• Registrarse
  • Iniciar sesión


  • Página 8 de 8 PrimeroPrimero ... 45678
    Resultados 71 al 74 de 74

    Cómo eliminar http://searchfunmoods.com sin que salga al reiniciar (Reabierto)

    OTL logfile created on: 10/02/2013 20:43:33 - Run 6 OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\SLH\Desktop 64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation Internet Explorer (Version = 9.10.9200.16384) Locale: 00000c0a | ...

    1. #71
      Baneado Avatar de selohu
      Registrado
      mar 2009
      Ubicación
      Madrid
      Mensajes
      745

      Re: Cómo eliminar http://searchfunmoods.com sin que salga al reiniciar (Reabierto)

      OTL logfile created on: 10/02/2013 20:43:33 - Run 6
      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\SLH\Desktop
      64bit- Professional (Version = 6.2.9200) - Type = NTWorkstation
      Internet Explorer (Version = 9.10.9200.16384)
      Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

      3,50 Gb Total Physical Memory | 1,78 Gb Available Physical Memory | 50,74% Memory free
      7,00 Gb Paging File | 4,83 Gb Available in Paging File | 68,99% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
      Drive C: | 465,76 Gb Total Space | 254,42 Gb Free Space | 54,62% Space Free | Partition Type: NTFS
      Drive D: | 189,92 Gb Total Space | 43,42 Gb Free Space | 22,86% Space Free | Partition Type: NTFS
      Drive K: | 7,70 Gb Total Space | 5,35 Gb Free Space | 69,53% Space Free | Partition Type: FAT32

      Computer Name: SLH | User Name: SLH | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: All users
      Company Name Whitelist: Off | Skip Microsoft Files: On | No Company Name Whitelist: Off | File Age = 30 Days

      ========== Processes (SafeList) ==========

      PRC - C:\Users\SLH\Desktop\OTL.exe (OldTimer Tools)
      PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
      PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
      PRC - C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
      PRC - C:\Program Files (x86)\Google\Update\1.3.21.135\GoogleCrashHandler.exe (Google Inc.)
      PRC - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.)
      PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
      PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
      PRC - C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
      PRC - C:\Program Files (x86)\DsNET Corp\aTube Catcher 2.0\yct.exe (DsNET)
      PRC - C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google)


      ========== Modules (No Company Name) ==========

      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\windows._cacheinvalidation.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._gdi_.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\pysqlite2._sqlite.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32com.shell.shell.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\pyexpat.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32api.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\_elementtree.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._html2.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\_socket.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32ts.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32crypt.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._misc_.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\pythoncom26.dll ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\pywintypes26.dll ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\_ctypes.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32profile.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._core_.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\_ssl.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32security.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32process.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32pdh.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._windows_.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\_hashlib.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._wizard.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32file.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32inet.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\wx._controls_.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\win32event.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\unicodedata.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Temp\_MEI45402\select.pyd ()
      MOD - C:\Users\SLH\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll ()
      MOD - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll ()
      MOD - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll ()
      MOD - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libglesv2.dll ()
      MOD - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\libegl.dll ()
      MOD - C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ffmpegsumo.dll ()


      ========== Services (SafeList) ==========

      SRV - (AntiVirSchedulerService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe (Avira Operations GmbH & Co. KG)
      SRV - (AntiVirService) -- C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe (Avira Operations GmbH & Co. KG)
      SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
      SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
      SRV - (PrintNotify) -- C:\Windows\system32\spool\DRIVERS\x64\3\PrintConfig.dll (Microsoft Corporation)
      SRV - (StorSvc) -- C:\Windows\SysWOW64\StorSvc.dll (Microsoft Corporation)


      ========== Driver Services (SafeList) ==========


      ========== Standard Registry (SafeList) ==========


      ========== Internet Explorer ==========

      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = www.google.com
      IE - HKLM\..\SearchScopes,DefaultScope =


      IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope =
      IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope =
      IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-19\..\SearchScopes,DefaultScope =

      IE - HKU\S-1-5-20\..\SearchScopes,DefaultScope =

      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.eazel.com?id=5F13D3C6A2E74898B001960734EA6F1A
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://t.es.msn.com/?ocid=iehp
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-ES
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 6D 9B 82 80 61 F6 CD 01 [binary data]
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\..\URLSearchHook: {16CC3586-3547-4025-9E2F-F04C365D8B90} - No CLSID value found
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\..\SearchScopes,DefaultScope =
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE10SR
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\..\SearchScopes\{16CC3586-3547-4025-9E2F-F04C365D8B90}: "URL" = http://search.eazel.com/results.php?cat=web&co=&lg=en&q={searchTerms}
      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-21-2279379250-4058835316-2027715141-1006\..\SearchScopes,DefaultScope =


