Delta Search

**EdsonRuiz** · 12/02/13, 03:27:22

Hola, hice el mismo procedimiento, que el indicado aqui >> Eliminar delta search (Solucionado)

y aqui esta mi OTL.txt:

Gracias.

_________________________________________________

OTL logfile created on: 11/02/2013 12:09:56 - Run 1
OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\Edson\Desktop
Starter Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

2,00 Gb Total Physical Memory | 1,18 Gb Available Physical Memory | 58,98% Memory free
4,00 Gb Paging File | 3,08 Gb Available in Paging File | 77,00% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
Drive C: | 232,79 Gb Total Space | 203,99 Gb Free Space | 87,63% Space Free | Partition Type: NTFS
Drive D: | 7,04 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF

Computer Name: EDSON-PC | User Name: Edson | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Edson\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Archivos de programa\Profibot\IBot 4.99\IBot.exe (Profibot)
PRC - C:\Windows\System32\Macromed\Flash\FlashPlayerPlugin_11_5_502_149.exe (Adobe Systems, Inc.)
PRC - C:\Archivos de programa\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
PRC - C:\Windows\explorer.exe (Microsoft Corporation)
PRC - C:\Archivos de programa\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
PRC - C:\Archivos de programa\Common Files\Intel\Privacy Icon\UNS\UNS.exe (Intel Corporation)
PRC - C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)

========== Modules (No Company Name) ==========

MOD - C:\Windows\System32\Macromed\Flash\NPSWF32_11_5_502_149.dll ()
MOD - C:\Archivos de programa\Mozilla Firefox\mozjs.dll ()
MOD - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension\components\BrowserProtect-18.0.dll ()
MOD - C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
MOD - c:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
MOD - C:\Archivos de programa\Profibot\IBot 4.99\rt\bin\zip.dll ()
MOD - C:\Archivos de programa\WinRAR\RarExt.dll ()
MOD - C:\Archivos de programa\Profibot\IBot 4.99\rt\bin\java.dll ()
MOD - C:\Archivos de programa\Profibot\IBot 4.99\rt\bin\jetvm\jvm.dll ()
MOD - C:\Archivos de programa\Profibot\IBot 4.99\rt\jetrt\baseline760.dll ()

========== Services (SafeList) ==========

SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (MozillaMaintenance) -- C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (BrowserProtect) -- C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.exe ()
SRV - (SkypeUpdate) -- C:\Archivos de programa\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (WMPNetworkSvc) -- C:\Archivos de programa\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
SRV - (WinDefend) -- C:\Archivos de programa\Windows Defender\MpSvc.dll (Microsoft Corporation)
SRV - (UNS) -- C:\Archivos de programa\Common Files\Intel\Privacy Icon\UNS\UNS.exe (Intel Corporation)
SRV - (Microsoft Office Groove Audit Service) -- C:\Archivos de programa\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
SRV - (odserv) -- C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
SRV - (ose) -- C:\Archivos de programa\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)

========== Driver Services (SafeList) ==========

DRV - (ATSwpWDF) -- C:\Windows\System32\drivers\ATSwpWDF.sys (AuthenTec, Inc.)
DRV - (hpdskflt) -- C:\Windows\System32\drivers\hpdskflt.sys (Hewlett-Packard Company)
DRV - (Accelerometer) -- C:\Windows\System32\drivers\Accelerometer.sys (Hewlett-Packard Company)
DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV - (TsUsbGD) -- C:\Windows\System32\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV - (HBtnKey) -- C:\Windows\System32\drivers\CPQBTTN.sys (Hewlett-Packard Company)
DRV - (NETw5s32) -- C:\Windows\System32\drivers\NETw5s32.sys (Intel Corporation)
DRV - (ss_bmdm) -- C:\Windows\System32\drivers\ss_bmdm.sys (MCCI Corporation)
DRV - (ss_bbus) -- C:\Windows\System32\drivers\ss_bbus.sys (MCCI)
DRV - (ss_bmdfl) -- C:\Windows\System32\drivers\ss_bmdfl.sys (MCCI Corporation)
DRV - (rimmptsk) -- C:\Windows\System32\drivers\rimmptsk.sys (REDC)
DRV - (TPM) -- C:\Windows\System32\drivers\tpm.sys (Microsoft Corporation)
DRV - (AgereSoftModem) -- C:\Windows\System32\drivers\AGRSM.sys (LSI Corp)
DRV - (e1yexpress) -- C:\Windows\System32\drivers\e1y6032.sys (Intel Corporation)
DRV - (netw5v32) -- C:\Windows\System32\drivers\netw5v32.sys (Intel Corporation)
DRV - (HpqKbFiltr) -- C:\Windows\System32\drivers\HpqKbFiltr.sys (Hewlett-Packard Development Company, L.P.)

