache\shsvcs.dll
      [7] 2009-07-27 . 8A34F9730A2206726B1BE4DC4209CAB9 . 135168 . . [6.00.2900.5853] . . c:\windows\$hf_mig$\KB971029\SP3QFE\shsvcs.dll
      [7] 2009-07-27 . 8A34F9730A2206726B1BE4DC4209CAB9 . 135168 . . [6.00.2900.5853] . . c:\windows\SoftwareDistribution\Download\eb04da1054d038e5b8db414c8e7b5bf3\sp3qfe\shsvcs.dll
      [7] 2008-04-14 . CA70EDBF32032EA53F114CB930741CB5 . 135168 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\shsvcs.dll
      [7] 2008-04-14 . CA70EDBF32032EA53F114CB930741CB5 . 135168 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\shsvcs.dll
      [7] 2004-08-19 . DBCF824BA771A1F27E6F5124D0516358 . 134656 . . [6.00.2900.2180] . . c:\windows\$NtServicePackUninstall$\shsvcs.dll
      .
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\srsvc.dll
      [7] 2004-08-19 . C791D16BF25264738B14873436293BD0 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
      .
      [7] 2008-04-14 . B2718EC9DC738E915D4177498E92BC4D . 13824 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wscntfy.exe
      [7] 2008-04-14 . B2718EC9DC738E915D4177498E92BC4D . 13824 . . [5.1.2600.5512] . . c:\windows\system32\wscntfy.exe
      [7] 2008-04-14 . B2718EC9DC738E915D4177498E92BC4D . 13824 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\wscntfy.exe
      [7] 2004-08-19 . 9C90A6DBE5D43E189F199172675D6312 . 13824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wscntfy.exe
      .
      [7] 2008-04-14 . 14FDADCF05A37582399DAF1DA1DE1C7B . 129024 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\xmlprov.dll
      [7] 2008-04-14 . 14FDADCF05A37582399DAF1DA1DE1C7B . 129024 . . [5.1.2600.5512] . . c:\windows\system32\xmlprov.dll
      [7] 2008-04-14 . 14FDADCF05A37582399DAF1DA1DE1C7B . 129024 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\xmlprov.dll
      [7] 2004-08-19 . 843E0DB8042A8C0D749EB2B9EFA54F24 . 129536 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\xmlprov.dll
      .
      [7] 2010-12-09 . 48AADE1D5F48819A4C3978C09AAD1DC9 . 742912 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntdll.dll
      [7] 2010-12-09 . 48AADE1D5F48819A4C3978C09AAD1DC9 . 742912 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3QFE\ntdll.dll
      [7] 2010-12-09 . 45B458684F0471C4F25A31A0BE4D2C70 . 742912 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3GDR\ntdll.dll
      [7] 2010-12-09 . 45B458684F0471C4F25A31A0BE4D2C70 . 742912 . . [5.1.2600.6055] . . c:\windows\system32\ntdll.dll
      [7] 2010-12-09 . 45B458684F0471C4F25A31A0BE4D2C70 . 742912 . . [5.1.2600.6055] . . c:\windows\system32\dllcache\ntdll.dll
      [7] 2009-02-09 . 6CBEC637D1B5A19A1C91F2B84E03CDE2 . 739840 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntdll.dll
      [7] 2009-02-09 . D9B5602198F7DEE18B898298A52F684D . 739328 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntdll.dll
      [7] 2009-02-09 . 2A9AF687C920A8FFB84895504413A269 . 739328 . . [5.1.2600.3520] . . c:\windows\$NtServicePackUninstall$\ntdll.dll
      [7] 2009-02-09 . D3A1B3EA95A52C4FAED7963CA1725F3F . 739840 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntdll.dll
      [7] 2008-04-14 . 91346D0D58E9FA1C75D8D0319F281745 . 730624 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntdll.dll
      [7] 2008-04-14 . 91346D0D58E9FA1C75D8D0319F281745 . 730624 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ntdll.dll
      .
      [7] 2009-02-27 . F42E5D6C75B5C59433690AAB4AB205D1 . 177152 . . [5.1.2600.3531] . . c:\windows\$NtServicePackUninstall$\msctfime.ime
      [7] 2009-02-27 . 3AEC5DBB88B5DF8982857317A00AF9D1 . 177152 . . [5.1.2600.5768] . . c:\windows\$hf_mig$\KB961503\SP3GDR\msctfime.ime
      [7] 2009-02-27 . 3AEC5DBB88B5DF8982857317A00AF9D1 . 177152 . . [5.1.2600.5768] . . c:\windows\SoftwareDistribution\Download\d0a1f7532bf44ab2a8101141a19a7f63\sp3gdr\msctfime.ime
      [7] 2009-02-27 . 3AEC5DBB88B5DF8982857317A00AF9D1 . 177152 . . [5.1.2600.5768] . . c:\windows\system32\msctfime.ime
      [7] 2009-02-27 . 3AEC5DBB88B5DF8982857317A00AF9D1 . 177152 . . [5.1.2600.5768] . . c:\windows\system32\dllcache\msctfime.ime
      [7] 2009-02-27 . C6A28D65B1F22FDD643E59A1022555C0 . 177152 . . [5.1.2600.3531] . . c:\windows\$hf_mig$\KB961503\SP2QFE\msctfime.ime
      [7] 2009-02-27 . EE8205E9F125C970711F78908D828B25 . 177152 . . [5.1.2600.5768] . . c:\windows\$hf_mig$\KB961503\SP3QFE\msctfime.ime
      [7] 2008-04-14 . DFE0E9229DD3C1441B93AAB15610B9B8 . 177152 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msctfime.ime
      [7] 2008-04-14 . DFE0E9229DD3C1441B93AAB15610B9B8 . 177152 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\msctfime.ime
      .
      [7] 2008-04-14 . 2744C713F0217BD8FFD13E2EF731371C . 56320 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\eventlog.dll
      [7] 2008-04-14 . 2744C713F0217BD8FFD13E2EF731371C . 56320 . . [5.1.2600.5512] . . c:\windows\system32\eventlog.dll
      [7] 2008-04-14 . 2744C713F0217BD8FFD13E2EF731371C . 56320 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\eventlog.dll
      [7] 2004-08-19 . 5696DF4EF09C375CE42FB2DDE1E68AB7 . 55808 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\eventlog.dll
      .
      [7] 2008-04-14 . 2A1E1DF559B291583903D2F9CC504522 . 1572352 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\sfcfiles.dll