      ========== FireFox ==========

      FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
      FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\Adobe Acrobat: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Air\nppdf32.dll (Adobe Systems Inc.)
      FF - HKCU\Software\MozillaPlugins\@talk.google.com/GoogleTalkPlugin: C:\Users\SLH\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll (Google)
      FF - HKCU\Software\MozillaPlugins\@talk.google.com/O3DPlugin: C:\Users\SLH\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll ()
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\SLH\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\SLH\AppData\Local\Google\Update\1.3.21.124\npGoogleUpdate3.dll (Google Inc.)

      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013/01/20 23:15:12 | 000,000,000 | ---D | M]


      ========== Chrome ==========

      CHR - homepage: http://www.google.com/
      CHR - default_search_provider: Google (Enabled)
      CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
      CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&hl={language}&q={searchTerms},
      CHR - homepage: http://www.google.com/
      CHR - plugin: Shockwave Flash (Enabled) = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\PepperFlash\11.5.31.139\pepflashplayer.dll
      CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
      CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\ppGoogleNaClPluginChrome.dll
      CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\24.0.1312.57\pdf.dll
      CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Browser\nppdf32.dll
      CHR - plugin: Google Talk Plugin (Enabled) = C:\Users\SLH\AppData\Roaming\Mozilla\plugins\npgoogletalk.dll
      CHR - plugin: Google Talk Plugin Video Accelerator (Enabled) = C:\Users\SLH\AppData\Roaming\Mozilla\plugins\npgtpo3dautoplugin.dll
      CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.124\npGoogleUpdate3.dll
      CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
      CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
      CHR - Extension: Live Online TV 24/7 = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\akpdghbhngcicphgfmefdjhcdflpjhdi\1.0_0\
      CHR - Extension: Grupos de Google = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfmbadcfdhiklafcdohpfphhhakmiakk\1.3_0\
      CHR - Extension: FacturaDirecta = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\bfnolnpaocpnjlfciikkkanlkhoognpb\0.12.5.16_0\
      CHR - Extension: WGT Golf Challenge = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\dcilimldmomiaihcfkmaldanopfejefg\45.0.0_0\
      CHR - Extension: Hd Television = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcejbfoaabbaepadhechhncffipeoige\3.7.6_0\
      CHR - Extension: Full Screen Weather = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\fkkaebihfmbofclegkcfkkemepfehibg\1.3_0\
      CHR - Extension: AdBlock = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\gighmmpiobklfepjocnamgkkbiglidom\2.5.58_0\
      CHR - Extension: Google Play Music = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\icppfcnhkcmnfdhfhphakoifcfokfdhg\4.0_0\
      CHR - Extension: The Weather Channel for Chrome = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\iflpcokdamgefbghpdipcibmhlkdopop\1.0.0.4_0\
      CHR - Extension: Beer Pong 2 = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\ikefecbhochkfigimjmnagilaojpgnfl\2.0.0_0\
      CHR - Extension: HootSuite = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\kneloppijbcidgidihgdjnooihjcdbij\5.244_0\
      CHR - Extension: Mesa de ping pong en 3D = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\lggegdhfphffaeipfpocijebeakpmcih\2.1.0_0\
      CHR - Extension: Sprocket Rocket = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\lpdichmkdadfihhbgllepglgbkonlehe\1.0_0\
      CHR - Extension: WGT Golf Game = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\mpedbpkelbhcbkdaglillalioeeekbpb\32.1.0_0\
      CHR - Extension: Forex all in 1 = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\npchhbldbmcolnkknikmdbdgcceijfil\0.0.1_0\
      CHR - Extension: Alcantarillado de carreras en 3D = C:\Users\SLH\AppData\Local\Google\Chrome\User Data\Default\Extensions\pmhndjicclacpeciiaeoelefdakfoblk\3.0_0\

