• Registrarse
  • Iniciar sesión


  • Resultados 1 al 2 de 2

    HTTPS de google aparece rojo y tachado y me abre paginas de publicidad.

    Resumen del tema: HTTPS de google aparece rojo y tachado y me abre paginas de publicidad. - Saludos, en este pc al abrir google noto que el HTTPS esta tachado en rojo y el candado aparece con una X Y uando doy buscar algo me abre paginas de publicidad. Aqui el reporte ...

    1. #1
      Usuario Avatar de Salvagrion
      Registrado
      abr 2009
      Ubicación
      Venezuela
      Mensajes
      15

      HTTPS de google aparece rojo y tachado y me abre paginas de publicidad.

      Saludos, en este pc al abrir google noto que el HTTPS esta tachado en rojo y el candado aparece con una X
      Y uando doy buscar algo me abre paginas de publicidad.

      Aqui el reporte del Malwarebytes, del ADWCLEANER, del AT-DESTROYER
      Malwarebytes Anti-Malware 1.75.0.1300
      www.malwarebytes.org

      Versión de la Base de Datos: v2013.09.23.10

      Windows 7 Service Pack 1 x86 NTFS (Modo Seguro/Red)
      Internet Explorer 10.0.9200.16686
      asistente :: ASISTENTE [administrador]

      26/09/2013 12:21:04 p.m.
      mbam-log-2013-09-26 (12-21-04).txt

      Tipos de Análisis: Análisis Completo (C:\|)
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 362917
      Tiempo transcurrido: 31 minuto(s), 56 segundo(s)

      Procesos en Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 26
      HKLM\SYSTEM\CurrentControlSet\Services\Update WebConnect (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{2316c625-b487-4410-a1a5-ff040b65245f} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCR\TypeLib\{d8caf2df-52d3-42cf-9ddb-f4ff828db4f8} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCR\Interface\{7C28CEF1-A4A6-4B6A-8B97-C44F1267753C} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{2316C625-B487-4410-A1A5-FF040B65245F} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Settings\{2316C625-B487-4410-A1A5-FF040B65245F} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{2316C625-B487-4410-A1A5-FF040B65245F} (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCR\AppID\{38495740-0035-4471-851E-F5BBB86AB085} (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCR\AppID\{72D89EBF-0C5D-4190-91FD-398E45F1D007} (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3} (PUP.Optional.BrowseFox.A) -> En cuarentena y eliminado con éxito.
      HKCR\CLSID\{4AA46D49-459F-4358-B4D1-169048547C23} (PUP.Optional.BrowseFox.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\Stats\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A1E28287-1A31-4B0F-8D05-AA8C465D3C5A} (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{BAD84EE2-624D-4e7c-A8BB-41EFD720FD77} (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\WebConnect (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKCR\DefaultTabBHO.DefaultTabBrowserActiveX (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCR\DefaultTabBHO.DefaultTabBrowserActiveX.1 (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCR\AppID\DefaultTabBHO.DLL (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\DEFAULT TAB (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCU\Software\AppDataLow\Software\DefaultTab (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      HKCU\Software\BabSolution\Updater (PUP.Optional.Babylon.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\INSTALLCORE (PUP.Optional.InstallCore.A) -> En cuarentena y eliminado con éxito.
      HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\bProtectSettings (PUP.Optional.BProtector.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\SOMOTO\SDP (PUP.Optional.Somoto.A) -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\WEBCONNECT (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\DEFAULT TAB (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.

      Valores del Registro Detectados: 6
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SDP (PUP.Optional.FilesFrog.A) -> datos: C:\Users\asistente\AppData\Local\FilesFrog Update Checker\update_checker.exe /auto -> En cuarentena y eliminado con éxito.
      HKCU\SOFTWARE\Default Tab|Version (PUP.Optional.DefaultTab.A) -> datos: 2.0.14.0 -> En cuarentena y eliminado con éxito.
      HKCU\Software\InstallCore|tb (PUP.Optional.InstallCore.A) -> datos: 0S1S1T0E1J1L1H1R -> En cuarentena y eliminado con éxito.
      HKCU\Software\Somoto\SDP|affid (PUP.Optional.Somoto.A) -> datos: soundfrost -> En cuarentena y eliminado con éxito.
      HKCU\Software\WebConnect|iid (PUP.Optional.WebConnect.A) -> datos: def_WebConnect -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Default Tab|Version (PUP.Optional.DefaultTab.A) -> datos: 2.0.14.0 -> En cuarentena y eliminado con éxito.

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 4
      C:\Program Files\WebConnect (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\FilesFrog Update Checker (PUP.Optional.FilesFrog.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker (PUP.Optional.FilesFrog.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.