      [7] 2008-04-14 . 2A1E1DF559B291583903D2F9CC504522 . 1572352 . . [5.1.2600.5512] . . c:\windows\system32\sfcfiles.dll
      [7] 2008-04-14 . 2A1E1DF559B291583903D2F9CC504522 . 1572352 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\sfcfiles.dll
      [7] 2004-08-19 . AAFD7382D64710AE3A6F1DEE5020CF19 . 1548800 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\sfcfiles.dll
      .
      [7] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ipsec.sys
      [7] 2008-04-14 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ipsec.sys
      [7] 2008-04-13 . 23C74D75E36E7158768DD63D92789A91 . 75264 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ipsec.sys
      [7] 2004-08-03 . 64537AA5C003A6AFEEE1DF819062D0D1 . 74752 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ipsec.sys
      .
      [7] 2008-04-14 . E424F05B07AC4357DC08D06218D76C7C . 59904 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\regsvc.dll
      [7] 2008-04-14 . E424F05B07AC4357DC08D06218D76C7C . 59904 . . [5.1.2600.5512] . . c:\windows\system32\regsvc.dll
      [7] 2008-04-14 . E424F05B07AC4357DC08D06218D76C7C . 59904 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\regsvc.dll
      [7] 2004-08-19 . D025E953864EBEBAB5933086D15C4FC6 . 59904 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\regsvc.dll
      .
      [7] 2008-04-14 . 51BE25C404D3DD344C6079DE715E4977 . 193536 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\schedsvc.dll
      [7] 2008-04-14 . 51BE25C404D3DD344C6079DE715E4977 . 193536 . . [5.1.2600.5512] . . c:\windows\system32\schedsvc.dll
      [7] 2008-04-14 . 51BE25C404D3DD344C6079DE715E4977 . 193536 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\schedsvc.dll
      [7] 2007-06-20 . 0125649B3C00D037E07FD7BCEF7B653B . 192000 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\schedsvc.dll
      .
      [7] 2008-04-14 . B622A432EF02895DE4AA38AC8B85FA4C . 71680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ssdpsrv.dll
      [7] 2008-04-14 . B622A432EF02895DE4AA38AC8B85FA4C . 71680 . . [5.1.2600.5512] . . c:\windows\system32\ssdpsrv.dll
      [7] 2008-04-14 . B622A432EF02895DE4AA38AC8B85FA4C . 71680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ssdpsrv.dll
      [7] 2004-08-19 . 4AFF5EA8BF2362C3D5001295FDEB3ABD . 71680 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ssdpsrv.dll
      .
      [7] 2008-04-14 . 288B20D56D5F0EC4BCC77FBFA5A81740 . 296960 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\termsrv.dll
      [7] 2008-04-14 . 288B20D56D5F0EC4BCC77FBFA5A81740 . 296960 . . [5.1.2600.5512] . . c:\windows\system32\termsrv.dll
      [7] 2008-04-14 . 288B20D56D5F0EC4BCC77FBFA5A81740 . 296960 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\termsrv.dll
      [7] 2004-08-19 . C2038466BE5A6A76EFD592FA0B459E17 . 296960 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\termsrv.dll
      .
      [7] 2008-04-14 . 54B34DA91EAF52A8EAC654CED8977980 . 347136 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\hnetcfg.dll
      [7] 2008-04-14 . 54B34DA91EAF52A8EAC654CED8977980 . 347136 . . [5.1.2600.5512] . . c:\windows\system32\hnetcfg.dll
      [7] 2008-04-14 . 54B34DA91EAF52A8EAC654CED8977980 . 347136 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\hnetcfg.dll
      [7] 2004-08-19 . ED424C815B96ECDB3167914E84189B1D . 347136 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\hnetcfg.dll
      .
      [7] 2008-04-14 . 30CD42BFCDAFEFE8567B9E527DD3AE08 . 175104 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\appmgmts.dll
      [7] 2008-04-14 . 30CD42BFCDAFEFE8567B9E527DD3AE08 . 175104 . . [5.1.2600.5512] . . c:\windows\system32\appmgmts.dll
      [7] 2008-04-14 . 30CD42BFCDAFEFE8567B9E527DD3AE08 . 175104 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\appmgmts.dll
      [7] 2004-08-19 . 0CF68B185221E5B162EF1B0559428B40 . 175104 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\appmgmts.dll
      .
      [7] 2002-09-24 . 1C905333C0B9F3D7C68DDF25E54B00F9 . 12032 . . [5.1.2600.0] . . c:\windows\system32\drivers\acpiec.sys
      .
      [7] 2008-04-14 01:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\ServicePackFiles\i386\aec.sys
      [7] 2008-04-14 01:09 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\system32\drivers\aec.sys
      [7] 2008-04-13 16:39 . 8BED39E3C35D6A489438B8141717A557 . 142592 . . [5.1.2601.3142] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\aec.sys
      [7] 2004-08-04 01:39 . 841F385C6CFAF66B58FBD898722BB4F0 . 142464 . . [5.1.2601.2078] . . c:\windows\$NtServicePackUninstall$\aec.sys
      .
      [7] 2008-04-14 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\agp440.sys
      [7] 2008-04-14 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\system32\drivers\agp440.sys
      [7] 2008-04-13 . 08FD04AA961BDC77FB983F328334E3D7 . 42368 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\agp440.sys
      .
      [7] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ip6fw.sys
      [7] 2008-04-14 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\system32\drivers\ip6fw.sys
      [7] 2008-04-13 . 3BB22519A194418D5FEC05D800A19AD0 . 36608 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ip6fw.sys
      [7] 2004-08-03 . 4448006B6BC60E6C027932CFC38D6855 . 29056 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\ip6fw.sys
      .