========== Standard Registry (All) ==========

========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = MSN.com
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,bProtector Start Page = Delta Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Delta Search
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN España: Hotmail, Messenger, Skype, Outlook y cuenta Microsoft
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 9D 47 9F F8 54 AE CD 01 [binary data]
IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
IE - HKCU\..\SearchScopes,bProtectorDefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKCU\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://www.delta-search.com/?q={searchTerms}&affID=119530&babsrc=SP_ss&mntrId=70faf81b0000000000000026c6803cf8
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - prefs.js..browser.search.order.1: "Delta Search"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.search.useDBForOrder: "false"
FF - prefs.js..browser.startup.homepage: "http://www.google.com/"
FF - prefs.js..extensions.enabledAddons: es-MX%40dictionaries.addons.mozilla.org:1.1.3
FF - prefs.js..extensions.enabledAddons: %7Beb78c871-3d9d-433f-b49b-12468119be89%7D:12.4.0
FF - prefs.js..extensions.enabledAddons: %7B58bd07eb-0ee0-4df0-8121-dc9b693373df%7D:2.6.1095.52
FF - prefs.js..extensions.enabledAddons: %7B972ce4c6-7e08-4474-a285-3208198ce6fd%7D:18.0.2

FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_5_502_149.dll ()

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/02/05 13:30:31 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\{58bd07eb-0ee0-4df0-8121-dc9b693373df}: C:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\FirefoxExtension [2013/02/09 07:18:37 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Components: C:\Program Files\Mozilla Firefox\components [2013/02/05 13:30:31 | 000,000,000 | ---D | M]
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 18.0.2\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

[2012/10/20 00:56:46 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Edson\AppData\Roaming\mozilla\Extensions
[2013/02/09 07:19:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Edson\AppData\Roaming\mozilla\Firefox\Profiles\vdgaiqqg.default\extensions
[2013/01/21 21:23:37 | 000,000,000 | ---D | M] (Diccionario de EspaÃ±ol/MÃ©xico) -- C:\Users\Edson\AppData\Roaming\mozilla\Firefox\Profiles\vdgaiqqg.default\extensions\[email protected]
[2013/02/09 07:18:26 | 000,000,000 | ---D | M] (Delta Toolbar) -- C:\Users\Edson\AppData\Roaming\mozilla\Firefox\Profiles\vdgaiqqg.default\extensions\[email protected]
[2013/01/31 00:15:37 | 000,817,973 | ---- | M] () (No name found) -- C:\Users\Edson\AppData\Roaming\mozilla\firefox\profiles\vdgaiqqg.default\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2013/01/21 10:19:26 | 000,012,655 | ---- | M] () (No name found) -- C:\Users\Edson\AppData\Roaming\mozilla\firefox\profiles\vdgaiqqg.default\extensions\{eb78c871-3d9d-433f-b49b-12468119be89}.xpi
[2013/02/09 07:18:27 | 000,001,294 | ---- | M] () -- C:\Users\Edson\AppData\Roaming\mozilla\firefox\profiles\vdgaiqqg.default\searchplugins\delta.xml
[2013/02/05 13:30:28 | 000,000,000 | ---D | M] (No name found) -- C:\Archivos de programa\Mozilla Firefox\extensions
[2013/02/05 13:30:31 | 000,000,000 | ---D | M] (Default) -- C:\Archivos de programa\Mozilla Firefox\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
[2013/02/09 07:18:37 | 000,000,000 | ---D | M] (BrowserProtect) -- C:\PROGRAMDATA\BROWSERPROTECT\2.6.1095.52\{C16C1CCB-7046-4E5C-A2F3-533AD2FEC8E8}\FIREFOXEXTENSION
[2013/02/05 13:30:31 | 000,262,552 | ---- | M] (Mozilla Foundation) -- C:\Program Files\mozilla firefox\components\browsercomps.dll
[2013/02/09 07:18:17 | 000,006,484 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\babylon.xml
[2013/01/22 08:46:54 | 000,002,465 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\bing.xml
[2013/01/22 08:46:54 | 000,002,669 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\google.xml
[2013/01/22 08:46:54 | 000,002,456 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\mercadolibre-mx.xml
[2013/01/22 08:46:54 | 000,001,178 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\wikipedia-es.xml
[2013/01/22 08:46:54 | 000,001,102 | ---- | M] () -- C:\Program Files\mozilla firefox\searchplugins\yahoo-mx.xml