      O1 HOSTS File: ([2013/02/09 17:11:12 | 000,000,196 | ---- | M]) - C:\Windows\SysNative\Drivers\etc\Hosts
      O1 - Hosts: 127.0.0.1 localhost
      O1 - Hosts: ::1 localhost
      O1 - Hosts: ㈱⸷⸰⸰‱†††††††††捡楴慶整愮潤敢挮浯਍㈱⸷⸰⸰‱†††††††††牰捡楴慶整愮潤敢挮浯਍
      O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
      O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files (x86)\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [avgnt] C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe (Avira Operations GmbH & Co. KG)
      O4 - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001..\Run: [GoogleDriveSync] C:\Program Files (x86)\Google\Drive\googledrivesync.exe (Google)
      O4 - HKU\S-1-5-21-2279379250-4058835316-2027715141-1001..\Run: [googletalk] C:\Program Files (x86)\Google\Google Talk\googletalk.exe (Google)
      O4 - Startup: C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk = C:\Users\SLH\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
      O13 - gopher Prefix: missing
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 80.58.61.250 80.58.61.254
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{386696C8-2C6F-41FB-B5BC-FC89E03AFF34}: DhcpNameServer = 80.58.61.250 80.58.61.254
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{93FF643B-5A6B-48B1-A2D8-406008630683}: DhcpNameServer = 80.58.61.250 80.58.61.254
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{F297000C-544A-4150-B728-C7C510D94BB9}: DhcpNameServer = 80.58.61.250 80.58.61.254
      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: UserInit - (C:\Windows\SysWOW64\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
      O30 - LSA: Security Packages - (livessp) - File not found
      O32 - HKLM CDRom: AutoRun - 1
      O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - D:\autoexec.bat -- [ NTFS ]
      O34 - HKLM BootExecute: (autocheck autochk *)
      O35 - HKLM\..comfile [open] -- "%1" %*
      O35 - HKLM\..exefile [open] -- "%1" %*
      O37 - HKLM\...com [@ = comfile] -- "%1" %*
      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
      O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