      [7] 2010-09-18 07:18 . C7D2DE04EEA71D72EB0A8793FA6E9FC1 . 953856 . . [4.1.6151] . . c:\windows\$hf_mig$\KB2387149\SP3QFE\mfc40u.dll
      [7] 2010-09-18 07:18 . C7D2DE04EEA71D72EB0A8793FA6E9FC1 . 953856 . . [4.1.6151] . . c:\windows\SoftwareDistribution\Download\5868a9bbd8668e9f7fa21e11049955ba\SP3QFE\mfc40u.dll
      [7] 2010-09-18 06:53 . 46EF24BCFAF0F7AB46B1A80CCC5BCC71 . 953856 . . [4.1.6151] . . c:\windows\SoftwareDistribution\Download\5868a9bbd8668e9f7fa21e11049955ba\SP3GDR\mfc40u.dll
      [7] 2010-09-18 06:53 . 46EF24BCFAF0F7AB46B1A80CCC5BCC71 . 953856 . . [4.1.6151] . . c:\windows\system32\mfc40u.dll
      [7] 2010-09-18 06:53 . 46EF24BCFAF0F7AB46B1A80CCC5BCC71 . 953856 . . [4.1.6151] . . c:\windows\system32\dllcache\mfc40u.dll
      [7] 2008-04-14 10:48 . 27415CEEB58C8C2F92AFF8CFE2517A3C . 927504 . . [4.1.0.61] . . c:\windows\ServicePackFiles\i386\mfc40u.dll
      [7] 2008-04-14 02:18 . 27415CEEB58C8C2F92AFF8CFE2517A3C . 927504 . . [4.1.0.61] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\mfc40u.dll
      [-] 2002-09-24 03:00 . F1197F879AF9ED702D3E6EBCD3B99107 . 924432 . . [4.1.6140] . . c:\windows\$NtServicePackUninstall$\mfc40u.dll
      .
      [7] 2008-04-14 . 047E70B04B288439245DDC8DD1A31982 . 33792 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\msgsvc.dll
      [7] 2008-04-14 . 047E70B04B288439245DDC8DD1A31982 . 33792 . . [5.1.2600.5512] . . c:\windows\system32\msgsvc.dll
      [7] 2008-04-14 . 047E70B04B288439245DDC8DD1A31982 . 33792 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\msgsvc.dll
      [7] 2004-08-19 . CA33F6547C49E749E47FB6A0D1DBE192 . 33792 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\msgsvc.dll
      .
      [7] 2006-05-10 01:26 . F4DB1F1417FF329E8FF217D5C474D5D7 . 26112 . . [11.0.5358.4827] . . c:\windows\system32\MsPMSNSv.dll
      [7] 2006-05-10 01:26 . F4DB1F1417FF329E8FF217D5C474D5D7 . 26112 . . [11.0.5358.4827] . . c:\windows\system32\dllcache\MsPMSNSv.dll
      [7] 2005-01-28 15:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\$NtUninstallWMFDist11$\mspmsnsv.dll
      [7] 2005-01-28 15:44 . 140EF97B64F560FD78643CAE2CDAD838 . 25088 . . [10.0.3790.3802] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}\MsPMSNSv.dll
      [7] 2004-08-19 11:42 . 7BB55C1143F8270467928AA843A48192 . 52736 . . [9.0.1.56] . . c:\windows\RegisteredPackages\{30C7234B-6482-4A55-A11D-ECD9030313F2}$BACKUP$\System\MsPMSNSv.dll
      .
      [7] 2012-05-05 . 022FD032105D0A6C02794B9C84BAB0E6 . 2071552 . . [5.1.2600.6223] . . c:\windows\Driver Cache\i386\ntkrnlpa.exe
      [7] 2012-05-05 . 022FD032105D0A6C02794B9C84BAB0E6 . 2071552 . . [5.1.2600.6223] . . c:\windows\SoftwareDistribution\Download\3ea89e8db489522d4dbceff5e6b2e850\sp3gdr\ntkrnlpa.exe
      [7] 2012-05-05 . 022FD032105D0A6C02794B9C84BAB0E6 . 2071552 . . [5.1.2600.6223] . . c:\windows\system32\dllcache\ntkrnlpa.exe
      [7] 2012-05-05 . 638EC396B4E753BEE2A46D95F7072A52 . 2029056 . . [5.1.2600.6223] . . c:\windows\system32\ntkrnlpa.exe
      [7] 2012-05-05 . 539C2C08DB474D3E35D0591B453705C5 . 2071552 . . [5.1.2600.6223] . . c:\windows\$hf_mig$\KB2707511\SP3QFE\ntkrnlpa.exe
      [7] 2012-05-05 . 539C2C08DB474D3E35D0591B453705C5 . 2071552 . . [5.1.2600.6223] . . c:\windows\SoftwareDistribution\Download\3ea89e8db489522d4dbceff5e6b2e850\sp3qfe\ntkrnlpa.exe
      [7] 2012-04-11 . 8A943E5DB9BC152AFF0D26F9E9A68EFF . 2071552 . . [5.1.2600.6206] . . c:\windows\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntkrnlpa.exe
      [7] 2012-04-11 . F3364F7432D706F7550FBA400DEC258E . 2071552 . . [5.1.2600.6206] . . c:\windows\$hf_mig$\KB2676562\SP3QFE\ntkrnlpa.exe
      [7] 2012-04-11 . F3364F7432D706F7550FBA400DEC258E . 2071552 . . [5.1.2600.6206] . . c:\windows\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntkrnlpa.exe
      [7] 2010-12-09 . 9F35605BC629F27AA34423B9DE652284 . 2071808 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntkrnlpa.exe
      [7] 2010-12-09 . 9F35605BC629F27AA34423B9DE652284 . 2071808 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3QFE\ntkrnlpa.exe
      [7] 2010-12-09 . A09F7AAE3B9D189F5F9FC16590DF4A2D . 2071808 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3GDR\ntkrnlpa.exe
      [7] 2010-02-17 . 297709C813812AFB3274BF685C607572 . 2066176 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntkrnlpa.exe
      [7] 2010-02-16 . EF048F2232A4FE8168D4657E60C1B771 . 2019328 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntkrnlpa.exe
      [7] 2010-02-16 . E7D906C631864E89122862C637234199 . 2069248 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntkrnlpa.exe
      [7] 2010-02-16 . 8154DCA6598C06058410A296FDDC9AC2 . 2069376 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntkrnlpa.exe
      [7] 2009-02-10 . 2050C3BAB913974643D43C1A414CACB5 . 2068480 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntkrnlpa.exe
      [7] 2009-02-09 . 6DEAEEA5DE2374B98450054B863AE713 . 2065408 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntkrnlpa.exe
      [7] 2009-02-09 . 9B5E5D325CEDBB10A9A86679634A38CC . 2068608 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntkrnlpa.exe
      [7] 2008-04-14 . 2E2931A58B112CDF2A99B00B5DACDBE4 . 2068224 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntkrnlpa.exe
      [7] 2008-04-14 . 2E2931A58B112CDF2A99B00B5DACDBE4 . 2068224 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ntkrnlpa.exe