O1 HOSTS File: ([2009/06/10 22:39:37 | 000,000,824 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Archivos de programa\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O2 - BHO: (delta Helper Object) - {C1AF5FA5-852C-4C90-812E-A7F75E011D87} - C:\Archivos de programa\Delta\delta\1.8.10.0\bh\delta.dll (Delta-search.com)
O3 - HKLM\..\Toolbar: (Delta Toolbar) - {82E1477C-B154-48D3-9891-33D83C26BCD3} - C:\Archivos de programa\Delta\delta\1.8.10.0\deltaTlbr.dll (Delta-search.com)
O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
O8 - Extra context menu item: E&xportar a Microsoft Excel - C:\Archivos de programa\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Archivos de programa\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Windows\System32\wshbth.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000021 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000022 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000023 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000024 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000025 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000026 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000027 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000028 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000029 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000030 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000031 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000032 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O10 - Protocol_Catalog9\Catalog_Entries\000000000033 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
O13 - gopher Prefix: missing
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.0.100.141 10.0.100.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{5DCC85AA-5E51-42C4-AF81-B6643C669E4B}: DhcpNameServer = 10.0.100.141 10.0.100.129
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7E0EDB3A-089F-4957-996D-6262F267153B}: DhcpNameServer = 10.0.100.141 10.0.100.129
O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Archivos de programa\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Archivos de programa\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - AppInit_DLLs: (c:\progra~2\browse~1\261095~1.52\{c16c1~1\browse~1.dll) - c:\ProgramData\BrowserProtect\2.6.1095.52\{c16c1ccb-7046-4e5c-a2f3-533ad2fec8e8}\BrowserProtect.dll ()
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Archivos de programa\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
O31 - SafeBoot: AlternateShell - cmd.exe
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2009/06/10 22:42:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

NetSvcs: FastUserSwitchingCompatibility - File not found
NetSvcs: Ias - C:\Windows\System32\ias.dll (Microsoft Corporation)
NetSvcs: Nla - File not found
NetSvcs: Ntmssvc - File not found
NetSvcs: NWCWorkstation - File not found
NetSvcs: Nwsapagent - File not found
NetSvcs: SRService - File not found
NetSvcs: WmdmPmSp - File not found
NetSvcs: LogonHours - File not found
NetSvcs: PCAudit - File not found
NetSvcs: helpsvc - File not found
NetSvcs: uploadmgr - File not found