      ========== Files/Folders - Created Within 30 Days ==========

      [2013/02/10 15:44:33 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\SLH\Desktop\OTL.exe
      [2013/02/10 01:36:15 | 000,000,000 | ---D | C] -- C:\Users\SLH\Documents\Adobe
      [2013/02/09 16:30:01 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\Activador Master collection CS6
      [2013/02/09 11:50:26 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\07_02_2013_Full_vPlug_2.4.6_with_all_keys
      [2013/02/09 02:51:12 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Avira
      [2013/02/09 02:44:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
      [2013/02/09 02:43:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Avira
      [2013/02/09 02:43:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Avira
      [2013/02/08 20:03:38 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\html5
      [2013/02/08 01:58:51 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\Nueva carpeta (3)
      [2013/02/07 11:01:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ESET
      [2013/02/07 10:55:45 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\QuickScan
      [2013/02/06 20:01:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\TuneUp Utilities 2013
      [2013/02/06 20:01:04 | 000,000,000 | ---D | C] -- C:\ProgramData\TuneUp Software
      [2013/02/06 20:00:24 | 000,000,000 | -HSD | C] -- C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}
      [2013/02/06 18:19:16 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\Nueva carpeta
      [2013/02/06 11:31:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
      [2013/02/06 11:30:57 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DsNET Corp
      [2013/02/06 11:26:10 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
      [2013/02/06 11:26:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
      [2013/02/06 11:23:28 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\XPSViewer
      [2013/02/06 02:25:05 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\Mi Web
      [2013/02/05 23:53:42 | 000,000,000 | --SD | C] -- C:\Users\SLH\Google Drive
      [2013/02/05 23:51:36 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
      [2013/02/05 13:49:36 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Mozilla
      [2013/02/05 13:49:24 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Google Talk
      [2013/02/05 11:11:21 | 000,000,000 | ---D | C] -- C:\_OTL
      [2013/02/03 14:01:32 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
      [2013/02/03 13:58:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Google
      [2013/02/02 20:44:11 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Panda Security
      [2013/02/02 20:30:05 | 000,000,000 | ---D | C] -- C:\ProgramData\Panda Security
      [2013/02/02 20:30:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Panda Security
      [2013/02/02 19:49:21 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
      [2013/02/02 15:39:38 | 000,000,000 | ---D | C] -- C:\Users\SLH\Documents\ProcAlyzer Dumps
      [2013/02/02 14:26:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Spybot - Search & Destroy
      [2013/02/02 14:26:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Spybot - Search & Destroy 2
      [2013/02/02 03:41:00 | 000,000,000 | ---D | C] -- C:\Windows\pss
      [2013/02/01 14:12:59 | 000,000,000 | ---D | C] -- C:\Windows\Minidump
      [2013/02/01 04:27:39 | 000,000,000 | ---D | C] -- C:\ProgramData\AVAST Software
      [2013/02/01 01:43:48 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\VS Revo Group
      [2013/01/31 18:41:14 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Avg2013
      [2013/01/31 02:56:37 | 000,000,000 | R--D | C] -- C:\Users\SLH\Dropbox
      [2013/01/31 02:53:50 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
      [2013/01/31 02:50:15 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Dropbox
      [2013/01/29 13:58:22 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\TuneUp Software
      [2013/01/29 13:17:46 | 000,000,000 | -H-D | C] -- C:\ProgramData\Common Files
      [2013/01/29 13:17:45 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\MFAData
      [2013/01/29 13:17:45 | 000,000,000 | ---D | C] -- C:\ProgramData\MFAData
      [2013/01/29 00:41:57 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\CoreAVC.Professional.Edition.v3.0.Final.Retail.Incl.Serial
      [2013/01/28 18:13:52 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Diagnostics
      [2013/01/28 17:32:44 | 000,000,000 | -H-D | C] -- C:\VTRoot
      [2013/01/28 02:47:40 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Malwarebytes
      [2013/01/28 02:36:13 | 000,000,000 | ---D | C] -- C:\TDSSKiller_Quarantine
      [2013/01/27 03:39:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DCoder Image Source
      [2013/01/27 03:39:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\7-Zip
      [2013/01/27 03:39:25 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\7-Zip
      [2013/01/27 03:39:18 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\FFMPEG Core Files
      [2013/01/27 03:39:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\CD Audio Reader Filter
      [2013/01/27 03:38:59 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenSource AVI Splitter
      [2013/01/27 03:38:56 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Gabest MPEG Splitter
      [2013/01/27 03:38:52 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenSource DTSAC3DD+ Source Filter
      [2013/01/27 03:38:46 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DScaler5
      [2013/01/27 03:38:46 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DScaler5
      [2013/01/27 03:38:34 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AC3Filter
      [2013/01/27 03:38:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AC3Filter
      [2013/01/27 03:38:20 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\OpenSource Flash Video Splitter
      [2013/01/27 03:38:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MadVR
      [2013/01/27 03:37:25 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
      [2013/01/27 03:37:19 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\LAV Filters
      [2013/01/27 03:36:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bass Audio Decoder
      [2013/01/27 03:36:23 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ffdshow
      [2013/01/27 03:32:16 | 000,000,000 | ---D | C] -- C:\ProgramData\Zoom Player
      [2013/01/26 04:29:34 | 000,000,000 | ---D | C] -- C:\ProgramData\COMODO
      [2013/01/26 04:28:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Comodo
      [2013/01/26 04:28:05 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Comodo
      [2013/01/26 04:27:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Comodo Downloader
      [2013/01/23 14:47:58 | 001,106,432 | ---- | C] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\libeay32.dll
      [2013/01/23 10:59:34 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Sublime Text 2
      [2013/01/22 15:28:32 | 000,000,000 | ---D | C] -- C:\Users\SLH\.ssh
      [2013/01/22 15:05:52 | 000,000,000 | ---D | C] -- C:\Users\SLH\Documents\GitHub
      [2013/01/22 15:05:51 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\GitHub
      [2013/01/22 15:05:42 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\GitHub
      [2013/01/22 15:05:36 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GitHub, Inc
      [2013/01/22 15:01:52 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Deployment
      [2013/01/22 15:01:52 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Apps
      [2013/01/22 02:53:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
      [2013/01/22 02:38:24 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
      [2013/01/22 02:30:17 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Media Player Classic
      [2013/01/22 02:26:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\K-Lite Codec Pack
      [2013/01/22 02:26:31 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\K-Lite Codec Pack