      Archivos Detectados: 37
      C:\Users\asistente\AppData\Local\FilesFrog Update Checker\update_checker.exe (PUP.Optional.FilesFrog.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\updateWebConnect.exe (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\WebConnectBHO.dll (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\$Recycle.Bin\S-1-5-21-3561229115-2617878382-429333614-1109\$RJPVPP7.exe (PUP.Optional.BundledToolBar.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\WebConnect.Common.dll (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\PTEWKK4N\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate[1].exe (PUP.Optional.Somoto) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R5FCBXRW\IminentSetup-1-[1].exe (PUP.Optional.Iminent) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\R5FCBXRW\Setup[1].exe (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Temp\FLVPlayerUpdate_downloader_by_FLVPlayerUpdate.exe (PUP.Optional.Somoto) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Temp\IminentSetup-1-.exe (PUP.Optional.Iminent) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Temp\run.exe (PUP.Optional.Somoto) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Temp\is1070216317\16484020_stp\WebConnect.exe (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Temp\nstDAD.tmp-2\APN_ATU3_.exe (PUP.Optional.BundledToolBar.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\Downloads\SoftonicDownloader_para_atube-catcher.exe (PUP.Optional.Softonic) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\Downloads\SoftonicDownloader_para_jdownloader.exe (PUP.Optional.Softonic) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\ieakfmpjhljbpbfpldjkddkjmmgjmgon.crx (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\Microsoft.Win32.TaskScheduler.dll (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\sqlite3.exe (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\updateWebConnect.InstallState (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\WebConnect.ico (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Program Files\WebConnect\WebConnectUninstall.exe (PUP.Optional.WebConnect.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\bProtector Web Data (PUP.Optional.BProtector.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\bprotectorpreferences (PUP.Optional.BProtector.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Check for Updates.lnk (PUP.Optional.FilesFrog.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\FilesFrog Update Checker\Uninstall.lnk (PUP.Optional.FilesFrog.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\addon.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\amazon_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\DefaultTabBHO.cfg (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\DT.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\ebay_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\facebook_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\imdb_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\searchhere.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\search_here_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\twitter_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\wikipedia_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.
      C:\Users\asistente\AppData\Roaming\DefaultTab\DefaultTab\youtube_ie.ico (PUP.Optional.DefaultTab.A) -> En cuarentena y eliminado con éxito.

      fin)

      # AdwCleaner v3.005 - Reporte Creado 26/09/2013 en 13:06:30
      # Actualizado 22/09/2013 por Xplode
      # Sistema Operativo : Windows 7 Professional Service Pack 1 (32 bits)
      # Nombre de usuario : asistente - ASISTENTE
      # Ejecutado desde : C:\Users\asistente\Desktop\adwcleaner.exe
      # Opción : Limpiar

      ***** [ Servicios ] *****


      ***** [ Archivos / Carpetas ] *****

      Carpeta Borrar : C:\ProgramData\apn
      Carpeta Borrar : C:\ProgramData\BrowserDefender
      Carpeta Borrar : C:\Program Files\TotalRecipeSearch_14EI
      Carpeta Borrar : C:\Users\asistente\AppData\Local\Softonic
      Carpeta Borrar : C:\Users\asistente\AppData\LocalLow\delta
      Carpeta Borrar : C:\Users\asistente\AppData\LocalLow\Softonic
      Carpeta Borrar : C:\Users\asistente\AppData\Roaming\DefaultTab
      Carpeta Borrar : C:\Users\asistente\AppData\Roaming\Movdap
      Carpeta Borrar : C:\Users\asistente\AppData\Roaming\pdfforge
      Carpeta Borrar : C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\BrowserDefender
      Carpeta Borrar : C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Softonic

      ***** [ Accesos directos ] *****


      ***** [ Registro ] *****

      Clave Borrar : HKLM\SOFTWARE\Google\Chrome\Extensions\ieakfmpjhljbpbfpldjkddkjmmgjmgon
      Valor Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Run [Softonic For Windows]
      Clave Borrar : HKLM\SOFTWARE\Classes\AppID\escorTlbr.DLL
      Clave Borrar : HKLM\SOFTWARE\Classes\delta.deltadskBnd
      Clave Borrar : HKLM\SOFTWARE\Classes\delta.deltadskBnd.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Prod.cap
      Clave Borrar : HKLM\SOFTWARE\Classes\TotalRecipeSearch_14Installer.Start
      Clave Borrar : HKLM\SOFTWARE\Classes\TotalRecipeSearch_14Installer.Start.1
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\WebCakeDesktop_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\MozillaPlugins\@ei.TotalRecipeSearch_14.com/Plugin
      Clave Borrar : HKCU\Software\5fed6d9b769bd41
      Clave Borrar : HKLM\SOFTWARE\5fed6d9b769bd41
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_google-desktop_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_google-desktop_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_posteriza_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_posteriza_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_windows-live-messenger-2012_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SoftonicDownloader_para_windows-live-messenger-2012_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\Classes\AppID\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
      Clave Borrar : HKLM\SOFTWARE\Classes\AppID\{7ABBFE1C-E485-44AA-8F36-353751B4124D}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{FB684D26-01F4-4D9D-87CB-F486BEBA56DC}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{FD79F359-E577-46DB-AA74-D6E6B8B45BA8}
      Clave Borrar : HKLM\SOFTWARE\Classes\Interface\{3B181CF2-878B-4758-8FBD-59D8AC5AB12D}
      Clave Borrar : HKLM\SOFTWARE\Classes\Interface\{490A5A0F-1471-47FF-8BB5-719F1F5238AD}
      Clave Borrar : HKLM\SOFTWARE\Classes\Interface\{7697BC38-D0FA-454B-AC75-968B4CCABFCE}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{4E1E9D45-8BF9-4139-915C-9F83CC3D5921}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{8E5B29C2-BC6E-40BE-B881-AEE35B1F4035}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{FD79F359-E577-46DB-AA74-D6E6B8B45BA8}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{FD79F359-E577-46DB-AA74-D6E6B8B45BA8}
      Clave Borrar : HKCU\Software\BabSolution
      Clave Borrar : HKCU\Software\BI
      Clave Borrar : HKCU\Software\Softonic
      Clave Borrar : HKCU\Software\Somoto
      Clave Borrar : HKCU\Software\Webplayer
      Clave Borrar : HKLM\Software\Default Tab
      Clave Borrar : HKLM\Software\TotalRecipeSearch_14EI
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{15D2D75C-9CB2-4EFD-BAD7-B9B4CB4BC693}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\bi_uninstaller