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2013/02/11 11:58:39 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\Edson\Desktop\OTL.exe
[2013/02/10 16:05:50 | 000,000,000 | ---D | C] -- C:\Users\Edson\Desktop\My Shared Folder
[2013/02/09 07:18:38 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserProtect
[2013/02/09 07:18:36 | 000,000,000 | ---D | C] -- C:\ProgramData\BrowserProtect
[2013/02/09 07:18:32 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Delta
[2013/02/09 07:18:26 | 000,000,000 | ---D | C] -- C:\Program Files\Delta
[2013/02/09 07:18:08 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Babylon
[2013/02/09 07:18:08 | 000,000,000 | ---D | C] -- C:\ProgramData\Babylon
[2013/02/09 07:18:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CamStudio
[2013/02/09 07:18:01 | 000,000,000 | ---D | C] -- C:\Program Files\CamStudio 2.6b
[2013/02/09 06:53:36 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Local\DVDVideoSoft_Ltd
[2013/02/09 06:47:18 | 000,000,000 | ---D | C] -- C:\Users\Edson\Documents\DVDVideoSoft
[2013/02/09 06:46:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
[2013/02/09 06:46:38 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\DVDVideoSoft
[2013/02/09 06:46:38 | 000,000,000 | ---D | C] -- C:\Program Files\DVDVideoSoft
[2013/02/09 06:46:38 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DVDVideoSoft
[2013/02/05 13:30:28 | 000,000,000 | ---D | C] -- C:\Program Files\Mozilla Firefox
[2013/02/02 16:22:38 | 000,000,000 | ---D | C] -- C:\Users\Edson\Desktop\Emulador SNES
[2013/02/02 16:22:26 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\WinRAR
[2013/02/02 16:22:22 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/02/02 16:22:22 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
[2013/02/02 16:22:19 | 000,000,000 | ---D | C] -- C:\Program Files\WinRAR
[2013/01/29 21:05:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office
[2013/01/29 21:04:03 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Works
[2013/01/29 21:03:35 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio
[2013/01/29 21:03:34 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\DESIGNER
[2013/01/29 21:02:53 | 000,000,000 | ---D | C] -- C:\Windows\PCHEALTH
[2013/01/29 21:00:53 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Visual Studio 8
[2013/01/29 21:00:26 | 000,000,000 | ---D | C] -- C:\Windows\SHELLNEW
[2013/01/29 21:00:16 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Local\Microsoft Help
[2013/01/29 21:00:13 | 000,000,000 | ---D | C] -- C:\Program Files\Microsoft Office
[2013/01/29 21:00:13 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft Help
[2013/01/29 20:58:58 | 000,000,000 | RH-D | C] -- C:\MSOCache
[2013/01/25 22:41:06 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Skype
[2013/01/25 22:40:57 | 000,000,000 | R--D | C] -- C:\Program Files\Skype
[2013/01/25 22:40:57 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2013/01/25 22:40:57 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Skype
[2013/01/25 22:40:51 | 000,000,000 | ---D | C] -- C:\ProgramData\Skype
[2013/01/23 11:21:29 | 000,000,000 | ---D | C] -- C:\Program Files\Paint.NET
[2013/01/23 11:21:14 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Local\Paint.NET
[2013/01/22 11:17:03 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Local\Diagnostics
[2013/01/22 08:30:40 | 000,000,000 | ---D | C] -- C:\Windows\CheckSur
[2013/01/21 13:14:54 | 000,000,000 | ---D | C] -- C:\Users\Edson\.IBot
[2013/01/21 13:14:52 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Profibot
[2013/01/21 13:14:47 | 000,000,000 | ---D | C] -- C:\Program Files\Profibot
[2013/01/21 10:26:56 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Local\Ares
[2013/01/21 10:26:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ares
[2013/01/21 10:26:47 | 000,000,000 | ---D | C] -- C:\Program Files\Ares
[2013/01/21 10:20:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Adobe
[2013/01/18 20:29:20 | 000,000,000 | ---D | C] -- C:\Intel
[2013/01/18 20:26:27 | 000,048,128 | ---- | C] (REDC) -- C:\Windows\System32\drivers\rimmptsk.sys
[2013/01/18 20:22:38 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel(R) Management and Security
[2013/01/18 20:22:38 | 000,000,000 | ---D | C] -- C:\Program Files\Intel
[2013/01/18 20:22:36 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\Intel
[2013/01/18 20:22:32 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\WinBatch
[2013/01/18 20:14:16 | 000,000,000 | ---D | C] -- C:\Users\Edson\AppData\Roaming\Easeware
[2013/01/18 20:13:59 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DriverEasy
[2013/01/18 20:13:58 | 000,000,000 | ---D | C] -- C:\Program Files\Easeware
[2013/01/18 20:11:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2013/01/18 20:11:33 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner

========== Files - Modified Within 30 Days ==========

[2013/02/11 11:58:40 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\Edson\Desktop\OTL.exe
[2013/02/11 11:25:00 | 000,000,838 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/02/11 10:37:31 | 000,014,630 | ---- | M] () -- C:\Users\Edson\Desktop\28891_450962324990035_592007603_n.jpg
[2013/02/11 08:44:19 | 000,016,752 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2013/02/11 08:44:19 | 000,016,752 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2013/02/11 08:41:15 | 000,703,840 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
[2013/02/11 08:41:15 | 000,616,008 | ---- | M] () -- C:\Windows\System32\perfh009.dat
[2013/02/11 08:41:15 | 000,137,806 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
[2013/02/11 08:41:15 | 000,106,388 | ---- | M] () -- C:\Windows\System32\perfc009.dat
[2013/02/11 08:36:52 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2013/02/11 08:36:45 | 1610,612,736 | -HS- | M] () -- C:\hiberfil.sys
[2013/02/11 05:52:33 | 000,002,928 | ---- | M] () -- C:\Users\Edson\Desktop\63906336_1348547585.gif
[2013/02/08 13:14:21 | 000,027,224 | ---- | M] () -- C:\Users\Edson\Desktop\72969_449891925097075_441902436_n.jpg
[2013/01/27 23:18:37 | 000,062,229 | ---- | M] () -- C:\Users\Edson\Desktop\webcam-toy-foto1.jpg
[2013/01/27 04:20:17 | 000,066,944 | ---- | M] () -- C:\Users\Edson\Desktop\pizap.com10.79617359722033141359256662848.jpg
[2013/01/27 04:05:32 | 000,090,058 | ---- | M] () -- C:\Users\Edson\Desktop\todos juuuuuuh.jpg
[2013/01/27 04:01:42 | 000,094,234 | ---- | M] () -- C:\Users\Edson\Desktop\cara de cuchulo.jpg
[2013/01/23 09:19:12 | 000,000,000 | -H-- | M] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/01/21 21:50:25 | 000,036,932 | ---- | M] () -- C:\Users\Edson\Desktop\Ammochart.png
[2013/01/21 21:43:48 | 000,022,738 | ---- | M] () -- C:\Users\Edson\Desktop\model86.png
[2013/01/18 20:14:02 | 000,000,406 | ---- | M] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job