      [2013/01/21 21:38:50 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\Mejorando Curso
      [2013/01/21 21:16:30 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Talk
      [2013/01/21 17:15:27 | 000,000,000 | ---D | C] -- C:\ProgramData\Hewlett-Packard
      [2013/01/21 01:08:34 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AGEIA Technologies
      [2013/01/21 01:01:55 | 020,450,232 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvoglv32.dll
      [2013/01/21 01:01:55 | 017,560,504 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcompiler.dll
      [2013/01/21 01:01:55 | 012,641,120 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvwgf2um.dll
      [2013/01/21 01:01:55 | 006,263,784 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvopencl.dll
      [2013/01/21 01:01:55 | 002,720,696 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvid.dll
      [2013/01/21 01:01:55 | 001,985,976 | ---- | C] (NVIDIA Corporation) -- C:\Windows\SysWow64\nvcuvenc.dll
      [2013/01/20 23:26:33 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
      [2013/01/20 23:19:34 | 000,000,000 | ---D | C] -- C:\ProgramData\ALM
      [2013/01/20 23:15:18 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
      [2013/01/20 22:53:33 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe AIR
      [2013/01/20 22:48:53 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Adobe
      [2013/01/20 22:46:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Master Collection CS6
      [2013/01/20 22:35:32 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Adobe
      [2013/01/20 22:26:35 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
      [2013/01/20 22:25:40 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Adobe
      [2013/01/20 18:09:58 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\webpins
      [2013/01/20 03:32:56 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\NVIDIA
      [2013/01/20 03:32:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Haali Media Splitter
      [2013/01/20 03:31:29 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\WinRAR
      [2013/01/20 03:31:29 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
      [2013/01/20 03:31:28 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
      [2013/01/20 02:39:52 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\directx
      [2013/01/19 23:35:15 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Macromedia
      [2013/01/19 23:31:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\DVBViewer Shared
      [2013/01/19 23:25:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVBViewer
      [2013/01/19 23:25:35 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\DVBViewer
      [2013/01/19 23:25:35 | 000,000,000 | ---D | C] -- C:\ProgramData\CMUV
      [2013/01/19 23:25:06 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Programs
      [2013/01/19 18:10:43 | 000,000,000 | ---D | C] -- C:\Users\SLH\Desktop\sergio
      [2013/01/19 18:02:26 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Google
      [2013/01/19 17:14:10 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\ElevatedDiagnostics
      [2013/01/19 16:50:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
      [2013/01/19 16:44:23 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
      [2013/01/19 16:44:14 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
      [2013/01/19 16:41:14 | 000,052,584 | ---- | C] (Khronos Group) -- C:\Windows\SysWow64\OpenCL.dll
      [2013/01/19 16:39:36 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
      [2013/01/19 16:35:48 | 000,000,000 | ---D | C] -- C:\Windows\Driver Cache
      [2013/01/19 16:35:09 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\AVerMedia
      [2013/01/19 16:23:30 | 000,000,000 | RHSD | C] -- C:\Windows Activation Technologies
      [2013/01/19 16:21:29 | 000,000,000 | ---D | C] -- C:\Windows\KJ
      [2013/01/19 16:12:54 | 000,000,000 | R--D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup
      [2013/01/19 16:12:54 | 000,000,000 | R--D | C] -- C:\Users\SLH\Searches
      [2013/01/19 16:12:54 | 000,000,000 | R--D | C] -- C:\Users\SLH\Contacts
      [2013/01/19 16:12:54 | 000,000,000 | R--D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Administrative Tools
      [2013/01/19 16:12:42 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Adobe
      [2013/01/19 16:11:25 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\VirtualStore
      [2013/01/19 16:11:09 | 000,000,000 | ---D | C] -- C:\ProgramData\PRICache
      [2013/01/19 16:11:09 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Packages
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\SendTo
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Reciente
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Plantillas
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Documents\Mis vídeos
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Documents\Mis imágenes
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Mis documentos
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Documents\Mi música
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Menú Inicio
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Impresoras
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\AppData\Local\Historial
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Entorno de red
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Datos de programa
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\AppData\Local\Datos de programa
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Cookies
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\Configuración local
      [2013/01/19 16:10:54 | 000,000,000 | -HSD | C] -- C:\Users\SLH\AppData\Local\Archivos temporales de Internet
      [2013/01/19 16:10:53 | 000,000,000 | --SD | C] -- C:\Users\SLH\AppData\Roaming\Microsoft
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Videos
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Saved Games
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Pictures
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Music
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Links
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Favorites
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Downloads
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Documents
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\Desktop
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
      [2013/01/19 16:10:53 | 000,000,000 | R--D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
      [2013/01/19 16:10:53 | 000,000,000 | -H-D | C] -- C:\Users\SLH\AppData
      [2013/01/19 16:10:53 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Temp
      [2013/01/19 16:10:53 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Local\Microsoft
      [2013/01/19 16:10:53 | 000,000,000 | ---D | C] -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
      [2013/01/19 16:10:46 | 000,000,000 | ---D | C] -- C:\Windows\SoftwareDistribution
      [2013/01/19 16:10:18 | 000,000,000 | ---D | C] -- C:\Windows\CSC
      [2013/01/19 16:05:34 | 000,000,000 | -HSD | C] -- C:\Recovery
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Plantillas
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mis vídeos
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mis imágenes
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\Users\Public\Documents\Mi música
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Menú Inicio
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Escritorio
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Documentos
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\ProgramData\Datos de programa
      [2013/01/19 16:05:32 | 000,000,000 | -HSD | C] -- C:\Archivos de programa
      [2013/01/19 15:57:18 | 000,000,000 | ---D | C] -- C:\Windows\Prefetch
      [2013/01/19 15:55:42 | 000,000,000 | -HSD | C] -- C:\System Volume Information
      [2013/01/19 15:54:49 | 000,000,000 | ---D | C] -- C:\Windows\Panther
      [2013/01/19 15:54:29 | 000,000,000 | -HSD | C] -- C:\Boot
      [2013/01/19 15:30:30 | 000,000,000 | ---D | C] -- C:\Windows.old