      ***** [ Navegadores ] *****

      -\\ Internet Explorer v10.0.9200.16686


      -\\ Google Chrome v29.0.1547.76

      [ Archivo : C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\preferences ]


      *************************

      AdwCleaner[R0].txt - [4764 octets] - [26/09/2013 13:06:10]
      AdwCleaner[S0].txt - [4501 octets] - [26/09/2013 13:06:30]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [4561 octets] ##########

      ######################## AT-Destroyer [2.1] By Infospyware.
      Hora/Día/Mes/Año: 13:03:09 \\\ 26/09/2013
      AT-Destroyer 2.1 By Infospyware ---> www.infospyware.com
      Última actualización: 30/11/2012
      Opción escogida: 2 :Buscar y Destruir
      Versión Internet Explorer:9.10.9200.16686
      Google Chrome:29.0.1547.76
      Privilegios: asistente - Administrador
      Modo Actual: Modo Seguro.
      Nombre del pc: ASISTENTE
      Información del sistema operativo:X86-WIN_7-Service Pack 1
      nombre del usuario:asistente
      Lenguaje del sistema: Español



      >>>>>>> Servicios <<<<<<<



      >>>>>> Carpetas <<<<<<

      C:\ProgramData\Babylon (W32/PND.Babylon Toolbar)


      >>>>>> Archivos <<<<<<



      >>>>>> Registro <<<<<<

      HKEY_LOCAL_MACHINE\SOFTWARE\DataMngr
      HKLM\SOFTWARE\Tarma Installer
      HKEY_LOCAL_MACHINE\Software\Microsoft\Internet Explorer\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}


      >>>>>> Heurística <<<<<<



      >>>>>> Internet Explorer <<<<<<

      Start Page==www.google.com
      Local Page==C:\Windows\System32\blank.htm
      Search Page==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_search_url==http://go.microsoft.com/fwlink/?LinkId=54896
      Default_Page_URL==http://go.microsoft.com/fwlink/p/?LinkId=255141


      ''HKCU\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://www.google.com
      Default_search_url==
      Default_Page_URL==


      HKEY_USERS\S-1-5-21-3561229115-2617878382-429333614-1109\Software\Microsoft\Internet Explorer\Main''
      Start Page==www.google.com
      Local Page==C:\Windows\system32\blank.htm
      Search Page==http://www.google.com
      Default_search_url==
      Default_Page_URL==


      >>>>>> Plugins Firefox <<<<<<

      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@adobe.com/FlashPlayer
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@ei.TotalRecipeSearch_14.com/Plugin
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@google.com/npPicasa3,version=3.0.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@java.com/JavaPlugin
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/GENUINE
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732
      HKEY_LOCAL_MACHINE\SOFTWARE\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=

      >>>>>> Google Chrome <<<<<<

      "homepage": "http://www.google.com/",
      "homepage_changed": true,
      "homepage_is_newtabpage": false,


      >>>>>> Extensiones Google Chrome <<<<<<

      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\6
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\epmacgekaillabiljokcfdjifdeiejfi
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\oipolchnclfaogmpaomopjibifaabgif
      C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia

      ======== Listado ===========

      [26/09/2013 12:54 p.m.] [06/11/2012 11:54 a.m.] [DI] C:\Users\asistente\AppData\Roaming\DefaultTab
      [08/06/2012 02:48 p.m.] [08/06/2012 02:48 p.m.] [DI] C:\Users\asistente\AppData\Roaming\DivX
      [16/05/2012 01:37 p.m.] [16/05/2012 10:45 a.m.] [DI] C:\Users\asistente\AppData\Roaming\Epson
      [18/04/2012 01:34 p.m.] [18/04/2012 01:34 p.m.] [DI] C:\Users\asistente\AppData\Roaming\HP
      [18/04/2012 01:34 p.m.] [18/04/2012 01:34 p.m.] [DI] C:\Users\asistente\AppData\Roaming\Identities
      [16/05/2012 10:34 a.m.] [16/05/2012 10:34 a.m.] [DI] C:\Users\asistente\AppData\Roaming\InstallShield
      [23/04/2012 12:58 p.m.] [23/04/2012 12:58 p.m.] [DI] C:\Users\asistente\AppData\Roaming\Macromedia
      [16/08/2013 02:49 p.m.] [16/08/2013 02:49 p.m.] [DI] C:\Users\asistente\AppData\Roaming\Malwarebytes
      [14/07/2009 04:37 a.m.] [18/04/2012 01:33 p.m.] [DI] C:\Users\asistente\AppData\Roaming\Media Center Programs
      [11/07/2013 02:47 p.m.] [18/04/2012 01:33 p.m.] [SDI] C:\Users\asistente\AppData\Roaming\Microsoft
      [15/08/2013 07:39 a.m.] [12/08/2013 07:36 a.m.] [DI] C:\Users\asistente\AppData\Roaming\Movdap
      [23/04/2012 01:00 p.m.] [23/04/2012 01:00 p.m.] [DI] C:\Users\asistente\AppData\Roaming\pdfforge
      [26/09/2013 07:08 a.m.] [06/11/2012 11:27 a.m.] [DI] C:\Users\asistente\AppData\Roaming\Skype
      [24/10/2012 09:08 a.m.] [24/10/2012 09:08 a.m.] [DI] C:\Users\asistente\AppData\Roaming\TightVNC
      [31/01/2013 08:53 a.m.] [31/01/2013 08:53 a.m.] [DI] C:\Users\asistente\AppData\Roaming\Windows Live Writer
      [17/05/2012 07:09 a.m.] [17/05/2012 07:09 a.m.] [DI] C:\Users\asistente\AppData\Roaming\WinRAR
      [24/09/2013 12:32 p.m.] [06/11/2012 11:24 a.m.] [D] C:\Program Files\Adobe
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\Program Files\Archivos comunes
      [26/09/2013 01:00 p.m.] [16/08/2013 02:51 p.m.] [D] C:\Program Files\CCleaner
      [25/04/2013 07:13 a.m.] [13/07/2009 10:07 p.m.] [D] C:\Program Files\Common Files
      [16/08/2013 03:35 p.m.] [30/07/2013 10:52 a.m.] [D] C:\Program Files\Comodo
      [11/04/2012 09:59 a.m.] [11/04/2012 09:59 a.m.] [D] C:\Program Files\CyberLink
      [31/07/2013 09:09 a.m.] [31/07/2013 09:02 a.m.] [D] C:\Program Files\Descargar Musica Gratis
      C:\Program Files\desktop.ini [HSA] 174 bytes( 0)
      [17/09/2013 11:44 a.m.] [09/07/2013 09:41 a.m.] [D] C:\Program Files\DsNET Corp
      [06/11/2012 11:40 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\DVD Maker
      [16/05/2012 10:43 a.m.] [16/05/2012 10:34 a.m.] [D] C:\Program Files\epson
      [16/05/2012 10:36 a.m.] [16/05/2012 10:35 a.m.] [D] C:\Program Files\Epson Software
      [11/06/2013 10:14 a.m.] [17/04/2012 03:08 p.m.] [D] C:\Program Files\Galac
      [19/08/2013 06:59 a.m.] [11/04/2012 09:55 a.m.] [D] C:\Program Files\Google
      [07/11/2012 09:26 a.m.] [07/11/2012 09:26 a.m.] [D] C:\Program Files\Hewlett-Packard
      [07/11/2012 09:19 a.m.] [12/04/2012 08:13 a.m.] [D] C:\Program Files\HP
      [16/05/2012 10:43 a.m.] [11/04/2012 10:19 p.m.] [HD] C:\Program Files\InstallShield Installation Information
      [06/11/2012 11:22 a.m.] [11/04/2012 10:16 p.m.] [D] C:\Program Files\Intel
      [12/09/2013 06:59 a.m.] [13/07/2009 10:07 p.m.] [D] C:\Program Files\Internet Explorer
      [11/04/2012 09:55 a.m.] [11/04/2012 09:55 a.m.] [D] C:\Program Files\Java
      [17/09/2013 11:47 a.m.] [17/09/2013 11:46 a.m.] [D] C:\Program Files\JDownloader
      [11/04/2012 09:55 a.m.] [11/04/2012 09:55 a.m.] [D] C:\Program Files\K-Lite Codec Pack
      [16/08/2013 02:49 p.m.] [16/08/2013 02:49 p.m.] [D] C:\Program Files\Malwarebytes' Anti-Malware
      [06/11/2012 11:22 a.m.] [11/04/2012 10:01 a.m.] [D] C:\Program Files\Microsoft Office
      [28/02/2013 03:58 p.m.] [11/04/2012 09:59 a.m.] [D] C:\Program Files\Microsoft Security Client
      [11/07/2013 06:56 a.m.] [11/04/2012 10:18 a.m.] [D] C:\Program Files\Microsoft Silverlight
      [24/01/2013 08:51 a.m.] [24/01/2013 08:51 a.m.] [D] C:\Program Files\Microsoft SkyDrive
      [19/04/2012 07:06 a.m.] [17/04/2012 03:29 p.m.] [D] C:\Program Files\Microsoft SQL Server
      [24/01/2013 08:56 a.m.] [24/01/2013 08:56 a.m.] [D] C:\Program Files\Microsoft SQL Server Compact Edition
      [11/04/2012 10:03 a.m.] [11/04/2012 10:03 a.m.] [D] C:\Program Files\Microsoft Visual Studio
      [11/04/2012 10:02 a.m.] [11/04/2012 10:02 a.m.] [D] C:\Program Files\Microsoft Visual Studio 8
      [11/04/2012 10:05 a.m.] [11/04/2012 10:03 a.m.] [D] C:\Program Files\Microsoft Works