========== Files Created - No Company Name ==========

[2013/02/11 10:37:30 | 000,014,630 | ---- | C] () -- C:\Users\Edson\Desktop\28891_450962324990035_592007603_n.jpg
[2013/02/10 14:57:52 | 000,002,928 | ---- | C] () -- C:\Users\Edson\Desktop\63906336_1348547585.gif
[2013/02/08 13:14:20 | 000,027,224 | ---- | C] () -- C:\Users\Edson\Desktop\72969_449891925097075_441902436_n.jpg
[2013/01/27 23:18:37 | 000,062,229 | ---- | C] () -- C:\Users\Edson\Desktop\webcam-toy-foto1.jpg
[2013/01/27 04:20:17 | 000,066,944 | ---- | C] () -- C:\Users\Edson\Desktop\pizap.com10.79617359722033141359256662848.jpg
[2013/01/27 04:05:31 | 000,090,058 | ---- | C] () -- C:\Users\Edson\Desktop\todos juuuuuuh.jpg
[2013/01/27 04:01:40 | 000,094,234 | ---- | C] () -- C:\Users\Edson\Desktop\cara de cuchulo.jpg
[2013/01/23 11:22:32 | 000,001,212 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Paint.NET.lnk
[2013/01/23 09:19:12 | 000,000,000 | -H-- | C] () -- C:\Windows\System32\drivers\Msft_User_WpdFs_01_09_00.Wdf
[2013/01/21 21:50:23 | 000,036,932 | ---- | C] () -- C:\Users\Edson\Desktop\Ammochart.png
[2013/01/21 21:43:45 | 000,022,738 | ---- | C] () -- C:\Users\Edson\Desktop\model86.png
[2013/01/21 13:24:10 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_Kernel_01011_Inbox_Critical.Wdf
[2013/01/21 13:23:43 | 000,000,003 | ---- | C] () -- C:\Windows\System32\drivers\MsftWdf_User_01_11_00_Inbox_Critical.Wdf
[2013/01/21 10:21:01 | 000,000,838 | ---- | C] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
[2013/01/18 20:14:02 | 000,000,406 | ---- | C] () -- C:\Windows\tasks\DriverEasy Scheduled Scan.job

========== ZeroAccess Check ==========

[2009/07/14 05:42:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 05:41:00 | 012,873,728 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 22:29:20 | 000,606,208 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
"" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/14 02:16:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both

========== LOP Check ==========

[2013/02/09 07:18:08 | 000,000,000 | ---D | M] -- C:\Users\Edson\AppData\Roaming\Babylon
[2013/02/09 07:18:32 | 000,000,000 | ---D | M] -- C:\Users\Edson\AppData\Roaming\Delta
[2013/02/11 07:41:53 | 000,000,000 | ---D | M] -- C:\Users\Edson\AppData\Roaming\DVDVideoSoft
[2013/01/18 20:14:16 | 000,000,000 | ---D | M] -- C:\Users\Edson\AppData\Roaming\Easeware
[2013/01/18 20:22:32 | 000,000,000 | ---D | M] -- C:\Users\Edson\AppData\Roaming\WinBatch

========== Purity Check ==========

========== Custom Scans ==========

< %SYSTEMDRIVE%\*.* >
[2009/06/10 22:42:20 | 000,000,024 | ---- | M] () -- C:\autoexec.bat
[2009/06/10 22:42:20 | 000,000,010 | ---- | M] () -- C:\config.sys
[2013/02/11 08:36:45 | 1610,612,736 | -HS- | M] () -- C:\hiberfil.sys
[2013/02/11 08:36:50 | 2147,483,648 | -HS- | M] () -- C:\pagefile.sys

========== Files - Unicode (All) ==========
[2013/01/29 21:20:20 | 000,135,853 | ---- | M] ()(C:\Users\Edson\Desktop\(?R).png) -- C:\Users\Edson\Desktop\(ЯR).png
[2013/01/29 21:16:25 | 000,135,853 | ---- | C] ()(C:\Users\Edson\Desktop\(?R).png) -- C:\Users\Edson\Desktop\(ЯR).png
[2013/01/29 20:05:27 | 000,000,000 | ---D | M](C:\Users\Edson\Desktop\Regeton (?R)) -- C:\Users\Edson\Desktop\Regeton (ЯR)
[2013/01/29 19:26:38 | 000,000,000 | ---D | C](C:\Users\Edson\Desktop\Regeton (?R)) -- C:\Users\Edson\Desktop\Regeton (ЯR)

< End of report >

**Javierhf** · 14/02/13, 12:51:17

Buenas

EdsonRuiz.

al Foro.

Temas que interesa revisar y leer :

Consejos para antes de publicar un nuevo mensaje.