    8. #8
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Segunda parte:


      .
      [7] 2008-04-14 10:48 . D60C40D71A4D874C903255E4827AFA0C . 437760 . . [5.1.2400.5512] . . c:\windows\ServicePackFiles\i386\ntmssvc.dll
      [7] 2008-04-14 10:48 . D60C40D71A4D874C903255E4827AFA0C . 437760 . . [5.1.2400.5512] . . c:\windows\system32\ntmssvc.dll
      [7] 2008-04-14 02:18 . D60C40D71A4D874C903255E4827AFA0C . 437760 . . [5.1.2400.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ntmssvc.dll
      [7] 2004-08-19 11:42 . 395948DEE2B0F534A8C70687CC6DD7CA . 437760 . . [5.1.2400.2180] . . c:\windows\$NtServicePackUninstall$\ntmssvc.dll
      .
      [7] 2008-04-14 . 7594203F459ABDB5FE53C08D6B1BD53B . 186368 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\upnphost.dll
      [7] 2008-04-14 . 7594203F459ABDB5FE53C08D6B1BD53B . 186368 . . [5.1.2600.5512] . . c:\windows\system32\upnphost.dll
      [7] 2008-04-14 . 7594203F459ABDB5FE53C08D6B1BD53B . 186368 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\upnphost.dll
      [7] 2004-08-19 . 4B48358383940F6E559DA2F64753029F . 185344 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\upnphost.dll
      .
      [7] 2008-04-14 . 9EF059A2C76BCE8DB9B0DD95EFE23A48 . 367616 . . [5.3.2600.5512] . . c:\windows\ServicePackFiles\i386\dsound.dll
      [7] 2008-04-14 . 9EF059A2C76BCE8DB9B0DD95EFE23A48 . 367616 . . [5.3.2600.5512] . . c:\windows\system32\dsound.dll
      [7] 2008-04-14 . 9EF059A2C76BCE8DB9B0DD95EFE23A48 . 367616 . . [5.3.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\dsound.dll
      [7] 2004-08-19 . BDE6AEDFD66768C08C42DAE5056B6779 . 367616 . . [5.3.2600.2180] . . c:\windows\$NtServicePackUninstall$\dsound.dll
      .
      [7] 2008-04-14 . AE5DD931EFAB3687BA4DF0671F4CE078 . 1689088 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\d3d9.dll
      [7] 2008-04-14 . AE5DD931EFAB3687BA4DF0671F4CE078 . 1689088 . . [5.03.2600.5512] . . c:\windows\system32\d3d9.dll
      [7] 2008-04-14 . AE5DD931EFAB3687BA4DF0671F4CE078 . 1689088 . . [5.03.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\d3d9.dll
      [7] 2004-08-19 . 77A1379688F15B02D5100183A54778BB . 1689088 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\d3d9.dll
      .
      [7] 2008-04-14 . 28D0D87445F4ADD6614155EC13F042DD . 279552 . . [5.03.2600.5512] . . c:\windows\ServicePackFiles\i386\ddraw.dll
      [7] 2008-04-14 . 28D0D87445F4ADD6614155EC13F042DD . 279552 . . [5.03.2600.5512] . . c:\windows\system32\ddraw.dll
      [7] 2008-04-14 . 28D0D87445F4ADD6614155EC13F042DD . 279552 . . [5.03.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ddraw.dll
      [7] 2004-08-19 . 285B7EA6C449DA0E08B1195FE7033A1A . 266240 . . [5.03.2600.2180] . . c:\windows\$NtServicePackUninstall$\ddraw.dll
      .
      [7] 2008-04-14 10:48 . F71CB6064DFC10DFB767B537BFA33D61 . 84992 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\olepro32.dll
      [7] 2008-04-14 10:48 . F71CB6064DFC10DFB767B537BFA33D61 . 84992 . . [5.1.2600.5512] . . c:\windows\system32\olepro32.dll
      [7] 2008-04-14 02:18 . F71CB6064DFC10DFB767B537BFA33D61 . 84992 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\olepro32.dll
      [7] 2004-08-19 11:42 . 74A98B98FB63049B6FECC472AD09A577 . 83456 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\olepro32.dll
      .
      [7] 2008-04-14 . 91C2A139745F2AF17E4685A1E54B4FDA . 41984 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\perfctrs.dll
      [7] 2008-04-14 . 91C2A139745F2AF17E4685A1E54B4FDA . 41984 . . [5.1.2600.5512] . . c:\windows\system32\perfctrs.dll
      [7] 2008-04-14 . 91C2A139745F2AF17E4685A1E54B4FDA . 41984 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\perfctrs.dll
      [7] 2004-08-19 . AC18C8A4D842211748AAACF89EFEBF07 . 41984 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\perfctrs.dll
      .
      [7] 2008-04-14 . F4968D88123785BCF95A31E0225C5592 . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\version.dll
      [7] 2008-04-14 . F4968D88123785BCF95A31E0225C5592 . 18944 . . [5.1.2600.5512] . . c:\windows\system32\version.dll
      [7] 2008-04-14 . F4968D88123785BCF95A31E0225C5592 . 18944 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\version.dll
      [7] 2004-08-19 . 63782F8342BB8F04E0AFCAABA2B60C09 . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\version.dll
      .
      [7] 2009-03-08 . B60DDDD2D63CE41CB8C487FCFBB6419E . 638816 . . [8.00.6001.18702] . . c:\windows\system32\dllcache\iexplore.exe
      [7] 2008-04-14 . 12CE2CACCF25D99944CA69F6A3A83441 . 93184 . . [6.00.2900.5512] . . c:\windows\ServicePackFiles\i386\iexplore.exe
      [7] 2008-04-14 . 12CE2CACCF25D99944CA69F6A3A83441 . 93184 . . [6.00.2900.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\iexplore.exe
      [7] 2004-08-19 . 2E47EC1812526240B1F9E00FB9E5036D . 93184 . . [6.00.2900.2180] . . c:\windows\ie8\iexplore.exe
      .
      .
      [7] 2012-05-05 . CE21A80B5956FE8C3C0EA78654BB913F . 2195072 . . [5.1.2600.6223] . . c:\windows\Driver Cache\i386\ntoskrnl.exe
      [7] 2012-05-05 . CE21A80B5956FE8C3C0EA78654BB913F . 2195072 . . [5.1.2600.6223] . . c:\windows\SoftwareDistribution\Download\3ea89e8db489522d4dbceff5e6b2e850\sp3gdr\ntoskrnl.exe
      [7] 2012-05-05 . CE21A80B5956FE8C3C0EA78654BB913F . 2195072 . . [5.1.2600.6223] . . c:\windows\system32\dllcache\ntoskrnl.exe
      [7] 2012-05-05 . 715C530B6FD52E3F730A2977D29D1A0A . 2150912 . . [5.1.2600.6223] . . c:\windows\system32\ntoskrnl.exe
      [7] 2012-05-05 . D9C76CE9F26D6A0725FE9C241819149A . 2195072 . . [5.1.2600.6223] . . c:\windows\$hf_mig$\KB2707511\SP3QFE\ntoskrnl.exe