      [17/04/2012 03:56 p.m.] [11/04/2012 10:03 a.m.] [D] C:\Program Files\Microsoft.NET
      [11/04/2012 10:03 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\MSBuild
      [24/01/2013 09:46 a.m.] [24/01/2013 09:46 a.m.] [D] C:\Program Files\MSECache
      [11/04/2012 09:57 a.m.] [11/04/2012 09:57 a.m.] [D] C:\Program Files\Nero
      [16/05/2012 10:43 a.m.] [16/05/2012 10:40 a.m.] [D] C:\Program Files\NewSoft
      [16/08/2013 02:56 p.m.] [23/04/2012 01:00 p.m.] [D] C:\Program Files\PDFCreator
      [02/04/2013 01:55 p.m.] [02/04/2013 01:55 p.m.] [D] C:\Program Files\Pro Surveillance System(EN)
      [14/07/2009 12:22 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Reference Assemblies
      [17/06/2013 07:05 a.m.] [24/01/2013 08:37 a.m.] [RD] C:\Program Files\Skype
      [27/08/2012 10:05 a.m.] [27/08/2012 10:03 a.m.] [D] C:\Program Files\Symantec
      [27/08/2012 02:19 p.m.] [27/08/2012 02:19 p.m.] [D] C:\Program Files\TotalRecipeSearch_14EI
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HD] C:\Program Files\Uninstall Information
      [11/04/2012 10:18 p.m.] [11/04/2012 10:17 p.m.] [D] C:\Program Files\VIA
      [07/05/2012 12:49 p.m.] [07/05/2012 12:49 p.m.] [D] C:\Program Files\webrec
      [11/07/2013 06:56 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Windows Defender
      [11/07/2013 06:56 a.m.] [14/07/2009 04:38 a.m.] [D] C:\Program Files\Windows Journal
      [17/06/2013 07:05 a.m.] [11/04/2012 10:18 a.m.] [D] C:\Program Files\Windows Live
      [06/11/2012 11:40 a.m.] [13/07/2009 10:07 p.m.] [D] C:\Program Files\Windows Mail
      [06/11/2012 11:40 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Windows Media Player
      [11/04/2012 10:13 p.m.] [13/07/2009 10:07 p.m.] [D] C:\Program Files\Windows NT
      [06/11/2012 11:40 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Windows Photo Viewer
      [06/11/2012 11:40 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Windows Portable Devices
      [06/11/2012 11:40 a.m.] [14/07/2009 12:22 a.m.] [D] C:\Program Files\Windows Sidebar
      [11/07/2012 07:40 a.m.] [11/04/2012 09:54 a.m.] [D] C:\Program Files\WinRAR
      [17/09/2013 12:02 p.m.] [17/09/2013 12:01 p.m.] [D] C:\Program Files\WinZip
      [09/07/2013 09:42 a.m.] [09/07/2013 09:42 a.m.] [DI] C:\ProgramData\APN
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Application Data
      [19/08/2013 06:59 a.m.] [31/07/2013 09:05 a.m.] [DI] C:\ProgramData\BrowserDefender
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Datos de programa
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Desktop
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Documentos
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Documents
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Escritorio
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Favorites
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Favoritos
      [12/04/2012 08:18 a.m.] [12/04/2012 08:15 a.m.] [DI] C:\ProgramData\Hewlett-Packard
      [12/04/2012 08:18 a.m.] [12/04/2012 08:13 a.m.] [DI] C:\ProgramData\HP
      [12/04/2012 08:17 a.m.] [12/04/2012 08:17 a.m.] [DI] C:\ProgramData\HPSSUPPLY
      C:\ProgramData\hpzinstall.log [AI] 350 bytes 0
      [16/08/2013 02:49 p.m.] [16/08/2013 02:49 p.m.] [DI] C:\ProgramData\Malwarebytes
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Menú Inicio
      [18/04/2012 02:00 p.m.] [13/07/2009 10:07 p.m.] [SDI] C:\ProgramData\Microsoft
      [13/09/2013 03:55 p.m.] [11/04/2012 10:01 a.m.] [DI] C:\ProgramData\Microsoft Help
      [24/01/2013 08:50 a.m.] [24/01/2013 08:50 a.m.] [DI] C:\ProgramData\Microsoft SkyDrive
      [05/06/2013 09:24 a.m.] [05/06/2013 09:24 a.m.] [DI] C:\ProgramData\Mozilla
      [11/04/2012 10:13 p.m.] [11/04/2012 10:13 p.m.] [HSDLI] C:\ProgramData\Plantillas
      [24/09/2013 03:52 p.m.] [24/09/2013 12:41 p.m.] [DI] C:\ProgramData\regid.1986-12.com.adobe
      [27/08/2012 10:04 a.m.] [27/08/2012 10:04 a.m.] [DI] C:\ProgramData\regid.1992_12.com.symantec
      [17/06/2013 07:05 a.m.] [11/04/2012 09:56 a.m.] [DI] C:\ProgramData\Skype
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Start Menu
      [27/08/2012 10:03 a.m.] [27/08/2012 10:03 a.m.] [DI] C:\ProgramData\Symantec
      [11/04/2012 09:59 a.m.] [11/04/2012 09:59 a.m.] [DI] C:\ProgramData\Temp
      [14/07/2009 12:23 a.m.] [14/07/2009 12:23 a.m.] [HSDLI] C:\ProgramData\Templates
      [25/09/2013 02:20 p.m.] [17/09/2013 12:01 p.m.] [DI] C:\ProgramData\WinZip
      [19/09/2013 06:59 a.m.] [19/09/2013 06:59 a.m.] [DI] C:\ProgramData\WinZipEC