Políticas del Foro de InfoSpyware.

Políticas Foro Oficial de HijackThis en español.

¿Cómo subir imágenes al Foro? *TUTORIAL*
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Antes de revisar ese log, por favor, ahora sigue estos pasos, y en el orden indicado :

Descarga y ejecuta >> Ccleaner.

Usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que te muestre como obsoletos.
Después usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Descarga, actualiza y ejecuta >> Malwarebytes’ Anti-Malware.

En la pestaña Actualizar pulsas sobre el botón "Buscar Actualizaciones"
En la pestaña Escáner marcas "Realizar un Examen Completo."
Con la opción de "Eliminar lo seleccionado" lo mandas todo a la cuarentena y reinicias el sistema.
En la pestaña "Registros", encontrarás el informe del MBAM, lo copias y pegas en tu próxima respuesta, para analizarlo.

Descarga >> Adwcleaner.exe.

Desactiva temporalmente el Antivirus >> Cómo deshabilitar temporalmente su Antivirus.
Y cierra todos los programas que tengas abiertos.
Ejecuta Adwcleaner. (Si usas Windows Vista o 7 presiona clic derecho y selecciona "Ejecutar como Administrador.")
Pulsar en el Botón Supresión.
Sigue las instrucciones, si te pidiera Reiniciar el sistema Aceptas.
Guardas el reporte que te saldrá en el escritorio, para pegarlo en tu próxima respuesta.

Descarga >> AT-Destroyer (by InfoSpyware) | InfoSpyware

Cierra TODOS los programas que tengas abiertos, y >> Desactiva temporalmente el Antivirus y/o Antispyware.
Ejecuta AT-Destroyer. (Si usas Windows Vista o 7 presiona clic derecho y selecciona "Ejecutar como Administrador.")
En el menú pulsa sobre la opción "Buscar y Destruir".
AT-Destroyer desconectará el escritorio momentáneamente.
Si detecta infecciones se te indicara y pulsas en Aceptar.
Al finalizar el proceso te pedirá Reiniciar, pulsa para Aceptar.
Al Iniciar de nuevo Windows se te abrirá un reporte/informe, que deberás copiar en tu próxima respuesta, comentando cómo funciona el sistema.(También puedes encontrarlo en C:\AT-Destroyer.txt)

Y finalmente descarga >> OTL By OldTimer

*** Para Ejecutar OTL sigue estos pasos :

Cerrar todos programas que tengas abiertos y hacer doble click en el ícono de OTL para ejecutarlo.
Dejarlo correr y esperar a que aparezca el menú de OTL..
Cuando salga el menú de OTL, debes cambiar debajo de: "Tipo de Análisis" poniendo Resultado Mínimo.
Marcar la casilla Analizar Todos.
Marcar las opciones: Buscar LOP y Buscar Purity.
Marcar las Opciones: Omitir Archivos De Microsoft y Usar Listado de Compañías Reconocidas.
Copiar y Pegar las líneas del siguiente script bajo la casilla Análisis Personalizados/Código de Reparación:

NOTA: No copiar la palabra Código:
Código:
```
netsvcs
msconfig
%SYSTEMDRIVE%\*.*
CREATERESTOREPOINT
```

Por favor No cambies el resto de la configuración a menos que te lo solicitemos.

Presionar el botón .
Una vez que termine, se abrirán dos (2) archivos, OTL.Txt y Extras.Txt. Éstos archivos estarán grabados en el mismo lugar donde OTL.exe fue descargado.
Copiar y pegar el contenido del archivo OTL.txt en tu próxima respuesta.

En tu próxima respuesta recuerda:

- Ponernos los informes de Malwarebytes, Adwcleaner, AT-Destroyer y OTL.txt.

- Y nos cuentas como funciona tu equipo, en relación al problema planteado.

Saludos, Javier.

Delta Search

Herramientas

Delta Search

Re: Delta Search