• Registrarse
  • Iniciar sesión


  • Resultados 1 al 2 de 2

    se me abren spams en chrome

    hola, hoy a la mañana prendi la pc y todo andaba lo mas normal, pero no se por que motivo se me empezaron a abrir spams en chrome por mas que tenga el navegador cerrado ...

    1. #1
      Usuario Avatar de sevenapen
      Registrado
      abr 2013
      Ubicación
      argentina
      Mensajes
      2

      Pregunta se me abren spams en chrome

      hola, hoy a la mañana prendi la pc y todo andaba lo mas normal, pero no se por que motivo se me empezaron a abrir spams en chrome por mas que tenga el navegador cerrado y ni este usando la computadoral. segui este post y aca estan mis logs. el MalwareBytes me mostro como archivos infectados la extension de chrome funmoods que la verdad que no tengo idea como se llego a instalar ya que evito esas cosas. gracias

      AT-Destroyer
      ######################## AT-Destroyer [2.1] By Infospyware.
      Hora/Día/Mes/Año: 12:14:18 \\\ 15/04/2013
      AT-Destroyer 2.1 By Infospyware ---> www.infospyware.com
      Última actualización: 30/11/2012
      Opción escogida: 2 :Buscar y Destruir
      Versión Internet Explorer:9.0.8112.16421
      Mozilla Firefox:14.0.1.4577
      Privilegios: Seba - Administrador
      Modo Actual: Modo Normal.
      Nombre del pc: SEBA-PC
      Información del sistema operativo:X64-WIN_7-
      nombre del usuario:Seba
      Lenguaje del sistema: Español



      >>>>>>> Servicios <<<<<<<

      npggsvc [nProtect GameGuard Service]---> "C:\Windows\system32\GameMon.des -service"


      >>>>>> Carpetas <<<<<<



      >>>>>> Archivos <<<<<<

      C:\user.js
      C:\Windows\system32\GameMon.des


      >>>>>> Registro <<<<<<

      HKEY_CLASSES_ROOT\AppID\escort.DLL
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}


      >>>>>> Heurística <<<<<<

      C:\Users\Seba\AppData\Roaming\Desinstalar Minecraft.exe ((Heur malware.win32.generic))
      C:\Users\Seba\AppData\Roaming\Minecraft.exe ((Heur malware.win32.generic))
      C:\Users\Seba\AppData\Roaming\Minecraftb.exe ((Heur malware.win32.generic))
      C:\Users\Seba\mp3buf.tmp (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\AutoCrop.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\aviwriter.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\avsutil.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\Choice.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\DivX264.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\ffmpeg.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\js32.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\libgpac.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\MediaInfo.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\MediaInfo.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\MP4Box.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\neroAacEnc.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\neroAacTag.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\nircmd.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\nircmdc.exe (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\pthreadGC2.dll (Heur malware.win32.generic)
      C:\Users\Seba\AppData\Local\x264.exe (Heur malware.win32.generic)


      >>>>>> Internet Explorer <<<<<<

      Start Page==www.google.com
      Local Page==C:\Windows\SysWOW64\blank.htm
      Search Page==http://find.localstrike.net/
      Default_search_url==http://find.localstrike.net/
      Default_Page_URL==http://find.localstrike.net/


      ''HKCU\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://find.localstrike.net/
      Default_search_url==
      Default_Page_URL==


      HKEY_USERS\S-1-5-21-1064721216-3732114108-2438110629-1000\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://find.localstrike.net/
      Default_search_url==
      Default_Page_URL==


      >>>>>> Firefox <<<<<<

      user_pref("browser.startup.homepage", "http://www.google.com.ar/");
      user_pref("browser.startup.homepage_override.buildID", "20120713134347");
      user_pref("browser.startup.homepage_override.mstone", "14.0.1");
      user_pref("pref.browser.homepage.disable_button.restore_default", false);


      >>>>>> Extensiones Firefox <<<<<<


      C:\Program Files (x86)\[email protected]_bak
      C:\Program Files (x86)\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
      C:\Program Files (x86)\{972ce4c6-7e08-4474-a285-3208198ce6fd}

      >>>>>> Plugins Firefox <<<<<<

      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Apple.com/iTunes,version=1.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn.me/esnsonar,version=0.70.4
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@esn/esnlaunch,version=2.1.2
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/DTPlugin,version=10.17.2
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0

      >>>>>> Google Chrome <<<<<<

      "homepage": "http://www.google.com/",
      "homepage_changed": true,
      "homepage_is_newtabpage": false,


      >>>>>> Extensiones Google Chrome <<<<<<

      C:\Users\Seba\AppData\Local\Google\Chrome\User Data\Default\Extensions\3
      C:\Users\Seba\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek
      C:\Users\Seba\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb
      C:\Users\Seba\AppData\Local\Google\Chrome\User Data\Default\Extensions\pdimbeogmjhgdkmgdopolpiemeonmkna