      ==================== EOF ==================

    2. #2
      Usuario Avatar de Salvagrion
      Registrado
      abr 2009
      Ubicación
      Venezuela
      Mensajes
      15

      Re: HTTPS de google aparece rojo y tachado y me abre paginas de publicidad.

      Aquí el reporte del OTL

      OTL logfile created on: 26/09/2013 01:12:15 p.m. - Run 2
      OTL by OldTimer - Version 3.2.69.0 Folder = C:\Users\asistente\Desktop
      Professional Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
      Internet Explorer (Version = 9.10.9200.16686)
      Locale: 0000200A | Country: República Bolivariana de Venezuela | Language: ESV | Date Format: dd/MM/yyyy

      1.72 Gb Total Physical Memory | 0.64 Gb Available Physical Memory | 37.26% Memory free
      3.44 Gb Paging File | 2.26 Gb Available in Paging File | 65.69% Paging File free
      Paging file location(s): ?:\pagefile.sys [binary data]

      %SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files
      Drive C: | 465.66 Gb Total Space | 421.69 Gb Free Space | 90.56% Space Free | Partition Type: NTFS

      Computer Name: ASISTENTE | User Name: asistente | Logged in as Administrator.
      Boot Mode: Normal | Scan Mode: Current user
      Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

      ========== Processes (SafeList) ==========

      PRC - C:\Users\asistente\Desktop\OTL.exe (OldTimer Tools)
      PRC - C:\Archivos de programa\Google\Chrome\Application\chrome.exe (Google Inc.)
      PRC - C:\Archivos de programa\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
      PRC - c:\Archivos de programa\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Microsoft Security Client\msseces.exe (Microsoft Corporation)
      PRC - C:\Windows\System32\taskhost.exe (Microsoft Corporation)
      PRC - C:\Users\asistente\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe ()
      PRC - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
      PRC - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WLIDSVCM.EXE (Microsoft Corp.)
      PRC - C:\Archivos de programa\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\Smc.exe (Symantec Corporation)
      PRC - C:\Archivos de programa\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe (Symantec Corporation)
      PRC - C:\Windows\System32\HPSIsvc.exe (HP)
      PRC - C:\Windows\explorer.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
      PRC - C:\Windows\System32\ViakaraokeSrv.exe (VIA Technologies, Inc.)
      PRC - C:\Archivos de programa\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
      PRC - C:\Windows\System32\audiodg.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Adobe\Acrobat 10.0\Acrobat\acrotray.exe (Adobe Systems Inc.)
      PRC - C:\Archivos de programa\HP\ToolboxFX\bin\HPTLBXFX.exe (HP)
      PRC - C:\Archivos de programa\HP\hp laserjet m1522\hppfaxprintersrv.exe (Hewlett-Packard Company)
      PRC - C:\Archivos de programa\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
      PRC - C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
      PRC - C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
      PRC - C:\Archivos de programa\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
      PRC - C:\Archivos de programa\HP\HP UT\bin\hppusg.exe ()


      ========== Modules (No Company Name) ==========

      MOD - C:\Archivos de programa\Google\Chrome\Application\29.0.1547.76\ppgooglenaclpluginchrome.dll ()
      MOD - C:\Archivos de programa\Google\Chrome\Application\29.0.1547.76\pdf.dll ()
      MOD - C:\Archivos de programa\Google\Chrome\Application\29.0.1547.76\libglesv2.dll ()
      MOD - C:\Archivos de programa\Google\Chrome\Application\29.0.1547.76\libegl.dll ()
      MOD - C:\Archivos de programa\Google\Chrome\Application\29.0.1547.76\ffmpegsumo.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\Microsoft.VisualBas#\f4e49f5f51d2fa5e6190464468dff4d3\Microsoft.VisualBasic.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Web\6ebbfafc5521934f7e1c154937a2788b\System.Web.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\d473c19e69818875b9c739cad8f386a5\System.Runtime.Remoting.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.ServiceProce#\c664f44617c6a89edcc171fa8596c89d\System.ServiceProcess.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Seri#\d462f459c4353e2c628e6def1430aed7\System.Runtime.Serialization.Formatters.Soap.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\28ea347a952d20959ac6ae02d7457d39\System.Windows.Forms.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\5aa44bce7933e4de09d935848f868a4b\System.Drawing.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Deployment\53404435978580e5cae29dffd2129f74\System.Deployment.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\09db78d6068543df01862a023aca785a\System.Xml.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\8f7d83126a3cf283e5ac97f2d6d99f12\System.Configuration.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\5d22a30e587e2cac106b81fb351e7c08\System.ni.dll ()
      MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\9a6c1b7af18b4d5a91dc7f8d6617522f\mscorlib.ni.dll ()
      MOD - C:\Users\asistente\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe ()
      MOD - C:\Windows\System32\IccLibDll.dll ()
      MOD - C:\Windows\assembly\GAC\Interop.hpqusg\3.0.0.0__a53cf5803f4c3827\Interop.hpqusg.dll ()
      MOD - C:\Archivos de programa\VIA\VIAudioi\VDeck\skin.dll ()
      MOD - C:\Archivos de programa\VIA\VIAudioi\VDeck\QsApoApi.dll ()
      MOD - C:\Archivos de programa\VIA\VIAudioi\VDeck\Dts2ApoApi.dll ()
      MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_es_b77a5c561934e089\mscorlib.resources.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\HPFaxUtilities.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\Alerts.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\HPAppTools.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\PLSDMXMLObjects.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\AppConstants.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\DMBaseObjects.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\HPToolkit.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\HPTools.dll ()
      MOD - C:\Archivos de programa\HP\ToolboxFX\bin\NativeUtils.dll ()
      MOD - C:\Archivos de programa\HP\HP UT LEDM\bin\HPTools.dll ()
      MOD - C:\Archivos de programa\HP\HP UT LEDM\bin\HPToolkit.dll ()
      MOD - C:\Windows\assembly\GAC_MSIL\System.Deployment.resources\2.0.0.0_es_b03f5f7f11d50a3a\System.Deployment.resources.dll ()
      MOD - C:\Archivos de programa\Epson Software\Event Manager\Assistants\Scan Assistant\ScanEngine.dll ()
      MOD - C:\Archivos de programa\Epson Software\Event Manager\Assistants\Scan Assistant\Satwain.dll ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\HPUsageTracking.dll ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\hppusg.exe ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\HPToolkit.dll ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\Enumeration.dll ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\HPTools.dll ()
      MOD - C:\Archivos de programa\HP\HP UT\bin\HPStreamsInterface.dll ()
      MOD - C:\Archivos de programa\WinRAR\rarext.dll ()