      [7] 2012-05-05 . D9C76CE9F26D6A0725FE9C241819149A . 2195072 . . [5.1.2600.6223] . . c:\windows\SoftwareDistribution\Download\3ea89e8db489522d4dbceff5e6b2e850\sp3qfe\ntoskrnl.exe
      [7] 2012-04-11 . EC6E69BCBF5CF5EAC92626B82648A96E . 2195072 . . [5.1.2600.6206] . . c:\windows\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3gdr\ntoskrnl.exe
      [7] 2012-04-11 . 90EB3AFD0833502E05D1D7A4B6F238A5 . 2195072 . . [5.1.2600.6206] . . c:\windows\$hf_mig$\KB2676562\SP3QFE\ntoskrnl.exe
      [7] 2012-04-11 . 90EB3AFD0833502E05D1D7A4B6F238A5 . 2195072 . . [5.1.2600.6206] . . c:\windows\SoftwareDistribution\Download\a7ea82820e700120a4a9789cc5c3058a\sp3qfe\ntoskrnl.exe
      [7] 2010-12-09 . 4F2053B8B0D20F4B398A95BDD1905893 . 2195200 . . [5.1.2600.6055] . . c:\windows\$hf_mig$\KB2393802\SP3QFE\ntoskrnl.exe
      [7] 2010-12-09 . 4F2053B8B0D20F4B398A95BDD1905893 . 2195200 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3QFE\ntoskrnl.exe
      [7] 2010-12-09 . 5E8F8BBEAC46044A99C1EDCE00E96B01 . 2195200 . . [5.1.2600.6055] . . c:\windows\SoftwareDistribution\Download\285f892074bb786f550fc2e87fc46b93\SP3GDR\ntoskrnl.exe
      [7] 2010-02-17 . 318271984461DD8E31FF1A36B3B3F099 . 2192384 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3GDR\ntoskrnl.exe
      [7] 2010-02-16 . B888916DB7A5ECB44C3375472203A847 . 2139648 . . [5.1.2600.3670] . . c:\windows\$NtServicePackUninstall$\ntoskrnl.exe
      [7] 2010-02-16 . D98822B74868D236D7B0EA6F96D3641E . 2189312 . . [5.1.2600.3670] . . c:\windows\$hf_mig$\KB979683\SP2QFE\ntoskrnl.exe
      [7] 2010-02-16 . 1D596B8BEBAB1A9C7B749D553E5E2A20 . 2192512 . . [5.1.2600.5938] . . c:\windows\$hf_mig$\KB979683\SP3QFE\ntoskrnl.exe
      [7] 2009-02-10 . 6BC8E4AAFC98B556B8FB616AD30CD5A3 . 2191616 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3QFE\ntoskrnl.exe
      [7] 2009-02-09 . 9AB66A74CDD55AEBB975FD7C77A39B7D . 2188544 . . [5.1.2600.3520] . . c:\windows\$hf_mig$\KB956572\SP2QFE\ntoskrnl.exe
      [7] 2009-02-09 . 0A413FFFE5C2FC00D5F8F6FF4B3F6889 . 2191488 . . [5.1.2600.5755] . . c:\windows\$hf_mig$\KB956572\SP3GDR\ntoskrnl.exe
      [7] 2008-04-14 . 6468827016FA22CAE81D7059F1A974C0 . 2191360 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\ntoskrnl.exe
      [7] 2008-04-14 . 6468827016FA22CAE81D7059F1A974C0 . 2191360 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\ntoskrnl.exe
      .
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\srsvc.dll
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\system32\srsvc.dll
      [7] 2008-04-14 . 0F30EEC6013FCF76693405EC4A7DF899 . 171520 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\srsvc.dll
      [7] 2004-08-19 . C791D16BF25264738B14873436293BD0 . 171008 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\srsvc.dll
      .
      [7] 2008-04-14 . C71CFACDBFADD819736F61F5738BDDC1 . 177152 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\w32time.dll
      [7] 2008-04-14 . C71CFACDBFADD819736F61F5738BDDC1 . 177152 . . [5.1.2600.5512] . . c:\windows\system32\w32time.dll
      [7] 2008-04-14 . C71CFACDBFADD819736F61F5738BDDC1 . 177152 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\w32time.dll
      [7] 2004-08-19 . 13835C57C973519F82B27EA506239369 . 176640 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\w32time.dll
      .
      [7] 2008-04-14 . 7226422C95FDF8AA6092EE964912B0DF . 334336 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wiaservc.dll
      [7] 2008-04-14 . 7226422C95FDF8AA6092EE964912B0DF . 334336 . . [5.1.2600.5512] . . c:\windows\system32\wiaservc.dll
      [7] 2008-04-14 . 7226422C95FDF8AA6092EE964912B0DF . 334336 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\wiaservc.dll
      [7] 2004-08-19 . FFFA385FEADC60175C653AFB215F539A . 333824 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wiaservc.dll
      .
      [7] 2008-04-14 . D94FF77931D467AC3ED916F767FA7E1F . 18944 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\midimap.dll
      [7] 2008-04-14 . D94FF77931D467AC3ED916F767FA7E1F . 18944 . . [5.1.2600.5512] . . c:\windows\system32\midimap.dll
      [7] 2008-04-14 . D94FF77931D467AC3ED916F767FA7E1F . 18944 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\midimap.dll
      [7] 2004-08-19 . 3D9CD39DA8C8FC3C04BF11B89501C9FB . 18944 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\midimap.dll
      .
      [7] 2008-04-14 . 73ECA7B33EB3F7262D92EA80B61708CD . 7680 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\rasadhlp.dll
      [7] 2008-04-14 . 73ECA7B33EB3F7262D92EA80B61708CD . 7680 . . [5.1.2600.5512] . . c:\windows\system32\rasadhlp.dll
      [7] 2008-04-14 . 73ECA7B33EB3F7262D92EA80B61708CD . 7680 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\rasadhlp.dll
      [7] 2004-08-19 . B9FC593B9487F8755F974FE7147B8191 . 8192 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\rasadhlp.dll
      .
      [7] 2008-04-14 . AF6AFCD7BAB71127B3812762500EFBA1 . 19456 . . [5.1.2600.5512] . . c:\windows\ServicePackFiles\i386\wshtcpip.dll
      [7] 2008-04-14 . AF6AFCD7BAB71127B3812762500EFBA1 . 19456 . . [5.1.2600.5512] . . c:\windows\system32\wshtcpip.dll
      [7] 2008-04-14 . AF6AFCD7BAB71127B3812762500EFBA1 . 19456 . . [5.1.2600.5512] . . c:\windows\SoftwareDistribution\Download\4fcdf3a74fe834ce16dc12a720df5cc7\wshtcpip.dll
      [7] 2004-08-19 . DE1A0E546351E4D33BB7E1FB8480E9E1 . 19968 . . [5.1.2600.2180] . . c:\windows\$NtServicePackUninstall$\wshtcpip.dll
      .
      ((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
      .
      .
      *Note* empty entries & legit default entries are not shown
      REGEDIT4
      .
      [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
      "EM_EXEC"="c:\archiv~1\MOUSEW~1\SYSTEM\EM_EXEC.EXE" [2002-05-01 28672]