      ======== Listado ===========

      [21/02/2013 11:39 a.m.] [21/02/2013 01:25 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Adobe
      C:\Users\Seba\AppData\Roaming\Adobe PNG Format CS5 Prefs [AI] 132 bytes ( )
      [04/01/2013 03:43 a.m.] [24/04/2012 01:18 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Adobe-BackupByPhotoshopCS5Portable
      [22/11/2012 04:55 p.m.] [02/08/2012 10:47 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Apple Computer
      [09/09/2012 11:31 p.m.] [09/09/2012 11:31 p.m.] [DI] C:\Users\Seba\AppData\Roaming\AVG2013
      [12/05/2012 06:34 p.m.] [12/05/2012 06:22 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Blockscape
      [22/11/2012 05:02 p.m.] [22/11/2012 05:02 p.m.] [DI] C:\Users\Seba\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
      [16/12/2012 04:35 a.m.] [09/05/2012 09:55 p.m.] [DI] C:\Users\Seba\AppData\Roaming\DAEMON Tools Lite
      [23/04/2012 11:21 p.m.] [23/04/2012 11:21 p.m.] [DI] C:\Users\Seba\AppData\Roaming\DAEMON Tools Pro
      [15/03/2013 02:23 p.m.] [15/03/2013 02:23 p.m.] [DI] C:\Users\Seba\AppData\Roaming\DVDVideoSoft
      [25/04/2012 10:45 p.m.] [25/04/2012 10:45 p.m.] [DI] C:\Users\Seba\AppData\Roaming\ESET
      [29/04/2012 03:06 a.m.] [29/04/2012 03:06 a.m.] [DI] C:\Users\Seba\AppData\Roaming\fofix
      [29/04/2012 11:57 p.m.] [29/04/2012 11:55 p.m.] [DI] C:\Users\Seba\AppData\Roaming\fretsonfire
      [14/05/2012 09:30 p.m.] [14/05/2012 08:57 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Garmin
      [01/09/2012 10:50 p.m.] [01/09/2012 10:50 p.m.] [DI] C:\Users\Seba\AppData\Roaming\gd.sos.McPixel
      [29/04/2012 08:40 p.m.] [29/04/2012 08:40 p.m.] [DI] C:\Users\Seba\AppData\Roaming\GrabPro
      [26/12/2012 10:20 p.m.] [26/12/2012 10:20 p.m.] [DI] C:\Users\Seba\AppData\Roaming\HP
      [04/04/2013 01:17 p.m.] [26/12/2012 10:11 p.m.] [DI] C:\Users\Seba\AppData\Roaming\HpUpdate
      [23/04/2012 09:06 p.m.] [23/04/2012 09:06 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Identities
      [02/12/2012 11:35 p.m.] [02/12/2012 11:35 p.m.] [DI] C:\Users\Seba\AppData\Roaming\LolClient
      [24/04/2012 01:18 a.m.] [24/04/2012 01:18 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Macromedia
      [25/09/2012 09:33 p.m.] [25/09/2012 09:33 p.m.] [DI] C:\Users\Seba\AppData\Roaming\MAXON
      [14/07/2009 07:09 a.m.] [23/04/2012 09:06 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Media Center Programs
      [10/12/2012 12:48 a.m.] [27/05/2012 04:09 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Media Player Classic
      [26/01/2013 06:37 p.m.] [23/04/2012 09:06 p.m.] [SDI] C:\Users\Seba\AppData\Roaming\Microsoft
      [09/05/2012 10:48 p.m.] [09/05/2012 10:47 p.m.] [DI] C:\Users\Seba\AppData\Roaming\mine backup
      C:\Users\Seba\AppData\Roaming\Minecraft.INI [AI] 2,25 KB ( )
      [23/04/2012 09:43 p.m.] [23/04/2012 09:43 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Mozilla
      [24/09/2012 04:44 p.m.] [24/09/2012 04:44 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Nero
      [06/09/2012 09:28 p.m.] [29/04/2012 03:06 a.m.] [DI] C:\Users\Seba\AppData\Roaming\NVIDIA
      [15/04/2013 12:13 p.m.] [29/04/2012 08:39 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Orbit
      [11/12/2012 12:38 a.m.] [15/06/2012 12:17 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Origin
      C:\Users\Seba\AppData\Roaming\Prefs. de formato PNG de Adobe CS6 [AI] 132 bytes ( )
      [29/04/2012 08:40 p.m.] [29/04/2012 08:40 p.m.] [DI] C:\Users\Seba\AppData\Roaming\ProgSense
      [08/05/2012 10:36 p.m.] [05/05/2012 01:27 a.m.] [DI] C:\Users\Seba\AppData\Roaming\recursos inicio minecraft
      [15/04/2013 12:08 p.m.] [23/04/2012 11:39 p.m.] [DI] C:\Users\Seba\AppData\Roaming\Skype
      C:\Users\Seba\AppData\Roaming\steam_md4.dat [AI] 4 bytes ( )
      C:\Users\Seba\AppData\Roaming\steam_md5.dat [AI] 4 bytes ( )
      [20/10/2012 12:01 a.m.] [19/10/2012 05:52 p.m.] [DI] C:\Users\Seba\AppData\Roaming\SteelSeries
      [13/04/2013 08:37 p.m.] [28/04/2012 03:16 a.m.] [DI] C:\Users\Seba\AppData\Roaming\TuneUp Software
      [24/03/2013 04:46 p.m.] [21/08/2012 11:10 p.m.] [DI] C:\Users\Seba\AppData\Roaming\uTorrent
      [25/04/2012 10:13 p.m.] [24/04/2012 09:14 p.m.] [DI] C:\Users\Seba\AppData\Roaming\WinRAR
      [27/10/2012 02:04 a.m.] [20/10/2012 01:16 a.m.] [DI] C:\Users\Seba\AppData\Roaming\Xfire
      [21/02/2013 03:15 p.m.] [26/04/2012 07:45 p.m.] [D] C:\Program Files (x86)\Adobe
      [22/11/2012 05:02 p.m.] [22/11/2012 05:02 p.m.] [D] C:\Program Files (x86)\Adobe Download Assistant
      [17/12/2012 07:59 p.m.] [17/12/2012 07:59 p.m.] [D] C:\Program Files (x86)\AGEIA Technologies
      [01/12/2012 08:13 p.m.] [01/12/2012 08:13 p.m.] [D] C:\Program Files (x86)\AMX Mod X
      [02/08/2012 10:46 p.m.] [02/08/2012 10:46 p.m.] [D] C:\Program Files (x86)\Apple Software Update
      [23/04/2012 09:59 p.m.] [23/04/2012 09:59 p.m.] [D] C:\Program Files (x86)\ASM104xUSB3
      [23/04/2012 10:01 p.m.] [23/04/2012 10:01 p.m.] [D] C:\Program Files (x86)\ASM106xSATA
      [23/04/2012 11:23 p.m.] [23/04/2012 11:22 p.m.] [D] C:\Program Files (x86)\ASUS
      [09/09/2012 11:29 p.m.] [09/09/2012 11:29 p.m.] [D] C:\Program Files (x86)\AVG
      [13/12/2012 11:01 a.m.] [15/06/2012 11:45 p.m.] [D] C:\Program Files (x86)\Battlelog Web Plugins
      [24/04/2012 08:53 p.m.] [24/04/2012 08:53 p.m.] [D] C:\Program Files (x86)\Belkin
      [02/08/2012 10:43 p.m.] [02/08/2012 10:43 p.m.] [D] C:\Program Files (x86)\Bonjour
      [10/04/2013 12:55 a.m.] [09/04/2013 11:08 p.m.] [D] C:\Program Files (x86)\Bywifi
      [13/01/2013 03:42 p.m.] [13/05/2012 07:43 p.m.] [D] C:\Program Files (x86)\Call Of Duty - Modern Warfare 2
      [08/05/2012 11:04 p.m.] [08/05/2012 11:04 p.m.] [D] C:\Program Files (x86)\Clownfish
      [02/06/2012 08:18 p.m.] [02/06/2012 08:18 p.m.] [D] C:\Program Files (x86)\Code Laboratories
      [06/04/2013 07:26 p.m.] [14/07/2009 12:20 a.m.] [D] C:\Program Files (x86)\Common Files
      [09/05/2012 09:55 p.m.] [09/05/2012 09:55 p.m.] [D] C:\Program Files (x86)\DAEMON Tools Lite
      C:\Program Files (x86)\desktop.ini [HSA] 174 bytes( 0)
      [15/03/2013 02:23 p.m.] [15/03/2013 02:23 p.m.] [D] C:\Program Files (x86)\DVDVideoSoft
      [01/07/2012 07:38 p.m.] [30/06/2012 03:40 a.m.] [D] C:\Program Files (x86)\Electronic Arts
      [25/05/2012 03:28 p.m.] [25/05/2012 03:28 p.m.] [D] C:\Program Files (x86)\ESET
      [06/05/2012 03:38 a.m.] [06/05/2012 03:38 a.m.] [D] C:\Program Files (x86)\Funmoods
      [10/04/2013 02:15 p.m.] [25/05/2012 11:07 p.m.] [D] C:\Program Files (x86)\Gabest
      [14/05/2012 08:59 p.m.] [14/05/2012 08:57 p.m.] [D] C:\Program Files (x86)\Garmin
      [09/11/2012 03:28 p.m.] [08/11/2012 09:19 p.m.] [D] C:\Program Files (x86)\Gmod-GabitoX
      [26/12/2012 10:11 p.m.] [26/12/2012 10:07 p.m.] [D] C:\Program Files (x86)\HP
      [10/03/2013 05:54 p.m.] [23/04/2012 09:09 p.m.] [HD] C:\Program Files (x86)\InstallShield Installation Information
      [13/04/2013 03:39 p.m.] [14/07/2009 12:20 a.m.] [D] C:\Program Files (x86)\Internet Explorer
      [13/04/2013 03:37 p.m.] [13/04/2013 03:35 p.m.] [D] C:\Program Files (x86)\iOS6 Skin Pack
      [17/11/2012 04:10 p.m.] [17/11/2012 04:10 p.m.] [D] C:\Program Files (x86)\iTunes
      [01/04/2013 06:05 p.m.] [05/05/2012 01:52 a.m.] [D] C:\Program Files (x86)\Java
      [14/03/2013 11:57 p.m.] [06/05/2012 03:37 a.m.] [D] C:\Program Files (x86)\JDownloader
      [16/12/2012 04:37 a.m.] [16/12/2012 04:37 a.m.] [D] C:\Program Files (x86)\KONAMI
      [18/12/2012 08:34 p.m.] [18/12/2012 08:34 p.m.] [D] C:\Program Files (x86)\LogMeIn Hamachi
      [04/04/2013 09:16 p.m.] [16/12/2012 04:41 a.m.] [D] C:\Program Files (x86)\LOLReplay
      [16/05/2012 09:25 p.m.] [16/05/2012 09:25 p.m.] [D] C:\Program Files (x86)\Mapear V9.70
      [24/04/2012 11:31 p.m.] [24/04/2012 11:31 p.m.] [D] C:\Program Files (x86)\Microsoft
      [16/07/2012 10:07 p.m.] [16/07/2012 10:07 p.m.] [D] C:\Program Files (x86)\Microsoft LifeChat
      [21/05/2012 08:42 p.m.] [21/05/2012 08:40 p.m.] [D] C:\Program Files (x86)\Microsoft Office
      [18/08/2012 10:51 p.m.] [18/08/2012 10:51 p.m.] [D] C:\Program Files (x86)\Microsoft Silverlight
      [21/05/2012 08:42 p.m.] [21/05/2012 08:42 p.m.] [D] C:\Program Files (x86)\Microsoft Visual Studio
      [21/05/2012 08:40 p.m.] [21/05/2012 08:40 p.m.] [D] C:\Program Files (x86)\Microsoft Visual Studio 8
      [21/05/2012 08:42 p.m.] [21/05/2012 08:42 p.m.] [D] C:\Program Files (x86)\Microsoft Works
      [30/06/2012 03:43 a.m.] [30/06/2012 03:43 a.m.] [D] C:\Program Files (x86)\Microsoft WSE
      [12/05/2012 06:21 p.m.] [12/05/2012 06:21 p.m.] [D] C:\Program Files (x86)\Microsoft XNA