      ========== Files - Modified Within 30 Days ==========

      [2013/02/10 20:43:00 | 000,001,102 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2013/02/10 17:43:00 | 000,001,098 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2013/02/10 15:44:44 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\SLH\Desktop\OTL.exe
      [2013/02/10 12:23:57 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2013/02/10 05:28:58 | 002,097,152 | -HS- | M] () -- C:\Users\SLH\NTUSER.DAT
      [2013/02/10 05:28:55 | 000,074,077 | -H-- | M] () -- C:\Users\SLH\AppData\Local\IconCache.db
      [2013/02/10 02:51:48 | 000,000,132 | ---- | M] () -- C:\Users\SLH\AppData\Roaming\Prefs. de formato PNG de Adobe CS6
      [2013/02/10 02:14:21 | 000,001,456 | ---- | M] () -- C:\Users\SLH\AppData\Local\Adobe Guardar para Web 13.0 Prefs
      [2013/02/10 00:31:22 | 035,922,273 | ---- | M] () -- C:\Users\SLH\Desktop\Tomorrowland 2012 Avicii Movie_ Part 1 YouTube.mp3
      [2013/02/09 22:03:26 | 000,000,006 | -H-- | M] () -- C:\Windows\tasks\SA.DAT
      [2013/02/09 22:03:09 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
      [2013/02/09 22:03:06 | 3005,784,064 | -HS- | M] () -- C:\hiberfil.sys
      [2013/02/09 16:00:31 | 002,524,336 | ---- | M] () -- C:\Users\SLH\Desktop\AdobeDownloadAssistant.exe
      [2013/02/09 02:44:08 | 000,002,070 | ---- | M] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
      [2013/02/09 02:40:27 | 104,294,288 | ---- | M] () -- C:\Users\SLH\Desktop\avira_free_antivirus_es.exe
      [2013/02/05 23:53:45 | 000,001,710 | ---- | M] () -- C:\Users\SLH\Desktop\Google Drive.lnk
      [2013/02/05 11:06:24 | 000,000,000 | ---- | M] () -- C:\ProgramData\0x0304A000.sfl
      [2013/02/03 00:41:40 | 000,556,823 | ---- | M] () -- C:\Users\SLH\Desktop\bookmarks_03_02_13.html
      [2013/02/02 19:49:21 | 000,001,268 | ---- | M] () -- C:\Users\SLH\Desktop\Revo Uninstaller.lnk
      [2013/02/01 19:10:34 | 004,937,235 | ---- | M] () -- C:\Users\SLH\Desktop\537156_327829363990295_721449413_n.psd
      [2013/02/01 04:38:30 | 000,000,000 | ---- | M] () -- C:\Windows\SysWow64\config.nt
      [2013/01/31 02:54:46 | 000,001,042 | ---- | M] () -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
      [2013/01/27 04:01:50 | 000,001,042 | ---- | M] () -- C:\Users\SLH\AppData\Roaming\coreavc.ini
      [2013/01/23 14:48:02 | 001,106,432 | ---- | M] (The OpenSSL Project, http://www.openssl.org/) -- C:\Windows\SysWow64\libeay32.dll
      [2013/01/23 14:06:33 | 000,372,736 | ---- | M] () -- C:\Users\SLH\Desktop\Maqueta escudos.indd
      [2013/01/22 15:28:31 | 000,000,000 | ---- | M] () -- C:\Users\SLH\.gitconfig
      [2013/01/20 14:31:02 | 000,007,605 | ---- | M] () -- C:\Users\SLH\AppData\Local\Resmon.ResmonCfg
      [2013/01/19 16:24:15 | 000,524,288 | -HS- | M] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TMContainer00000000000000000002.regtrans-ms
      [2013/01/19 16:24:15 | 000,524,288 | -HS- | M] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TMContainer00000000000000000001.regtrans-ms
      [2013/01/19 16:24:15 | 000,065,536 | -HS- | M] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TM.blf
      [2013/01/19 16:10:54 | 000,000,020 | -HS- | M] () -- C:\Users\SLH\ntuser.ini
      [2013/01/19 16:03:17 | 000,052,618 | ---- | M] () -- C:\Windows\SysWow64\license.rtf
      [2013/01/19 15:54:36 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK

      ========== Files Created - No Company Name ==========

      [2013/02/10 15:27:56 | 000,000,319 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papelera de reciclaje (2).lnk
      [2013/02/10 02:14:21 | 000,001,456 | ---- | C] () -- C:\Users\SLH\AppData\Local\Adobe Guardar para Web 13.0 Prefs
      [2013/02/10 01:42:05 | 000,000,132 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\Prefs. de formato PNG de Adobe CS6
      [2013/02/10 00:30:09 | 035,922,273 | ---- | C] () -- C:\Users\SLH\Desktop\Tomorrowland 2012 Avicii Movie_ Part 1 YouTube.mp3
      [2013/02/09 15:59:54 | 002,524,336 | ---- | C] () -- C:\Users\SLH\Desktop\AdobeDownloadAssistant.exe
      [2013/02/09 04:42:03 | 000,074,077 | -H-- | C] () -- C:\Users\SLH\AppData\Local\IconCache.db
      [2013/02/09 02:44:08 | 000,002,070 | ---- | C] () -- C:\Users\Public\Desktop\Avira Control Center.lnk
      [2013/02/09 02:34:17 | 104,294,288 | ---- | C] () -- C:\Users\SLH\Desktop\avira_free_antivirus_es.exe
      [2013/02/06 11:23:14 | 000,043,318 | ---- | C] () -- C:\Windows\Fonts\GlobalUserInterface.CompositeFont
      [2013/02/06 11:23:14 | 000,029,779 | ---- | C] () -- C:\Windows\Fonts\GlobalSerif.CompositeFont
      [2013/02/06 11:23:14 | 000,026,489 | ---- | C] () -- C:\Windows\Fonts\GlobalSansSerif.CompositeFont
      [2013/02/06 11:23:14 | 000,026,040 | ---- | C] () -- C:\Windows\Fonts\GlobalMonospace.CompositeFont
      [2013/02/05 23:53:45 | 000,001,710 | ---- | C] () -- C:\Users\SLH\Desktop\Google Drive.lnk
      [2013/02/05 11:06:24 | 000,000,000 | ---- | C] () -- C:\ProgramData\0x0304A000.sfl
      [2013/02/04 12:23:14 | 000,000,319 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Papelera de reciclaje.lnk
      [2013/02/03 13:59:00 | 000,001,102 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2013/02/03 13:58:58 | 000,001,098 | ---- | C] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2013/02/03 00:41:40 | 000,556,823 | ---- | C] () -- C:\Users\SLH\Desktop\bookmarks_03_02_13.html
      [2013/02/02 19:49:21 | 000,001,268 | ---- | C] () -- C:\Users\SLH\Desktop\Revo Uninstaller.lnk
      [2013/02/01 19:10:33 | 004,937,235 | ---- | C] () -- C:\Users\SLH\Desktop\537156_327829363990295_721449413_n.psd
      [2013/02/01 04:28:46 | 000,000,000 | ---- | C] () -- C:\Windows\SysWow64\config.nt
      [2013/01/31 03:07:56 | 005,548,694 | ---- | C] () -- C:\Users\SLH\Desktop\msterpin.jpg
      [2013/01/31 02:54:46 | 000,001,042 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk
      [2013/01/27 03:36:19 | 000,079,872 | ---- | C] () -- C:\Windows\SysWow64\ff_vfw.dll
      [2013/01/23 14:06:31 | 000,372,736 | ---- | C] () -- C:\Users\SLH\Desktop\Maqueta escudos.indd
      [2013/01/23 10:58:46 | 000,000,822 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sublime Text 2.lnk
      [2013/01/22 15:28:31 | 000,000,000 | ---- | C] () -- C:\Users\SLH\.gitconfig
      [2013/01/20 23:15:18 | 000,002,465 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
      [2013/01/20 23:15:18 | 000,002,453 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
      [2013/01/20 22:53:45 | 000,000,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
      [2013/01/20 14:31:02 | 000,007,605 | ---- | C] () -- C:\Users\SLH\AppData\Local\Resmon.ResmonCfg
      [2013/01/20 04:10:47 | 000,178,688 | ---- | C] () -- C:\Windows\SysWow64\unrar.dll
      [2013/01/20 03:33:16 | 000,001,042 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\coreavc.ini
      [2013/01/19 18:24:54 | 412,657,932 | ---- | C] () -- C:\Users\SLH\Desktop\11-13_21-30-10_ Papá TELENOTICIAS.ts
      [2013/01/19 16:22:43 | 000,405,881 | ---- | C] () -- C:\Windows\KJ.exe
      [2013/01/19 16:22:43 | 000,001,429 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\KJ_Starter.lnk
      [2013/01/19 16:12:42 | 000,001,418 | ---- | C] () -- C:\Users\SLH\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
      [2013/01/19 16:10:54 | 000,524,288 | -HS- | C] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TMContainer00000000000000000002.regtrans-ms
      [2013/01/19 16:10:54 | 000,524,288 | -HS- | C] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TMContainer00000000000000000001.regtrans-ms
      [2013/01/19 16:10:54 | 000,065,536 | -HS- | C] () -- C:\Users\SLH\NTUSER.DAT{97e1de87-d6fa-11e1-be62-94c0340a1222}.TM.blf
      [2013/01/19 16:10:54 | 000,000,020 | -HS- | C] () -- C:\Users\SLH\ntuser.ini
      [2013/01/19 16:10:53 | 002,097,152 | -HS- | C] () -- C:\Users\SLH\NTUSER.DAT
      [2013/01/19 16:04:23 | 3005,784,064 | -HS- | C] () -- C:\hiberfil.sys
      [2013/01/19 15:55:50 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
      [2013/01/19 15:54:36 | 000,008,192 | RHS- | C] () -- C:\BOOTSECT.BAK
      [2012/07/26 09:13:10 | 000,215,943 | ---- | C] () -- C:\Windows\SysWow64\dssec.dat
      [2012/07/26 09:13:09 | 000,000,741 | ---- | C] () -- C:\Windows\SysWow64\NOISE.DAT
      [2012/07/26 08:21:26 | 000,067,584 | --S- | C] () -- C:\Windows\bootstat.dat
      [2012/07/26 06:26:52 | 000,000,219 | ---- | C] () -- C:\Windows\system.ini
      [2012/07/26 06:26:52 | 000,000,092 | ---- | C] () -- C:\Windows\win.ini
      [2012/07/26 02:17:42 | 000,043,520 | ---- | C] () -- C:\Windows\SysWow64\BWContextHandler.dll
      [2012/07/26 01:48:53 | 000,083,968 | ---- | C] () -- C:\Windows\SysWow64\OEMLicense.dll
      [2012/07/25 21:37:29 | 000,043,131 | ---- | C] () -- C:\Windows\mib.bin
      [2012/07/25 21:28:31 | 000,364,544 | ---- | C] () -- C:\Windows\SysWow64\msjetoledb40.dll
      [2012/06/02 15:31:19 | 000,673,088 | ---- | C] () -- C:\Windows\SysWow64\mlang.dat