      "WheelMouse"="c:\advanc~1\wh_exec.exe" [2008-08-22 151552]
      "ACQTMOUSE"="c:\archivos de programa\Mouse Setting\Mouse Setting Software\4.0\ACQTMAPP.exe" [2008-08-01 501760]
      "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2008-02-15 159744]
      "Persistence"="c:\windows\system32\igfxpers.exe" [2008-02-15 131072]
      "SwitchBoard"="c:\archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe" [2010-02-19 517096]
      "YouCam Service"="c:\archivos de programa\CyberLink\YouCam\YouCamService.exe" [2011-09-09 247016]
      "PHIME2002A"="c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE" [2004-08-03 455168]
      "UnlockerAssistant"="c:\archivos de programa\Unlocker\UnlockerAssistant.exe" [2009-10-26 15872]
      "ISUSPM Startup"="c:\archiv~1\ARCHIV~1\INSTAL~1\UPDATE~1\ISUSPM.exe" [2004-06-16 221184]
      "ISUSScheduler"="c:\archivos de programa\Archivos comunes\InstallShield\UpdateService\issch.exe" [2004-06-16 81920]
      "AVG_TRAY"="c:\archivos de programa\AVG\AVG2012\avgtray.exe" [2012-04-05 2587008]
      .
      [HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
      "CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
      .
      [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
      BootExecute REG_MULTI_SZ autocheck autochk *\0c:\archiv~1\AVG\AVG2012\avgrsx.exe /sync /restart
      .
      [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MCODS]
      @=""
      .
      [HKLM\~\startupfolder\C:^Documents and Settings^Eduardo^Menú Inicio^Programas^Inicio^IconRestorer.lnk]
      backup=c:\windows\pss\IconRestorer.lnkStartup
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AVP
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HKCU
      HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\HKLM
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeAAMUpdater-1.0]
      2012-04-04 09:09 446392 ------w- c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\AdobeCS6ServiceManager]
      2012-03-09 19:26 1073312 ----a-w- c:\archivos de programa\Archivos comunes\Adobe\CS6ServiceManager\CS6ServiceManager.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ares]
      2010-02-08 14:51 1015808 ----a-w- c:\archivos de programa\Ares\Ares.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\ctfmon.exe]
      2008-04-14 10:48 15360 ----a-w- c:\windows\system32\ctfmon.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Google Update]
      2012-02-29 03:30 136176 ----atw- c:\documents and settings\Eduardo\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\LogMeIn Hamachi Ui]
      2012-08-29 15:03 1996200 ----a-w- c:\archivos de programa\LogMeIn Hamachi\hamachi-2-ui.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
      2010-04-17 01:12 3872080 ----a-w- c:\archivos de programa\Windows Live\Messenger\msnmsgr.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PlusService]
      2012-02-07 15:21 801792 ----a-w- c:\archivos de programa\Yuna Software\Messenger Plus!\PlusService.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\RTHDCPL]
      2010-07-06 21:26 19556968 ----a-w- c:\windows\RTHDCPL.EXE
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Shockwave Updater]
      2011-06-13 08:49 545208 ----a-w- c:\windows\system32\Adobe\Shockwave 11\SwHelper_1160626.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Skype]
      2012-07-13 16:33 17418928 ----a-r- c:\archivos de programa\Skype\Phone\Skype.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SunJavaUpdateSched]
      2012-07-03 12:04 252848 ----a-w- c:\archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
      .
      [HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run-]
      "Google Update"="c:\documents and settings\Eduardo\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" /c
      "msnmsgr"="c:\archivos de programa\Windows Live\Messenger\MsnMsgr.Exe" /background
      "CTFMON.EXE"=c:\windows\system32\ctfmon.exe
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
      "Adobe Reader Speed Launcher"="c:\archivos de programa\Adobe\Reader 9.0\Reader\Reader_sl.exe"
      "NeroFilterCheck"=c:\archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
      "Malwarebytes' Anti-Malware"="c:\archivos de programa\Malwarebytes' Anti-Malware\mbamgui.exe" /starttray
      "MSPY2002"=c:\windows\system32\IME\PINTLGNT\ImScInst.exe /SYNC
      "AdobeAAMUpdater-1.0"="c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe"
      "ISUSScheduler"="c:\archivos de programa\Archivos comunes\InstallShield\UpdateService\issch.exe" -start
      "PHIME2002ASync"=c:\windows\system32\IME\TINTLGNT\TINTSETP.EXE /SYNC
      "SwitchBoard"=c:\archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe
      "ISUSPM Startup"=c:\archiv~1\ARCHIV~1\INSTAL~1\UPDATE~1\isuspm.exe -startup
      "IMJPMIG8.1"="c:\windows\IME\imjp8_1\IMJPMIG.EXE" /Spoil /RemAdvDef /Migration32
      "IgfxTray"=c:\windows\system32\igfxtray.exe
      "KodakShareButtonApp"=c:\archivos de programa\Kodak\KODAK Share Button App\Listener.exe
      "LogMeIn Hamachi Ui"="c:\archivos de programa\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start
      "VMonitorVMUVC"="c:\archivos de programa\Vimicro Corporation\VMUVC\VMonitor.exe" VMUVC
      "SunJavaUpdateSched"="c:\archivos de programa\Archivos comunes\Java\Java Update\jusched.exe"
      "MessengerPlusForSkypeService"="c:\archivos de programa\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe"
      "RTHDCPL"=RTHDCPL.EXE
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-disabled]
      "QuickTime Task"="c:\archivos de programa\QuickTime\QTTask.exe" -atboottime