      [21/05/2012 08:42 p.m.] [25/04/2012 07:13 p.m.] [D] C:\Program Files (x86)\Microsoft.NET
      [19/02/2013 06:00 p.m.] [23/04/2012 09:43 p.m.] [D] C:\Program Files (x86)\Mozilla Firefox
      [19/07/2012 12:54 p.m.] [05/05/2012 12:13 a.m.] [D] C:\Program Files (x86)\Mozilla Maintenance Service
      [21/05/2012 08:42 p.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\MSBuild
      [26/12/2012 10:12 p.m.] [26/12/2012 10:12 p.m.] [D] C:\Program Files (x86)\MSN Toolbar
      [26/12/2012 10:12 p.m.] [26/12/2012 10:12 p.m.] [D] C:\Program Files (x86)\MSN Toolbar Installer
      [28/12/2012 03:01 a.m.] [28/12/2012 03:01 a.m.] [D] C:\Program Files (x86)\MSXML 4.0
      [09/04/2013 01:37 a.m.] [22/07/2012 11:34 p.m.] [D] C:\Program Files (x86)\Muargentina Season6
      [24/09/2012 04:43 p.m.] [24/09/2012 04:43 p.m.] [D] C:\Program Files (x86)\Nero
      [13/04/2013 03:03 a.m.] [23/04/2012 09:15 p.m.] [D] C:\Program Files (x86)\NVIDIA Corporation
      [19/12/2012 02:51 a.m.] [29/04/2012 08:40 p.m.] [D] C:\Program Files (x86)\Orbitdownloader
      [11/12/2012 12:36 a.m.] [15/06/2012 12:17 a.m.] [D] C:\Program Files (x86)\Origin
      [09/04/2013 01:27 a.m.] [15/06/2012 12:18 a.m.] [D] C:\Program Files (x86)\Origin Games
      [24/07/2012 01:20 a.m.] [24/07/2012 01:20 a.m.] [D] C:\Program Files (x86)\Pando Networks
      [04/12/2012 01:20 p.m.] [04/12/2012 01:19 p.m.] [D] C:\Program Files (x86)\PIXELA
      [17/01/2013 01:03 a.m.] [16/01/2013 01:47 a.m.] [D] C:\Program Files (x86)\PS3 Media Server
      [23/04/2012 09:55 p.m.] [23/04/2012 09:55 p.m.] [D] C:\Program Files (x86)\Realtek
      [09/05/2012 09:57 p.m.] [09/05/2012 09:57 p.m.] [D] C:\Program Files (x86)\Rebellion
      [14/07/2009 02:32 a.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Reference Assemblies
      [29/07/2012 10:13 p.m.] [29/07/2012 10:13 p.m.] [D] C:\Program Files (x86)\SEGA
      [13/04/2013 02:49 a.m.] [13/04/2013 02:49 a.m.] [D] C:\Program Files (x86)\Skin Pack
      [06/04/2013 07:26 p.m.] [23/04/2012 11:39 p.m.] [RD] C:\Program Files (x86)\Skype
      [21/12/2012 04:56 p.m.] [03/11/2012 02:05 p.m.] [D] C:\Program Files (x86)\SpeedFan
      [15/04/2013 11:49 a.m.] [24/04/2012 09:05 p.m.] [D] C:\Program Files (x86)\Steam
      [09/04/2013 10:06 p.m.] [28/05/2012 11:26 p.m.] [D] C:\Program Files (x86)\sXe Injected
      [23/04/2012 09:57 p.m.] [23/04/2012 09:55 p.m.] [HD] C:\Program Files (x86)\Temp
      [22/01/2013 04:04 p.m.] [22/01/2013 04:04 p.m.] [D] C:\Program Files (x86)\TuneUp Utilities 2013
      [24/09/2012 04:35 p.m.] [24/09/2012 04:35 p.m.] [D] C:\Program Files (x86)\UltraISO
      [14/07/2009 01:57 a.m.] [14/07/2009 01:57 a.m.] [HD] C:\Program Files (x86)\Uninstall Information
      [22/03/2013 11:31 p.m.] [21/08/2012 11:10 p.m.] [D] C:\Program Files (x86)\uTorrent
      [24/12/2012 01:17 a.m.] [28/05/2012 11:23 p.m.] [D] C:\Program Files (x86)\Valve
      [30/04/2012 12:13 a.m.] [29/04/2012 11:59 p.m.] [D] C:\Program Files (x86)\WEBZEN
      [14/07/2009 06:30 a.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Windows Defender
      [24/04/2012 11:31 p.m.] [24/04/2012 11:30 p.m.] [D] C:\Program Files (x86)\Windows Live
      [24/04/2012 11:30 p.m.] [24/04/2012 11:30 p.m.] [D] C:\Program Files (x86)\Windows Live SkyDrive
      [25/04/2012 07:05 p.m.] [14/07/2009 12:20 a.m.] [D] C:\Program Files (x86)\Windows Mail
      [13/04/2013 03:39 p.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Windows Media Player
      [14/07/2009 02:32 a.m.] [14/07/2009 12:20 a.m.] [D] C:\Program Files (x86)\Windows NT
      [14/07/2009 06:30 a.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Windows Photo Viewer
      [14/07/2009 02:32 a.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Windows Portable Devices
      [14/07/2009 06:30 a.m.] [14/07/2009 02:32 a.m.] [D] C:\Program Files (x86)\Windows Sidebar
      [25/10/2012 05:53 p.m.] [20/10/2012 01:15 a.m.] [D] C:\Program Files (x86)\Xfire
      [11/04/2013 11:55 a.m.] [21/02/2013 01:25 a.m.] [DI] C:\ProgramData\Adobe
      [01/12/2012 07:09 p.m.] [26/04/2012 07:45 p.m.] [DI] C:\ProgramData\Adobe-BackupByPhotoshopCS5Portable
      [02/08/2012 10:46 p.m.] [02/08/2012 10:43 p.m.] [DI] C:\ProgramData\Apple
      [02/08/2012 10:46 p.m.] [02/08/2012 10:46 p.m.] [DI] C:\ProgramData\Apple Computer
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Application Data
      [23/04/2012 11:22 p.m.] [23/04/2012 11:22 p.m.] [DI] C:\ProgramData\ASUS
      [23/04/2012 11:30 p.m.] [23/04/2012 11:30 p.m.] [DI] C:\ProgramData\ASUS OC Profiles
      [09/09/2012 11:31 p.m.] [09/09/2012 11:30 p.m.] [DI] C:\ProgramData\AVG2013
      [23/04/2012 11:39 p.m.] [23/04/2012 11:39 p.m.] [DI] C:\ProgramData\boost_interprocess
      [10/03/2013 06:00 p.m.] [10/03/2013 06:00 p.m.] [DI] C:\ProgramData\Cisco Systems
      [28/04/2012 04:08 a.m.] [28/04/2012 04:08 a.m.] [HD] C:\ProgramData\Common Files
      [09/05/2012 09:56 p.m.] [09/05/2012 09:51 p.m.] [DI] C:\ProgramData\DAEMON Tools Lite
      [23/04/2012 11:21 p.m.] [23/04/2012 11:21 p.m.] [DI] C:\ProgramData\DAEMON Tools Pro
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Datos de programa
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Desktop
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Documentos
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Documents
      [15/06/2012 11:44 p.m.] [15/06/2012 11:44 p.m.] [DI] C:\ProgramData\EA Core
      [16/06/2012 12:39 a.m.] [15/06/2012 11:44 p.m.] [DI] C:\ProgramData\EA Logs
      [15/06/2012 11:44 p.m.] [15/06/2012 12:17 a.m.] [DI] C:\ProgramData\Electronic Arts
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Escritorio
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Favorites
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Favoritos
      [14/05/2012 09:30 p.m.] [14/05/2012 09:01 p.m.] [DI] C:\ProgramData\GARMIN
      [26/12/2012 10:20 p.m.] [26/12/2012 10:06 p.m.] [DI] C:\ProgramData\HP
      [26/12/2012 10:11 p.m.] [26/12/2012 10:11 p.m.] [DI] C:\ProgramData\HP Product Assistant
      C:\ProgramData\hpzinstall.log [AI] 3,69 KB 0
      [16/12/2012 04:37 a.m.] [16/12/2012 04:37 a.m.] [DI] C:\ProgramData\KONAMI
      [24/09/2012 05:43 p.m.] [24/09/2012 04:44 p.m.] [DI] C:\ProgramData\LightScribe
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Menú Inicio
      [15/04/2013 11:52 a.m.] [09/09/2012 11:27 p.m.] [DI] C:\ProgramData\MFAData
      [26/12/2012 10:12 p.m.] [14/07/2009 12:20 a.m.] [SDI] C:\ProgramData\Microsoft
      [01/07/2012 07:19 p.m.] [21/05/2012 08:40 p.m.] [DI] C:\ProgramData\Microsoft Help
      [05/05/2012 12:13 a.m.] [05/05/2012 12:13 a.m.] [DI] C:\ProgramData\Mozilla
      [24/09/2012 04:43 p.m.] [24/09/2012 04:43 p.m.] [DI] C:\ProgramData\Nero
      [15/04/2013 11:46 a.m.] [23/04/2012 09:19 p.m.] [DI] C:\ProgramData\NVIDIA
      [23/04/2012 09:16 p.m.] [23/04/2012 09:16 p.m.] [DI] C:\ProgramData\NVIDIA Corporation
      [11/12/2012 12:38 a.m.] [15/06/2012 12:18 a.m.] [DI] C:\ProgramData\Origin
      [04/12/2012 01:21 p.m.] [04/12/2012 01:21 p.m.] [DI] C:\ProgramData\PIXELA
      [23/04/2012 09:05 p.m.] [23/04/2012 09:05 p.m.] [HSDLI] C:\ProgramData\Plantillas
      [15/04/2013 12:30 a.m.] [24/07/2012 01:20 a.m.] [DI] C:\ProgramData\PMB Files
      [16/01/2013 01:48 a.m.] [16/01/2013 01:47 a.m.] [DI] C:\ProgramData\PMS
      [10/03/2013 06:02 p.m.] [10/03/2013 06:02 p.m.] [DI] C:\ProgramData\Ralink
      [22/11/2012 06:22 p.m.] [06/09/2012 09:27 p.m.] [DI] C:\ProgramData\regid.1986-12.com.adobe
      [06/04/2013 07:26 p.m.] [23/04/2012 11:39 p.m.] [DI] C:\ProgramData\Skype
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Start Menu
      [20/10/2012 12:01 a.m.] [19/10/2012 05:49 p.m.] [DI] C:\ProgramData\SteelSeries
      [05/05/2012 01:29 a.m.] [05/05/2012 01:29 a.m.] [DI] C:\ProgramData\Sun
      [14/07/2009 02:08 a.m.] [14/07/2009 02:08 a.m.] [HSDLI] C:\ProgramData\Templates
      [21/02/2013 01:58 a.m.] [23/04/2012 09:08 p.m.] [DI] C:\ProgramData\TP-LINK
      [22/01/2013 04:04 p.m.] [28/04/2012 03:15 a.m.] [DI] C:\ProgramData\TuneUp Software
      [26/12/2012 10:20 p.m.] [26/12/2012 10:20 p.m.] [DI] C:\ProgramData\WEBREG
      [30/04/2012 12:13 a.m.] [30/04/2012 12:13 a.m.] [DI] C:\ProgramData\WEBZEN
      [25/10/2012 05:53 p.m.] [20/10/2012 01:15 a.m.] [DI] C:\ProgramData\Xfire
      [23/01/2013 12:50 p.m.] [28/04/2012 03:15 a.m.] [HSD] C:\ProgramData\{32364CEA-7855-4A3C-B674-53D8E9B97936}
      [23/01/2013 12:50 p.m.] [02/08/2012 10:46 p.m.] [DI] C:\ProgramData\{93E26451-CD9A-43A5-A2FA-C42392EA4001}
      [23/01/2013 12:50 p.m.] [22/01/2013 04:04 p.m.] [HSD] C:\ProgramData\{C4ABDBC8-1C81-42C9-BFFC-4A68511E9E4F}