      ========== ZeroAccess Check ==========


      [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

      [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
      "" = C:\Windows\SysNative\shell32.dll -- [2012/07/26 04:07:16 | 019,779,584 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
      "" = %SystemRoot%\system32\shell32.dll -- [2012/07/26 04:19:59 | 017,559,552 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2012/07/26 04:05:38 | 001,004,544 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
      "" = %systemroot%\system32\wbem\fastprox.dll -- [2012/07/26 04:18:27 | 000,784,896 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2012/07/26 04:07:41 | 000,455,680 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Both

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

      < End of report >

    2. #72
      Baneado Avatar de selohu
      Registrado
      mar 2009
      Ubicación
      Madrid
      Mensajes
      745

      Re: Cómo eliminar http://searchfunmoods.com sin que salga al reiniciar (Reabierto)

      mensaje no valido

    3. #73
      Baneado Avatar de selohu
      Registrado
      mar 2009
      Ubicación
      Madrid
      Mensajes
      745

      Re: Cómo eliminar http://searchfunmoods.com sin que salga al reiniciar (Reabierto)

      hace falta alguna cosa más?.

    4. #74
      Baneado Avatar de selohu
      Registrado
      mar 2009
      Ubicación
      Madrid
      Mensajes
      745

      Re: Cómo eliminar http://searchfunmoods.com sin que salga al reiniciar (Reabierto)

      Politica sospechosa Política: HKCU\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\EXPLORER\ADVANCED[SHOWSUPERHIDDEN] Reemplazar por: 1
      panda cloud encontro esto, pero no ne deja hacer nada.

    Página 8 de 8 PrimeroPrimero ... 45678