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\security center]
      "AntiVirusOverride"=dword:00000001
      "FirewallOverride"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeAntiVirus]
      "DisableMonitoring"=dword:00000001
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\security center\Monitoring\McAfeeFirewall]
      "DisableMonitoring"=dword:00000001
      .
      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
      "EnableFirewall"= 0 (0x0)
      .
      [HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
      "%windir%\\system32\\sessmgr.exe"=
      "c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
      "c:\\Metin2 Guabina Cliente 2012\\metin2client.bin"=
      "c:\\Archivos de programa\\Garena Plus\\Apps\\BlackShot\\BlackShot\\system\\BlackShot.exe"=
      "c:\\Archivos de programa\\NVIDIA Corporation\\NVIDIA Update Core\\daemonu.exe"=
      "c:\\Archivos de programa\\Ares\\Ares.exe"=
      "c:\\Unreal\\System\\Unreal.exe"=
      "c:\\UnrealGold\\System\\Unreal.exe"=
      "c:\\Archivos de programa\\AVG\\AVG2012\\avgnsx.exe"=
      "c:\\Archivos de programa\\AVG\\AVG2012\\avgdiagex.exe"=
      "c:\\Archivos de programa\\AVG\\AVG2012\\avgmfapx.exe"=
      "c:\\Archivos de programa\\AVG\\AVG2012\\avgemcx.exe"=
      .
      R0 AVGIDSHX;AVGIDSHX;c:\windows\system32\drivers\avgidshx.sys [19/04/2012 04:50 a.m. 24896]
      R0 Avgrkx86;AVG Anti-Rootkit Driver;c:\windows\system32\drivers\avgrkx86.sys [31/01/2012 04:46 a.m. 31952]
      R1 Avgldx86;AVG AVI Loader Driver;c:\windows\system32\drivers\avgldx86.sys [22/02/2012 05:25 a.m. 235216]
      R1 Avgtdix;AVG TDI Driver;c:\windows\system32\drivers\avgtdix.sys [19/03/2012 05:17 a.m. 301248]
      R2 Akamai;Akamai NetSession Interface;c:\windows\System32\svchost.exe -k Akamai [31/12/1979 08:00 p.m. 14336]
      R2 avgfws;Firewall de AVG;c:\archivos de programa\AVG\AVG2012\avgfws.exe [13/06/2012 03:48 a.m. 2321560]
      R2 AVGIDSAgent;AVGIDSAgent;c:\archivos de programa\AVG\AVG2012\avgidsagent.exe [04/07/2012 05:25 p.m. 5160568]
      R2 avgwd;WatchDog de AVG;c:\archivos de programa\AVG\AVG2012\avgwdsvc.exe [14/02/2012 04:53 a.m. 193288]
      R2 DigiNet;Digidesign Ethernet Support;c:\windows\system32\drivers\diginet.sys [10/01/2012 01:56 a.m. 16400]
      R2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\archivos de programa\LogMeIn Hamachi\hamachi-2.exe [29/08/2012 12:03 p.m. 1385896]
      R2 MsgPlusService;Messenger Plus! Service;c:\archivos de programa\Yuna Software\Messenger Plus! for Skype\MsgPlusForSkypeService.exe [22/02/2012 10:53 p.m. 124832]
      R2 nvUpdatusService;NVIDIA Update Service Daemon;c:\archivos de programa\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe [01/09/2012 03:56 p.m. 1262400]
      R3 Avgfwdx;Avgfwdx;c:\windows\system32\drivers\avgfwdx.sys [12/01/2012 07:52 p.m. 30944]
      R3 AVGIDSDriver;AVGIDSDriver;c:\windows\system32\drivers\avgidsdriverx.sys [23/12/2011 01:32 p.m. 139856]
      R3 AVGIDSFilter;AVGIDSFilter;c:\windows\system32\drivers\avgidsfilterx.sys [23/12/2011 01:32 p.m. 24144]
      R3 AVGIDSShim;AVGIDSShim;c:\windows\system32\drivers\avgidsshimx.sys [23/12/2011 01:32 p.m. 17232]
      R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\drivers\clwvd.sys [17/08/2012 03:33 a.m. 27760]
      R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [07/10/2010 01:13 p.m. 22344]
      R3 SCREAMINGBDRIVER;Screaming Bee Audio;c:\windows\system32\drivers\ScreamingBAudio.sys [26/09/2006 11:21 p.m. 23064]
      S0 axsoay;axsoay; [x]
      S0 sptd;sptd;c:\windows\system32\drivers\sptd.sys [18/12/2009 04:13 p.m. 715248]
      S2 MBAMService;MBAMService;c:\archivos de programa\Malwarebytes' Anti-Malware\mbamservice.exe [07/10/2010 01:13 p.m. 655944]
      S2 SkypeUpdate;Skype Updater;c:\archivos de programa\Skype\Updater\Updater.exe [13/07/2012 01:28 p.m. 160944]
      S3 ACRUSBTM;ACRUSBTM;c:\windows\system32\drivers\ACRUSBTM.SYS [28/02/2011 08:41 p.m. 28672]
      S3 Ambfilt;Ambfilt;c:\windows\system32\drivers\Ambfilt.sys [30/08/2012 04:21 p.m. 1691480]
      S3 Avgfwfd;AVG network filter service;c:\windows\system32\drivers\avgfwdx.sys [12/01/2012 07:52 p.m. 30944]
      S3 DCamUSBUVT;ICM532A;c:\windows\system32\drivers\usbuvt.sys [26/10/2010 10:04 p.m. 103424]
      S3 EagleXNt;EagleXNt;\??\c:\windows\system32\drivers\EagleXNt.sys --> c:\windows\system32\drivers\EagleXNt.sys [?]
      S3 leafnets;Leaf Networks Adapter;c:\windows\system32\drivers\leafnets.sys [02/05/2007 08:48 p.m. 55296]
      S3 MozillaMaintenance;Mozilla Maintenance Service;c:\archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe [25/04/2012 03:13 p.m. 114144]
      S3 nosGetPlusHelper;getPlus(R) Helper 3004;c:\windows\System32\svchost.exe -k nosGetPlusHelper [31/12/1979 08:00 p.m. 14336]
      S3 npggsvc;nProtect GameGuard Service;c:\windows\system32\GameMon.des -service --> c:\windows\system32\GameMon.des -service [?]
      S3 PortTalk;PortTalk;c:\windows\system32\drivers\porttalk.sys [18/12/2009 06:52 p.m. 3567]
      S3 SwitchBoard;SwitchBoard;c:\archivos de programa\Archivos comunes\Adobe\SwitchBoard\SwitchBoard.exe [19/02/2010 01:37 p.m. 517096]
      S3 TkFsFtM;MiniFilter Driver;c:\windows\system32\TKFsFt.sys --> c:\windows\system32\TKFsFt.sys [?]
      S3 VMUVC;Vimicro Camera Service VMUVC;c:\windows\system32\drivers\VMUVC.sys [30/12/2011 12:37 a.m. 252416]
      S3 vvftUVC;Vimicro Camera Filter Service VMUVC;c:\windows\system32\drivers\vvftUVC.sys [30/12/2011 12:37 a.m. 398720]
      S3 wdm_au8810;Controlador de audio Aureal Vortex 8810 (WDM);c:\windows\system32\drivers\adm8810.sys [20/12/2009 08:37 p.m. 584448]