      ========== Services (SafeList) ==========

      SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\System32\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
      SRV - (SkypeUpdate) -- C:\Archivos de programa\Skype\Updater\Updater.exe (Skype Technologies)
      SRV - (WinDefend) -- C:\Archivos de programa\Windows Defender\MpSvc.dll (Microsoft Corporation)
      SRV - (AdobeARMservice) -- C:\Archivos de programa\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
      SRV - (NisSrv) -- c:\Archivos de programa\Microsoft Security Client\NisSrv.exe (Microsoft Corporation)
      SRV - (MsMpSvc) -- c:\Archivos de programa\Microsoft Security Client\MsMpEng.exe (Microsoft Corporation)
      SRV - (cphs) -- C:\Windows\System32\IntelCpHeciSvc.exe (Intel Corporation)
      SRV - (fsssvc) -- C:\Archivos de programa\Windows Live\Family Safety\fsssvc.exe (Microsoft Corporation)
      SRV - (wlidsvc) -- C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
      SRV - (SmcService) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\Smc.exe (Symantec Corporation)
      SRV - (SNAC) -- C:\Archivos de programa\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\snac.exe (Symantec Corporation)
      SRV - (WatAdminSvc) -- C:\Windows\System32\Wat\WatAdminSvc.exe (Microsoft Corporation)
      SRV - (SepMasterService) -- C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\ccSvcHst.exe (Symantec Corporation)
      SRV - (odserv) -- C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\ODSERV.EXE (Microsoft Corporation)
      SRV - (HPSIService) -- C:\Windows\System32\HPSIsvc.exe (HP)
      SRV - (VIAKaraokeService) -- C:\Windows\System32\ViakaraokeSrv.exe (VIA Technologies, Inc.)
      SRV - (SQLWriter) -- C:\Archivos de programa\Microsoft SQL Server\90\Shared\sqlwriter.exe (Microsoft Corporation)
      SRV - (MSSQL$GALACSQLX05) -- C:\Archivos de programa\Microsoft SQL Server\MSSQL.1\MSSQL\Binn\sqlservr.exe (Microsoft Corporation)
      SRV - (SQLBrowser) -- C:\Archivos de programa\Microsoft SQL Server\90\Shared\sqlbrowser.exe (Microsoft Corporation)
      SRV - (MSSQLServerADHelper) -- C:\Archivos de programa\Microsoft SQL Server\90\Shared\sqladhlp90.exe (Microsoft Corporation)
      SRV - (WMPNetworkSvc) -- C:\Archivos de programa\Windows Media Player\wmpnetwk.exe (Microsoft Corporation)
      SRV - (HP LaserJet Service) -- C:\Archivos de programa\HP\HPLaserJetService\HPLaserJetService.exe (HP)
      SRV - (StorSvc) -- C:\Windows\System32\StorSvc.dll (Microsoft Corporation)
      SRV - (SensrSvc) -- C:\Windows\System32\sensrsvc.dll (Microsoft Corporation)
      SRV - (PeerDistSvc) -- C:\Windows\System32\PeerDistSvc.dll (Microsoft Corporation)
      SRV - (Microsoft Office Groove Audit Service) -- C:\Archivos de programa\Microsoft Office\Office12\GrooveAuditService.exe (Microsoft Corporation)
      SRV - (ose) -- C:\Archivos de programa\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)