      ==================== EOF ==================

      MalwarwBytes Anti-Malware:
      Malwarebytes Anti-Malware (Versión de Prueba) 1.75.0.1300
      www.malwarebytes.org

      Versión de la Base de Datos: v2013.04.15.06

      Windows 7 x64 NTFS
      Internet Explorer 9.0.8112.16421
      Seba :: SEBA-PC [administrador]

      Protección: Habilitado

      15/04/2013 12:29:55 p.m.
      mbam-log-2013-04-15 (12-29-55).txt

      Tipos de Análisis: Análisis Completo (C:\|E:\|F:\|G:\|H:\|I:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 743228
      Tiempo transcurrido: 2 hora(s), 13 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 32
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> No se tomaron medidas.
      HKCR\CLSID\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoods.funmoodsHlpr.1 (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoods.funmoodsHlpr (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{75EBB0AA-4214-4CB4-90EC-E3E07ECD04F7} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{75A4D144-506D-4BE5-81DB-EC7DA1E7F840} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\TypeLib\{960DF771-CFCB-4E53-A5B5-6EF2BBE6E706} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\esrv.funmoodsESrvc.1 (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\esrv.funmoodsESrvc (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{965B9DBE-B104-44AC-950A-8A5F97AFF439} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\escort.escortIEPane.1 (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\escort.escortIEPane (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoods.dskBnd.1 (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoods.dskBnd (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{A9DB719C-7156-415E-B49D-BAD039DE4F13} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\TypeLib\{D7EE8177-D51E-4F89-92B6-83EA2EC40800} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoodsApp.appCore.1 (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\funmoodsApp.appCore (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{F03FD9D0-4F2B-497C-8A71-DD41D70B07D9} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\f (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\Typelib\{1D085C0A-E4F4-4F66-BDBF-4BE51015BFC3} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKCR\Interface\{0D80F1C5-D17B-4177-AC68-955F3EF9F191} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{C87FC351-A80D-43E9-9A86-CF1E29DC443A} (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\MiNODLogin (Riskware.KG) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Funmoods (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Google\chrome\Extensions\fdloijijlkoblmigdofommgnheckmaki (PUP.Funmoods) -> En cuarentena y eliminado con éxito.

      Valores del Registro Detectados: 3
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar|{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> datos: Funmoods Toolbar -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\{A4C272EC-ED9E-4ACE-A6F2-9558C7F29EF3} (PUP.Funmoods) -> datos: -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\funmoods|UninstallString (PUP.Funmoods) -> datos: "C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\uninstall.exe" -> En cuarentena y eliminado con éxito.

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 4
      C:\Program Files (x86)\Funmoods (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16 (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\bh (PUP.FunMoods) -> En cuarentena y eliminado con éxito.

      Archivos Detectados: 21
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\bh\funmoods.dll (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodssrv.exe (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsTlbr.dll (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsApp.dll (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsEng.dll (PUP.Funmoods) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Adobe\Adobe Bridge CS6\AMTLib.dll (PUP.RiskwareTool.CK) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Adobe\Adobe Photoshop CS6\amtlib.dll (PUP.RiskwareTool.CK) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\ESET\MiNODLogin\MiNODLoginUninst.exe (Riskware.KG) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\uninstall.exe (PUP.FunMoods) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\AppData\Local\Google\Chrome\User Data\Default\File System\001\t\00\00000001 (Trojan.Agent.CK) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\backup pc lucre\descargas\02311209.sfrd.rar (Dont.Steal.Our.Software) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\backup pc lucre\descargas\Launcher.rar (Malware.Packer.GenX) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\backup pc lucre\descargas\SoftonicDownloader_para_ps3-media-server.exe (PUP.OfferBundler.ST) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\backup pc lucre\descargas\TNod-1.4.1.0-Final-Setup.rar (Trojan.Agent.CK) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\backup pc lucre\descargas\WinRAR4.1.65.exe (Spyware.Agent) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Documents\PARCHE AC 2 ASSASSINS CREED 2\Parche_AC2.exe (Trojan.Agent.CK) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Downloads\64-248.rar (PUP.RiskwareTool.CK) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Downloads\MiNODLogin v3.10.0.1.rar (Riskware.KG) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Downloads\PACHASSCRD2.rar (Trojan.Agent.CK) -> En cuarentena y eliminado con éxito.
      C:\Users\Seba\Downloads\Call of Duty4-Razor1911+Keygen and Crack\rzr-cod4.exe (Trojan.Agent.CK) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Funmoods\funmoods\1.5.11.16\funmoodsOEM.crx (PUP.FunMoods) -> En cuarentena y eliminado con éxito.

      fin)
      otl en comentario

    2. #2
      Usuario Avatar de sevenapen
      Registrado
      abr 2013
      Ubicación
      argentina
      Mensajes
      2

      Re: se me abren spams en chrome

      OTL:
      OTL logfile created on: 15/04/2013 05:21:15 p.m. - Run 1
      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Downloads
      64bit- Home Premium Edition (Version = 6.1.7600) - Type = NTWorkstation
      Internet Explorer (Version = 9.0.8112.16421)
      Locale: 00002c0a | Country: Argentina | Language: ESS | Date Format: dd/MM/yyyy

      7,95 Gb Total Physical Memory | 5,23 Gb Available Physical Memory | 65,85% Memory free
      15,89 Gb Paging File | 12,67 Gb Available in Paging File | 79,75% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
      Drive C: | 931,41 Gb Total Space | 326,11 Gb Free Space | 35,01% Space Free | Partition Type: NTFS

      Computer Name: SEBA-PC | User Name: Seba | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
      Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

      ========== Processes (SafeList) ==========

      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
      PRC - C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
      PRC - C:\Program Files (x86)\LOLReplay\LOLRecorder.exe (LOL Replay)
      PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
      PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
      PRC - C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
      PRC - C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
      PRC - C:\Program Files (x86)\AVG\AVG2013\avgfws.exe (AVG Technologies CZ, s.r.o.)
      PRC - C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
      PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()
      PRC - C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
      PRC - C:\Downloads\OTL.exe (OldTimer Tools)
      PRC - C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
      PRC - C:\Program Files (x86)\Orbitdownloader\orbitdm.exe (Orbitdownloader.com)
      PRC - C:\Program Files (x86)\Orbitdownloader\orbitnet.exe (Orbitdownloader.com)
      PRC - C:\Program Files (x86)\Clownfish\Clownfish.exe (Bogdan Sharkov)
      PRC - C:\Program Files (x86)\iOS6 Skin Pack\SP.exe (skin pack)
      PRC - C:\Program Files (x86)\PIXELA\Network Utility\PxDMSService.exe (PIXELA CORPORATION)
      PRC - C:\Program Files (x86)\PIXELA\Network Utility\NetworkUtility.exe (PIXELA CORPORATION)
      PRC - C:\Program Files (x86)\PIXELA\VideoBrowser\CameraMonitor.exe (PIXELA CORPORATION)
      PRC - C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
      PRC - C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe ()
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\AI Suite II.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\TurboVHelp.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\EPU\EPUHelp.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\DIGI+ VRM\VRMHelp.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe ()
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\AsRoutineController.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.)
      PRC - C:\Program Files (x86)\Bywifi\bywifi.exe (bywifi.com)
      PRC - C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe ()
      PRC - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\AlertHelper.exe (ASUSTeK Computer Inc.)
      PRC - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
      PRC - C:\Windows\DAODx.exe ()
      PRC - C:\Program Files (x86)\iOS6 Skin Pack\YzShadow\YzShadow.exe (Y'z)
      PRC - C:\Program Files (x86)\iOS6 Skin Pack\RocketDock\RocketDock.exe ()
      PRC - C:\Program Files (x86)\iOS6 Skin Pack\UberIcon\UberIcon.exe ()
      PRC - C:\Archivos de programa\Mouse Fix\MouseFix.exe ()