      S3 WPRO_40_1123;WinPcap Packet Driver (WPRO_40_1123);c:\windows\system32\drivers\WPRO_40_1123.sys --> c:\windows\system32\drivers\WPRO_40_1123.sys [?]
      .
      [HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
      nosGetPlusHelper REG_MULTI_SZ nosGetPlusHelper
      Akamai REG_MULTI_SZ Akamai
      .
      Contents of the 'Scheduled Tasks' folder
      .
      2012-09-07 c:\windows\Tasks\AdobeAAMUpdater-1.0-CAMEL-Eduardo.job
      - c:\archivos de programa\Archivos comunes\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2012-07-19 09:09]
      .
      2012-09-07 c:\windows\Tasks\GlaryInitialize.job
      - c:\archivos de programa\Glary Utilities\initialize.exe [2009-12-18 20:24]
      .
      2012-07-13 c:\windows\Tasks\Mantenimiento automático.job
      - c:\archivos de programa\TuneUp Utilities 2009\OneClickStarter.exe [2008-11-27 14:31]
      .
      .
      ------- Supplementary Scan -------
      .
      uStart Page = about:blank
      IE: Agregar al componente Anti-Banners - c:\archivos de programa\Kaspersky Lab\Kaspersky Anti-Virus 6.0 for Windows Workstations MP4\ie_banner_deny.htm
      Trusted Zone: vizzed.com\www
      FF - ProfilePath - c:\documents and settings\Eduardo\Datos de programa\Mozilla\Firefox\Profiles\meesmajh.default\
      FF - prefs.js: browser.search.defaulturl - hxxp://flvdirect.iamwired.net/websearch.php?src=tops&search=
      FF - prefs.js: browser.search.selectedEngine - Búsqueda de vÃ*deos en YouTube
      FF - prefs.js: browser.startup.homepage - hxxp://es-ES.start3.mozilla.com/firefox?client=firefox-a&rls=org.mozilla:es-ES:official
      FF - prefs.js: keyword.URL - hxxp://www.google.com/search?ie=UTF-8&oe=UTF-8&sourceid=navclient&gfns=1&q=
      .
      - - - - ORPHANS REMOVED - - - -
      .
      SafeBoot-89025889.sys
      MSConfigStartUp-DriverMax_RESTART - c:\archivos de programa\Innovative Solutions\DriverMax\drivermax.exe
      MSConfigStartUp-FlashPlayerUpdate - c:\windows\system32\Macromed\Flash\FlashUtil32_11_3_300_262_Plugin.exe
      MSConfigStartUp-kowuzpecxaxj - c:\documents and settings\Eduardo\kowuzpecxaxj.exe
      MSConfigStartUp-Regedit32 - c:\windows\system32\regedit.exe
      MSConfigStartUp-syshost32 - c:\windows\Installer\{8090EE38-87D8-BAD5-7F31-7BC05ED0B7F6}\syshost.exe
      .
      .
      .
      **************************************************************************
      .
      catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
      Rootkit scan 2012-09-07 03:30
      Windows 5.1.2600 Service Pack 3 NTFS
      .
      scanning hidden processes ...
      .
      scanning hidden autostart entries ...
      .
      scanning hidden files ...
      .
      scan completed successfully
      hidden files: 0
      .
      **************************************************************************
      .
      [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\Akamai]
      "ServiceDll"="c:\archivos de programa\archivos comunes\akamai/netsession_win_4f7fccd.dll"
      .
      [HKEY_LOCAL_MACHINE\System\ControlSet002\Services\npggsvc]
      "ImagePath"="c:\windows\system32\GameMon.des -service"
      .
      --------------------- DLLs Loaded Under Running Processes ---------------------
      .
      - - - - - - - > 'explorer.exe'(3412)
      c:\archivos de programa\Unlocker\UnlockerHook.dll
      c:\windows\system32\ieframe.dll
      c:\windows\system32\webcheck.dll
      c:\windows\system32\WPDShServiceObj.dll
      c:\windows\system32\PortableDeviceTypes.dll
      c:\windows\system32\PortableDeviceApi.dll
      .
      ------------------------ Other Running Processes ------------------------
      .
      c:\archivos de programa\Java\jre7\bin\jqs.exe
      c:\windows\system32\PnkBstrA.exe
      c:\archivos de programa\AVG\AVG2012\avgnsx.exe
      c:\windows\System32\TUProgSt.exe
      c:\archivos de programa\AVG\AVG2012\avgemcx.exe
      c:\archivos de programa\AVG\AVG2012\avgrsx.exe
      c:\archivos de programa\AVG\AVG2012\avgcsrvx.exe
      c:\archivos de programa\Mouse Setting\Mouse Setting Software\4.0\ACQHIDCL.DAT
      c:\windows\system32\wbem\wmiapsrv.exe
      .
      **************************************************************************
      .
      Completion time: 2012-09-07 03:42:22 - machine was rebooted
      ComboFix-quarantined-files.txt 2012-09-07 06:42
      .
      Pre-Run: 6.593.413.120 bytes libres
      Post-Run: 6.722.809.856 bytes libres
      .
      - - End Of File - - 74C9928C0F84F02A7CC2304FADA8002F

    9. #9
      Moderadora Gral.
      Avatar de SanMar
      Registrado
      jun 2008
      Ubicación
      Argentina
      Mensajes
      21.029

      Re: Pierdo acceso a internet tras instalar cualquier antivirus

      Hola Edushyan:


      Desisntala con sus herramientas especificas:

      AVg Internet Security y McAfee VirusScan <<< Herramientas de desinstalación de Antivirus y AntiSpyware


      Reinicica-


      Por el momento no instales ningún antivirus y solo navega por sitios seguros ya que estarás si AV.


      Vuelve a ejecutar Combofix como anteriormente te indique y nos dejas el nuevo reporte.


      Salu2.

      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    10. #10
      Usuario Avatar de Edushyan
      Registrado
      ago 2012
      Ubicación
      Uruguay
      Mensajes
      39

      Pregunta Re: Pierdo acceso a internet tras instalar cualquier antivirus

      jajaj si tan lindo ese rootkit que me tenia loco! xD por cierto...
      Ya descargue el de McAfee pero el AVG me salen varios...cuales descargo?por lo visto el primero es el programa y los demas actualizaciones? o como es? estoy confundido D:

    Página 1 de 5 12345 ÚltimoÚltimo