      ========== Modules (No Company Name) ==========

      MOD - C:\Users\Seba\AppData\Local\Temp\apm3246.tmp ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\05682429807d34d6ff05a77ea153935f\System.Windows.Forms.ni.dll ()
      MOD - C:\Program Files (x86)\LOLReplay\LOLUtils.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Core\7d3a95d2123d5a7982a451f1319fab8d\System.Core.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Management\ee4683cbfd60ee35d95e2e6d32fc3981\System.Management.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\c490a630d8595c864a445449c264775b\PresentationFramework.Classic.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationFramewo#\36b839247bd1d22a7fd014a74abe9729\PresentationFramework.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\e2ee5d77ebe0bd025e7a7a317a43d677\System.Drawing.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\PresentationCore\549690bfac66934b7c7fd5cf8b120b7c\PresentationCore.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\82a4c4666ad83c3a375210247e69646b\WindowsBase.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\cc19e0ff1b36ba7b634efdc5630a6926\System.Xml.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\96a3b737db1e72adaf32d2b350e50c23\System.Configuration.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\c54750e64ba10d0fb7b6a636fb3695ca\System.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\b0b8554c05f194f546a8ed531320760b\mscorlib.ni.dll ()
      MOD - C:\Program Files (x86)\Orbitdownloader\wtlctrl.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\Sensor.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\BarGadget\BarGadget.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\MyLogo\MyLogo.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\ASUS Update\Update.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor Graph\SensorGraph.dll ()
      MOD - C:\Program Files (x86)\Common Files\LightScribe\QtGui4.dll ()
      MOD - C:\Program Files (x86)\Common Files\LightScribe\plugins\imageformats\qjpeg4.dll ()
      MOD - C:\Program Files (x86)\Common Files\LightScribe\QtCore4.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\HookKey32.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\AssistFunc.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\AI Charger+\AIChargerPlus.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Settings\Settings.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Probe_II\ProbeII.dll ()
      MOD - C:\Program Files (x86)\PIXELA\Network Utility\libNamedPipeComm.dll ()
      MOD - C:\Program Files (x86)\Bywifi\bywifips.dll ()
      MOD - C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMLib.dll ()
      MOD - C:\Program Files (x86)\PIXELA\Network Utility\pxl_m17n_tool.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\TabGadget\TabGadget.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Splitter\Splitter.dll ()
      MOD - C:\Program Files (x86)\PIXELA\VideoBrowser\pxl_m17n_tool.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\Sensor\AlertHelper\ImageHelper.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\ImageHelper.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\pngio.dll ()
      MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_es_b77a5c561934e089\mscorlib.resources.dll ()
      MOD - C:\Program Files (x86)\ASUS\AI Suite II\TurboV EVO\pngio.dll ()
      MOD - C:\Windows\DAODx.exe ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\YzShadow\Languages\English.lang ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\RocketDock\RocketDock.exe ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\RocketDock\RocketDock.dll ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\UberIcon\UberIcon.exe ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\UberIcon\UberIcon.dll ()
      MOD - C:\Program Files (x86)\iOS6 Skin Pack\UberIcon\Plugins\iZoom\fx.dll ()
      MOD - C:\Archivos de programa\Mouse Fix\MouseFix.exe ()
      MOD - C:\Archivos de programa\Mouse Fix\MouseFixDll.dll ()


      ========== Services (SafeList) ==========

      SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
      SRV - (MBAMService) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe (Malwarebytes Corporation)
      SRV - (MBAMScheduler) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamscheduler.exe (Malwarebytes Corporation)
      SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
      SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
      SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
      SRV - (Hamachi2Svc) -- C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
      SRV - (avgfws) -- C:\Program Files (x86)\AVG\AVG2013\avgfws.exe (AVG Technologies CZ, s.r.o.)
      SRV - (nvUpdatusService) -- C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe (NVIDIA Corporation)
      SRV - (TuneUp.UtilitiesSvc) -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesService64.exe (TuneUp Software)
      SRV - (AVGIDSAgent) -- C:\Program Files (x86)\AVG\AVG2013\avgidsagent.exe (AVG Technologies CZ, s.r.o.)
      SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()
      SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
      SRV - (avgwd) -- C:\Program Files (x86)\AVG\AVG2013\avgwdsvc.exe (AVG Technologies CZ, s.r.o.)
      SRV - (Skype C2C Service) -- C:\ProgramData\Skype\Toolbars\Skype C2C Service\c2c_service.exe (Skype Technologies S.A.)
      SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
      SRV - (xsherlock) -- C:\Windows\SysWOW64\xsherlock.xem (Wellbia.com Co., Ltd.)
      SRV - (PxDMSService) -- C:\Program Files (x86)\PIXELA\Network Utility\PxDMSService.exe (PIXELA CORPORATION)
      SRV - (NAUpdate) -- C:\Program Files (x86)\Nero\Update\NASvc.exe (Nero AG)
      SRV - (asComSvc) -- C:\Program Files (x86)\ASUS\AXSP\1.00.14\atkexComSvc.exe ()
      SRV - (asHmComSvc) -- C:\Program Files (x86)\ASUS\AAHM\1.00.14\aaHMSvc.exe ()
      SRV - (AsSysCtrlService) -- C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.11\AsSysCtrlService.exe ()
      SRV - (clr_optimization_v4.0.30319_32) -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
      SRV - (HPSLPSVC) -- C:\Program Files (x86)\HP\Digital Imaging\bin\HPSLPSVC64.DLL (Hewlett-Packard Co.)
      SRV - (wlidsvc) -- C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corporation)
      SRV - (clr_optimization_v2.0.50727_32) -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


      ========== Driver Services (SafeList) ==========

      DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
      DRV:64bit: - (Avgmfx64) -- C:\Windows\SysNative\drivers\avgmfx64.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (AVGIDSDriver) -- C:\Windows\SysNative\drivers\avgidsdrivera.sys (AVG Technologies CZ, s.r.o. )
      DRV:64bit: - (AVGIDSHA) -- C:\Windows\SysNative\drivers\avgidsha.sys (AVG Technologies CZ, s.r.o. )
      DRV:64bit: - (Avgldx64) -- C:\Windows\SysNative\drivers\avgldx64.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (busenum) -- C:\Windows\SysNative\drivers\SteelBus64.sys (SteelSeries Corporation)
      DRV:64bit: - (SAlphamHid) -- C:\Windows\SysNative\drivers\SAlpham64.sys (SteelSeries Corporation)
      DRV:64bit: - (Avgtdia) -- C:\Windows\SysNative\drivers\avgtdia.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (Avgloga) -- C:\Windows\SysNative\drivers\avgloga.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (Avgrkx64) -- C:\Windows\SysNative\drivers\avgrkx64.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (Avgfwfd) -- C:\Windows\SysNative\drivers\avgfwd6a.sys (AVG Technologies CZ, s.r.o.)
      DRV:64bit: - (GEARAspiWDM) -- C:\Windows\SysNative\drivers\GEARAspiWDM.sys (GEAR Software Inc.)
      DRV:64bit: - (USBAAPL64) -- C:\Windows\SysNative\drivers\usbaapl64.sys (Apple, Inc.)
      DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
      DRV:64bit: - (dtsoftbus01) -- C:\Windows\SysNative\drivers\dtsoftbus01.sys (DT Soft Ltd)
      DRV:64bit: - (Netaapl) -- C:\Windows\SysNative\drivers\netaapl64.sys (Apple Inc.)
      DRV:64bit: - (AE3000) -- C:\Windows\SysNative\drivers\AE3000w764.sys (Ralink Technology Corp.)
      DRV:64bit: - (Fs_Rec) -- C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
      DRV:64bit: - (athr) -- C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
      DRV:64bit: - (asahci64) -- C:\Windows\SysNative\drivers\asahci64.sys (Asmedia Technology)
      DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
      DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
      DRV:64bit: - (amd_sata) -- C:\Windows\SysNative\drivers\amd_sata.sys (Advanced Micro Devices)
      DRV:64bit: - (amd_xata) -- C:\Windows\SysNative\drivers\amd_xata.sys (Advanced Micro Devices)
      DRV:64bit: - (asmtxhci) -- C:\Windows\SysNative\drivers\asmtxhci.sys (ASMedia Technology Inc)
      DRV:64bit: - (asmthub3) -- C:\Windows\SysNative\drivers\asmthub3.sys (ASMedia Technology Inc)
      DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
      DRV:64bit: - (AiChargerPlus) -- C:\Windows\SysNative\drivers\AiChargerPlus.sys (ASUSTek Computer Inc.)
      DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
      DRV:64bit: - (LSI_SAS2) -- C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
      DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
      DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
      DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
      DRV:64bit: - (netr28ux) -- C:\Windows\SysNative\drivers\netr28ux.sys (Ralink Technology Corp.)
      DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
      DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
      DRV:64bit: - (b57nd60a) -- C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
      DRV:64bit: - (hcw85cir) -- C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
      DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\hamachi.sys (LogMeIn, Inc.)
      DRV - (TuneUpUtilitiesDrv) -- C:\Program Files (x86)\TuneUp Utilities 2013\TuneUpUtilitiesDriver64.sys (TuneUp Software)
      DRV - (WIMMount) -- C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


      ========== Standard Registry (SafeList) ==========


      ========== Internet Explorer ==========

      IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
      IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
      IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = LocalStrike Search
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = LocalStrike Search
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = LocalStrike Search
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
      IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}


      IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

      IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = LocalStrike Search
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = MSN Argentina: Skype, Outlook, Noticias, Entretenimiento, Videos y más
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-ar
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = A6 47 59 DF AE 21 CD 01 [binary data]
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\..\SearchScopes,DefaultScope = {90ED1976-8DA8-440C-AAB5-C82CF27780C5}
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\..\SearchScopes\{33D59858-89D9-4AC2-A956-93875EB02323}: "URL" = http://find.localstrike.net/?q={searchTerms}&rls=com.microsoft:{language}&ie={inputEncoding}&oe={outputEncoding}&startIndex={startIndex?}&startPage={startPage}
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\..\SearchScopes\{90ED1976-8DA8-440C-AAB5-C82CF27780C5}: "URL" = http://start.funmoods.com/results.php?f=4&a=ddrnw&q={searchTerms}
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = local
      IE - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "AutoConfigURL" = http://localhost:9000/proxy.pac

      ========== FireFox ==========

      FF - prefs.js..browser.search.defaultenginename: "(Google)"
      FF - prefs.js..browser.search.defaulturl: "www.Google.com"
      FF - prefs.js..browser.search.order.1: "(Google)"
      FF - prefs.js..browser.search.selectedEngine: "Google"
      FF - prefs.js..browser.startup.homepage: "http://google.com"
      FF - prefs.js..extensions.enabledAddons: {a3a5c777-f583-4fef-9380-ab4add1bc2a8}:4.3
      FF - prefs.js..extensions.enabledAddons: {195A3098-0BD5-4e90-AE22-BA1C540AFD1E}:4.0.4
      FF - prefs.js..keyword.URL: "https://www.google.com/search?q="
      FF - prefs.js..network.proxy.autoconfig_url: "http://localhost:9000/proxy.pac"
      FF - prefs.js..network.proxy.type: 2

      FF - user.js..network.proxy.type: 2
      FF - user.js..network.proxy.autoconfig_url: "http://localhost:9000/proxy.pac"

      FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_7_700_169.dll File not found
      FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
      FF:64bit: - HKLM\Software\MozillaPlugins\adobe.com/AdobeAAMDetect: C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll File not found
      FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll ()
      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=: File not found
      FF - HKLM\Software\MozillaPlugins\@Apple.com/iTunes,version=1.0: C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll ()
      FF - HKLM\Software\MozillaPlugins\@esn.me/esnsonar,version=0.70.4: C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll (ESN Social Software AB)
      FF - HKLM\Software\MozillaPlugins\@esn/esnlaunch,version=2.1.2: C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll (ESN Social Software AB)
      FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=10.17.2: C:\Windows\SysWOW64\npDeployJava1.dll (Oracle Corporation)
      FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=10.17.2: C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll ( Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpWinExt,version=4.0: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
      FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
      FF - HKLM\Software\MozillaPlugins\@pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)
      FF - HKLM\Software\MozillaPlugins\@Webzen.com/NPBrowserExt: C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll (WEBZEN)
      FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Seba\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
      FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Seba\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll (Google Inc.)
      FF - HKCU\Software\MozillaPlugins\@unity3d.com/UnityPlayer,version=1.0: C:\Users\Seba\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll (Unity Technologies ApS)
      FF - HKCU\Software\MozillaPlugins\pandonetworks.com/PandoWebPlugin: C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll (Pando Networks)

      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\Kaspersky Lab\Kaspersky Anti-Virus 2011\FFExt\[email protected]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/26 22:11:39 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\Firefox [2012/12/26 22:12:16 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{27182e60-b5f3-411c-b545-b44205977502}: C:\Program Files (x86)\Microsoft\Search Enhancement Pack\Search Helper\firefoxextension\SearchHelperExtension\ [2012/12/26 22:12:17 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 14.0.1\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/07/18 11:35:23 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Thunderbird\Extensions\\[email protected]: C:\Program Files\ESET\ESET Smart Security\Mozilla Thunderbird
      FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files (x86)\HP\Digital Imaging\Smart Web Printing\MozillaAddOn3 [2012/12/26 22:11:39 | 000,000,000 | ---D | M]

      [2012/04/23 21:43:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Seba\AppData\Roaming\mozilla\Extensions
      [2013/04/15 17:17:51 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Seba\AppData\Roaming\mozilla\Firefox\Profiles\que50b9i.default\extensions
      [2012/12/01 08:34:54 | 000,000,000 | ---D | M] (Garmin Communicator) -- C:\Users\Seba\AppData\Roaming\mozilla\Firefox\Profiles\que50b9i.default\extensions\{195A3098-0BD5-4e90-AE22-BA1C540AFD1E}
      [2013/02/18 21:46:31 | 000,530,982 | ---- | M] () (No name found) -- C:\Users\Seba\AppData\Roaming\mozilla\firefox\profiles\que50b9i.default\extensions\{73a6fe31-595d-460b-a920-fcc0f8843232}.xpi
      [2012/10/22 20:17:04 | 000,013,822 | ---- | M] () (No name found) -- C:\Users\Seba\AppData\Roaming\mozilla\firefox\profiles\que50b9i.default\extensions\{a3a5c777-f583-4fef-9380-ab4add1bc2a8}.xpi
      [2012/05/06 03:38:16 | 000,001,799 | ---- | M] () -- C:\Users\Seba\AppData\Roaming\mozilla\firefox\profiles\que50b9i.default\searchplugins\funmoods.xml
      [2012/06/14 19:32:39 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\extensions
      [2012/11/03 13:16:36 | 000,000,000 | ---D | M] (Skype Click to Call) -- C:\Program Files (x86)\mozilla firefox\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}
      [2012/04/23 23:17:56 | 000,000,000 | ---D | M] (Analyse des liens (URL Advisor)) -- C:\Program Files (x86)\mozilla firefox\extensions\[email protected]_bak
      [2012/07/18 11:35:23 | 000,136,672 | ---- | M] (Mozilla Foundation) -- C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
      [2012/06/01 12:39:16 | 000,002,252 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
      [2012/06/01 12:39:16 | 000,002,040 | ---- | M] () -- C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml

      ========== Chrome ==========

      CHR - default_search_provider: Google (Enabled)
      CHR - default_search_provider: search_url = {google:baseURL}search?q={searchTerms}&{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:assistedQueryStats}{google:searchFieldtrialParameter}{google:searchClient}{google:sourceId}{google:instantExtendedEnabledParameter}ie={inputEncoding}
      CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}client=chrome&q={searchTerms}&{google:cursorPosition}sugkey={google:suggestAPIKeyParameter}
      CHR - homepage: Google
      CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Seba\AppData\Local\Google\Chrome\Application\26.0.1410.64\PepperFlash\pepflashplayer.dll
      CHR - plugin: Chrome Remote Desktop Viewer (Enabled) = internal-remoting-viewer
      CHR - plugin: Native Client (Enabled) = C:\Users\Seba\AppData\Local\Google\Chrome\Application\26.0.1410.64\ppGoogleNaClPluginChrome.dll
      CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Seba\AppData\Local\Google\Chrome\Application\26.0.1410.64\pdf.dll
      CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 11.0\Reader\Browser\nppdf32.dll
      CHR - plugin: Orbit Downloader (Enabled) = C:\Users\Seba\AppData\Local\Google\Chrome\Application\plugins\nporbit.dll
      CHR - plugin: ESN Launch Mozilla Plugin (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\2.1.2\npesnlaunch.dll
      CHR - plugin: ESN Sonar API (Enabled) = C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\npesnsonar.dll
      CHR - plugin: Java(TM) Platform SE 7 U17 (Enabled) = C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll
      CHR - plugin: MSN\u00AE Toolbar (Enabled) = C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll
      CHR - plugin: NVIDIA 3D Vision (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll
      CHR - plugin: NVIDIA 3D VISION (Enabled) = C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll
      CHR - plugin: Pando Web Plugin (Enabled) = C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll
      CHR - plugin: WEBZEN Browser Extension (Enabled) = C:\Program Files (x86)\WEBZEN\BrowserExtension\NPWZCmnCtrl.dll
      CHR - plugin: iTunes Application Detector (Enabled) = C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll
      CHR - plugin: Unity Player (Enabled) = C:\Users\Seba\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll
      CHR - plugin: Google Update (Enabled) = C:\Users\Seba\AppData\Local\Google\Update\1.3.21.135\npGoogleUpdate3.dll
      CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_7_700_169.dll
      CHR - plugin: Java Deployment Toolkit 7.0.170.2 (Enabled) = C:\Windows\SysWOW64\npDeployJava1.dll
      CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\5.1.10411.0\npctrl.dll

      O1 HOSTS File: ([2012/09/23 17:22:11 | 000,000,891 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
      O1 - Hosts: 127.0.0.1 foro.inexinferis.com.ar
      O1 - Hosts: 127.0.0.1 foro.inexinferis.com
      O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
      O2:64bit: - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
      O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
      O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
      O2 - BHO: (Skype Browser Helper) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
      O2 - BHO: (BywifiBHO Class) - {C4743D3E-20D7-4B52-84F2-5E4E277B2D82} - C:\Program Files (x86)\Bywifi\bywifiie.dll (bywifi.com)
      O2 - BHO: (MSN Toolbar BHO) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
      O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
      O3 - HKLM\..\Toolbar: (MSN Toolbar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\npwinext.dll (Microsoft Corporation)
      O4:64bit: - HKLM..\Run: [LifeChat] C:\Program Files\Microsoft LifeChat\LifeChat.exe (Microsoft Corporation)
      O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
      O4 - HKLM..\Run: [] File not found
      O4 - HKLM..\Run: [APSDaemon] C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc.)
      O4 - HKLM..\Run: [ASUS AiChargerPlus Execute] C:\Program Files (x86)\InstallShield Installation Information\{E6931688-DA2B-4E16-8539-3D323D69C677}\AiChargerPlus.exe (ASUSTek Computer Inc.)
      O4 - HKLM..\Run: [AVG_UI] C:\Program Files (x86)\AVG\AVG2013\avgui.exe (AVG Technologies CZ, s.r.o.)
      O4 - HKLM..\Run: [bywifi] C:\Program Files (x86)\Bywifi\bywifi.exe (bywifi.com)
      O4 - HKLM..\Run: [LogMeIn Hamachi Ui] C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
      O4 - HKLM..\Run: [MSN Toolbar] C:\Program Files (x86)\MSN Toolbar\Platform\4.0.0357.1\mswinext.exe (Microsoft Corp.)
      O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
      O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [bywifi] C:\Program Files (x86)\Bywifi\bywifi.exe (bywifi.com)
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [Clownfish] C:\Program Files (x86)\Clownfish\Clownfish.exe (Bogdan Sharkov)
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [DAEMON Tools Lite] C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe (DT Soft Ltd)
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [MouseFix] C:\Archivos de programa\Mouse Fix\MouseFix.exe ()
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [RocketDock] C:\Program Files (x86)\iOS6 Skin Pack\RocketDock\RocketDock.exe ()
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [Steam] C:\Program Files (x86)\Steam\steam.exe (Valve Corporation)
      O4 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000..\Run: [SteelSeries Engine] C:\Archivos de programa\SteelSeries\SteelSeries Engine\SteelSeriesEngine.exe (SteelSeries ApS)
      O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
      O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
      O7 - HKU\S-1-5-21-1064721216-3732114108-2438110629-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
      O8:64bit: - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8:64bit: - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8:64bit: - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8:64bit: - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8:64bit: - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
      O8 - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
      O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\PROGRA~2\MICROS~3\Office12\EXCEL.EXE/3000 File not found
      O9:64bit: - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
      O9 - Extra Button: Bywifi: Vídeo Downloader - {09E90109-A9AA-4980-BCEF-76F8D924E902} - C:\Program Files\Bywifi\bywifici.exe File not found
      O9 - Extra 'Tools' menuitem : Bywifi: Vídeo Downloader - {09E90109-A9AA-4980-BCEF-76F8D924E902} - C:\Program Files\Bywifi\bywifici.exe File not found
      O9 - Extra Button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
      O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~2\MICROS~3\Office12\REFIEBAR.DLL (Microsoft Corporation)
      O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000007 [] - C:\Archivos de programa\Bonjour\mdnsNSP.dll (Apple Inc.)
      O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
      O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Program Files (x86)\Bonjour\mdnsNSP.dll (Apple Inc.)
      O1364bit: - gopher Prefix: missing
      O13 - gopher Prefix: missing
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Reg Error: Value error.)
      O16 - DPF: {CAFEEFAC-0016-0000-0032-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_32)
      O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 10.17.2)
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.49.130.47 200.42.4.210
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{2D0364A8-F662-43D0-BF15-744EC9C19205}: DhcpNameServer = 172.21.7.7 172.25.7.6
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{BB9DBE0C-5AE5-4E37-832D-AAC9D3594B63}: DhcpNameServer = 200.49.130.47 200.42.4.210
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{FD0BE598-A9F8-4B6E-98CA-9FA0D4595E29}: DhcpNameServer = 200.49.130.47 200.42.4.210 172.20.2.24
      O18:64bit: - Protocol\Handler\livecall - No CLSID value found
      O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
      O18:64bit: - Protocol\Handler\msnim - No CLSID value found
      O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
      O18:64bit: - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll (Skype Technologies S.A.)
      O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
      O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~2\WIC4A1~1\MESSEN~1\MSGRAP~1.DLL (Microsoft Corporation)
      O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
      O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
      O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~2\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
      O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
      O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
      O32 - HKLM CDRom: AutoRun - 1
      O33 - MountPoints2\{58437099-8da0-11e1-a793-806e6f6e6963}\Shell - "" = AutoRun
      O33 - MountPoints2\{58437099-8da0-11e1-a793-806e6f6e6963}\Shell\AutoRun\command - "" = E:\.\Bin\ASSETUP.exe
      O33 - MountPoints2\K\Shell - "" = AutoRun
      O33 - MountPoints2\K\Shell\AutoRun\command - "" = K:\Setup.exe
      O34 - HKLM BootExecute: (autocheck autochk *)
      O35:64bit: - HKLM\..comfile [open] -- "%1" %*
      O35:64bit: - HKLM\..exefile [open] -- "%1" %*
      O35 - HKLM\..comfile [open] -- "%1" %*
      O35 - HKLM\..exefile [open] -- "%1" %*
      O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
      O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
      O37 - HKLM\...com [@ = comfile] -- "%1" %*
      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
      O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
      O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)



      CREATERESTOREPOINT
      Restore point Set: OTL Restore Point

      ========== Files/Folders - Created Within 30 Days ==========

      [2013/04/15 12:27:54 | 000,000,000 | ---D | C] -- C:\Users\Seba\AppData\Roaming\Malwarebytes
      [2013/04/15 12:27:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes' Anti-Malware
      [2013/04/15 12:27:44 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
      [2013/04/15 12:27:43 | 000,025,928 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
      [2013/04/15 12:27:43 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
      [2013/04/15 12:27:27 | 000,000,000 | ---D | C] -- C:\Users\Seba\AppData\Local\Programs
      [2013/04/15 12:12:03 | 000,000,000 | ---D | C] -- C:\_AT-Destroyer
      [2013/04/13 19:25:20 | 000,000,000 | ---D | C] -- C:\skins rocketdock
      [2013/04/13 15:36:53 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iOS6 Skin Pack
      [2013/04/13 15:35:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\iOS6 Skin Pack
      [2013/04/13 02:49:08 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Skin Pack
      [2013/04/09 23:08:10 | 000,000,000 | ---D | C] -- C:\BywifiShare
      [2013/04/09 23:08:10 | 000,000,000 | ---D | C] -- C:\BywifiSave
      [2013/04/09 23:08:07 | 000,000,000 | ---D | C] -- C:\Users\Seba\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Bywifi
      [2013/04/09 23:08:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bywifi
      [2013/04/09 23:08:06 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Bywifi
      [2013/04/07 00:14:44 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\AE3000_Win7_3.2.8-WHQL
      [2013/04/06 19:26:54 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
      [2013/04/04 21:16:13 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\LOLReplay
      [2013/03/29 04:18:36 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\League of Legends
      [2013/03/23 00:25:39 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\my games
      [2013/03/22 23:30:19 | 000,000,000 | ---D | C] -- C:\Users\Seba\AppData\Local\uTorrent
      [2013/03/22 23:29:25 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\PARCHE AC 2 ASSASSINS CREED 2
      [2013/03/22 23:28:49 | 000,000,000 | ---D | C] -- C:\Users\Seba\Documents\TORRENT ASSASINS 2
      [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

      ========== Files - Modified Within 30 Days ==========

      [2013/04/15 17:17:38 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      [2013/04/15 17:17:38 | 000,014,240 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      [2013/04/15 17:16:00 | 000,000,838 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
      [2013/04/15 1713 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2013/04/15 1711 | 2103,660,543 | -HS- | M] () -- C:\hiberfil.sys
      [2013/04/15 16:59:01 | 000,001,042 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1064721216-3732114108-2438110629-1000UA.job
      [2013/04/15 16:59:00 | 000,000,990 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1064721216-3732114108-2438110629-1000Core.job
      [2013/04/15 12:25:37 | 000,003,558 | ---- | M] () -- C:\Users\Seba\Documents\cc_20130415_122527.reg
      [2013/04/14 18:28:37 | 001,680,288 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
      [2013/04/14 18:28:37 | 000,749,046 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
      [2013/04/14 18:28:37 | 000,655,054 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
      [2013/04/14 18:28:37 | 000,159,116 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
      [2013/04/14 18:28:37 | 000,121,926 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
      [2013/04/13 15:37:30 | 000,001,204 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
      [2013/04/13 15:37:30 | 000,001,035 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
      [2013/04/13 15:36:53 | 000,001,184 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\YzShadow.lnk
      [2013/04/13 15:36:53 | 000,001,184 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UberIcon.lnk
      [2013/04/11 11:44:51 | 005,042,600 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
      [2013/04/04 21:16:12 | 000,001,997 | ---- | M] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
      [2013/04/04 14:50:32 | 000,025,928 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
      [2013/04/01 04:15:33 | 1548,872,042 | ---- | M] () -- C:\Users\Seba\Documents\the.walking.dead.s03e16.720p.hdtv.x264-2hd.mkv
      [2013/03/19 00:43:09 | 000,000,000 | -H-- | M] () -- C:\Windows\SysNative\drivers\Msft_Kernel_netaapl64_01009.Wdf
      [2 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

      ========== Files Created - No Company Name ==========

      [2013/04/15 12:25:30 | 000,003,558 | ---- | C] () -- C:\Users\Seba\Documents\cc_20130415_122527.reg
      [2013/04/13 02:49:08 | 000,001,204 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\RocketDock.lnk
      [2013/04/13 02:49:08 | 000,001,035 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\SkinPackMenu.lnk
      [2013/04/13 02:48:10 | 000,001,184 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\YzShadow.lnk
      [2013/04/13 02:48:10 | 000,001,184 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\UberIcon.lnk
      [2013/04/04 21:16:12 | 000,001,997 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\LOLRecorder.lnk
      [2013/04/01 23:49:50 | 1548,872,042 | ---- | C] () -- C:\Users\Seba\Documents\the.walking.dead.s03e16.720p.hdtv.x264-2hd.mkv
      [2013/03/24 01:25:53 | 2515,967,999 | ---- | C] () -- C:\Users\Seba\Documents\sr-acii.iso
      [2013/03/19 00:43:09 | 000,000,000 | -H-- | C] () -- C:\Windows\SysNative\drivers\Msft_Kernel_netaapl64_01009.Wdf
      [2013/02/16 23:48:21 | 000,007,679 | ---- | C] () -- C:\Users\Seba\AppData\Local\Resmon.ResmonCfg
      [2013/02/03 22:30:34 | 000,000,574 | ---- | C] () -- C:\Windows\hpomdl46.dat.temp
      [2012/12/26 22:06:30 | 000,230,492 | ---- | C] () -- C:\Windows\hpoins46.dat
      [2012/11/24 17:24:04 | 000,307,200 | ---- | C] () -- C:\Users\Seba\jaudioMp3Win.tar
      [2012/11/22 19:32:47 | 000,000,132 | ---- | C] () -- C:\Users\Seba\AppData\Roaming\Adobe PNG Format CS5 Prefs
      [2012/10/24 01:27:50 | 000,042,440 | ---- | C] () -- C:\Windows\SysWow64\xfcodec.dll
      [2012/10/23 21:15:20 | 003,130,440 | ---- | C] () -- C:\Windows\SysWow64\pbsvc_blr.exe
      [2012/10/20 01:50:54 | 000,000,331 | ---- | C] () -- C:\Windows\game.ini
      [2012/09/06 21:33:15 | 000,000,132 | ---- | C] () -- C:\Users\Seba\AppData\Roaming\Prefs. de formato PNG de Adobe CS6
      [2012/08/22 22:55:54 | 000,028,706 | ---- | C] () -- C:\Program Files\Mouse Fix.rar
      [2012/08/02 22:42:19 | 001,657,326 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
      [2012/07/24 14:08:24 | 000,000,004 | ---- | C] () -- C:\Users\Seba\AppData\Roaming\steam_md4.dat
      [2012/06/15 23:43:29 | 000,281,520 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrB.exe
      [2012/06/15 23:43:28 | 000,076,888 | ---- | C] () -- C:\Windows\SysWow64\PnkBstrA.exe
      [2012/06/14 00:13:52 | 000,075,273 | ---- | C] () -- C:\Users\Seba\AppData\Local\gpac_20090824.patch
      [2012/06/14 00:13:52 | 000,038,015 | ---- | C] () -- C:\Users\Seba\AppData\Local\nircmd.chm
      [2012/06/14 00:13:52 | 000,008,465 | ---- | C] () -- C:\Users\Seba\AppData\Local\gpac_20090519.diff
      [2012/05/13 17:32:02 | 000,000,004 | ---- | C] () -- C:\Users\Seba\AppData\Roaming\steam_md5.dat
      [2012/04/23 23:22:40 | 000,013,440 | R--- | C] () -- C:\Windows\SysWow64\drivers\AsIO.sys
      [2012/04/23 23:22:37 | 000,011,832 | ---- | C] () -- C:\Windows\SysWow64\drivers\AsInsHelp64.sys
      [2012/04/23 21:51:41 | 000,001,769 | ---- | C] () -- C:\Windows\Language_trs.ini
      [2012/04/23 21:51:35 | 000,033,314 | ---- | C] () -- C:\Windows\Ascd_tmp.ini
      [2011/02/12 05:04:53 | 000,002,304 | ---- | C] () -- C:\Users\Seba\AppData\Roaming\Minecraft.INI

      ========== ZeroAccess Check ==========

      [2009/07/14 01:55:00 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

      [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

      [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

      [HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
      "" = C:\Windows\SysNative\shell32.dll -- [2012/06/09 02:30:56 | 014,165,504 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
      "" = %SystemRoot%\system32\shell32.dll -- [2012/06/09 01:46:56 | 012,868,608 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\fastprox.dll -- [2009/07/13 22:40:51 | 000,909,312 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
      "" = %systemroot%\system32\wbem\fastprox.dll -- [2009/07/13 22:15:20 | 000,605,696 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
      "" = C:\Windows\SysNative\wbem\wbemess.dll -- [2009/07/13 22:41:56 | 000,505,856 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Both

      [HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

      ========== LOP Check ==========

      [2012/09/22 13:32:06 | 000,000,000 | ---D | M] -- C:\Users\Default\AppData\Roaming\TuneUp Software
      [2012/09/22 13:32:06 | 000,000,000 | ---D | M] -- C:\Users\Default User\AppData\Roaming\TuneUp Software
      [2013/01/15 20:27:09 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\.minecraft
      [2012/09/09 23:31:22 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\AVG2013
      [2012/05/12 18:33:58 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\Blockscape
      [2012/11/22 17:02:42 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\com.adobe.downloadassistant.AdobeDownloadAssistant
      [2013/04/15 12:24:28 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\DAEMON Tools Lite
      [2012/04/23 23:21:22 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\DAEMON Tools Pro
      [2013/03/15 14:23:27 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\DVDVideoSoft
      [2012/04/25 22:45:23 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\ESET
      [2012/04/29 03:06:44 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\fofix
      [2012/04/29 23:57:33 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\fretsonfire
      [2012/05/14 21:30:37 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\Garmin
      [2012/09/01 22:50:16 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\gd.sos.McPixel
      [2012/04/29 20:40:32 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\GrabPro
      [2012/12/02 23:35:22 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\LolClient
      [2012/09/25 21:33:06 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\MAXON
      [2012/05/09 22:48:34 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\mine backup
      [2013/04/15 17:18:46 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\Orbit
      [2012/12/11 00:38:20 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\Origin
      [2012/04/29 20:40:10 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\ProgSense
      [2012/05/08 22:36:38 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\recursos inicio minecraft
      [2012/10/20 00:01:56 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\SteelSeries
      [2013/04/13 20:37:38 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\TuneUp Software
      [2013/04/15 12:24:19 | 000,000,000 | ---D | M] -- C:\Users\Seba\AppData\Roaming\uTorrent

      ========== Purity Check ==========



      ========== Custom Scans ==========

      < %SYSTEMDRIVE%\*.* >
      [2012/12/26 13:34:00 | 004,814,568 | ---- | M] (INCA Internet Co., Ltd.) -- C:\AT-Cuarentena
      [2013/04/15 12:15:33 | 000,023,049 | ---- | M] () -- C:\AT-Destroyer.txt
      [2009/07/13 22:38:58 | 000,379,046 | R--- | M] () -- C:\bootmgr
      [2009/07/13 22:38:58 | 000,383,562 | RHS- | M] () -- C:\bootmgr~1
      [2012/04/23 16:57:47 | 000,008,192 | RHS- | M] () -- C:\BOOTSECT.BAK
      [2013/04/15 1711 | 2103,660,543 | -HS- | M] () -- C:\hiberfil.sys
      [2012/05/25 15:44:32 | 000,000,000 | RHS- | M] () -- C:\nabw.ld
      [2013/04/15 1711 | 4236,537,855 | -HS- | M] () -- C:\pagefile.sys
      [2012/05/25 15:44:32 | 000,298,312 | RHS- | M] () -- C:\YVGME

      ========== Files - Unicode (All) ==========
      [2013/04/15 1751 | 000,000,270 | ---- | M] ()(C:\Windows\tasks\NetworkUtility??.job) -- C:\Windows\tasks\NetworkUtility起動.job
      [2012/12/04 13:21:49 | 000,000,270 | ---- | C] ()(C:\Windows\tasks\NetworkUtility??.job) -- C:\Windows\tasks\NetworkUtility起動.job

      < End of report >
      gracias por su atencion