      ========== Driver Services (SafeList) ==========

      DRV - (NAVEX15) -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20130925.023\NAVEX15.SYS (Symantec Corporation)
      DRV - (NAVENG) -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\VirusDefs\20130925.023\NAVENG.SYS (Symantec Corporation)
      DRV - (BHDrvx86) -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\BASHDefs\20130913.014\BHDrvx86.sys (Symantec Corporation)
      DRV - (eeCtrl) -- C:\Archivos de programa\Common Files\Symantec Shared\EENGINE\eeCtrl.sys (Symantec Corporation)
      DRV - (EraserUtilRebootDrv) -- C:\Archivos de programa\Common Files\Symantec Shared\EENGINE\EraserUtilRebootDrv.sys (Symantec Corporation)
      DRV - (NisDrv) -- C:\Windows\System32\drivers\NisDrvWFP.sys (Microsoft Corporation)
      DRV - (mvusbews) -- C:\Windows\System32\drivers\mvusbews.sys (Marvell Semiconductor, Inc.)
      DRV - (IDSVix86) -- C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\Definitions\IPSDefs\20130923.003\IDSvix86.sys (Symantec Corporation)
      DRV - (SymEvent) -- C:\Windows\System32\drivers\SYMEVENT.SYS (Symantec Corporation)
      DRV - (SysPlant) -- C:\Windows\System32\drivers\SysPlant.sys (Symantec Corporation)
      DRV - (RdpVideoMiniport) -- C:\Windows\System32\drivers\rdpvideominiport.sys (Microsoft Corporation)
      DRV - (TsUsbFlt) -- C:\Windows\System32\drivers\TsUsbFlt.sys (Microsoft Corporation)
      DRV - (SyDvCtrl) -- C:\Archivos de programa\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\SyDvCtrl32.sys (Symantec Corporation)
      DRV - (SYMNETS) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\symnets.sys (Symantec Corporation)
      DRV - (SRTSP) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\srtsp.sys (Symantec Corporation)
      DRV - (SRTSPX) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\srtspx.sys (Symantec Corporation)
      DRV - (SymEFA) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\SymEFA.sys (Symantec Corporation)
      DRV - (SymDS) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\SymDS.sys (Symantec Corporation)
      DRV - (SymIRON) -- C:\Windows\System32\drivers\SEP\0C01044D\0191.105\x86\Ironx86.sys (Symantec Corporation)
      DRV - (Teefer2) -- C:\Windows\System32\drivers\Teefer.sys (Symantec Corporation)
      DRV - (VIAHdAudAddService) -- C:\Windows\System32\drivers\viahduaa.sys (VIA Technologies, Inc.)
      DRV - (vmbus) -- C:\Windows\System32\drivers\vmbus.sys (Microsoft Corporation)
      DRV - (storflt) -- C:\Windows\System32\drivers\vmstorfl.sys (Microsoft Corporation)
      DRV - (storvsc) -- C:\Windows\System32\drivers\storvsc.sys (Microsoft Corporation)
      DRV - (WinUsb) -- C:\Windows\System32\drivers\winusb.sys (Microsoft Corporation)
      DRV - (VMBusHID) -- C:\Windows\System32\drivers\VMBusHID.sys (Microsoft Corporation)
      DRV - (s3cap) -- C:\Windows\System32\drivers\vms3cap.sys (Microsoft Corporation)
      DRV - (MEI) -- C:\Windows\System32\drivers\HECI.sys (Intel Corporation)
      DRV - (L1C) -- C:\Windows\System32\drivers\L1C62x86.sys (Atheros Communications, Inc.)


      ========== Standard Registry (All) ==========


      ========== Internet Explorer ==========

      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Page_URL = MSN.com
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Search_URL = Bing
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Default_Secondary_Page_URL = [binary data]
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Extensions Off Page = about:NoAdd-ons
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\System32\blank.htm
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Bing
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Security Risk Page = about:SecurityRisk
      IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
      IE - HKLM\..\SearchScopes,DefaultScope =
      IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\system32\blank.htm
      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = Google
      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = Google
      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = Skype, Outlook y más en MSN Latinoamérica |Noticias, deportes, entretenimiento, video y más
      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-VE
      IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = DF 61 F3 45 36 BC CD 01 [binary data]
      IE - HKCU\..\URLSearchHook: {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\System32\ieframe.dll (Microsoft Corporation)
      IE - HKCU\..\URLSearchHook: {D8278076-BC68-4484-9233-6E7F1628B56C} - No CLSID value found
      IE - HKCU\..\SearchScopes,DefaultScope =
      IE - HKCU\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.bing.com/search?FORM=UP72DF&PC=UP72&dt=082213&q={searchTerms}&src=IE-SearchBox
      IE - HKCU\..\SearchScopes\{7CA1DAF6-3C3D-45FF-857F-8B0E35FDD24F}: "URL" = http://www.google.com/search?q={searchTerms}&rlz=1I7GGLD_es&ie={inputEncoding}&oe={outputEncoding}&sourceid=ie7
      IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 1
      IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyServer" = firewall:8080


      ========== FireFox ==========

      FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF32_11_8_800_168.dll ()
      FF - HKLM\Software\MozillaPlugins\@google.com/npPicasa3,version=3.0.0: C:\Program Files\Google\Picasa3\npPicasa3.dll (Google, Inc.)
      FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
      FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files\Microsoft Silverlight\5.1.20513.0\npctrl.dll ( Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=16.4.3505.0912: C:\Program Files\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
      FF - HKLM\Software\MozillaPlugins\@real.com/nppl3260;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nppl3260.dll (RealNetworks, Inc.)
      FF - HKLM\Software\MozillaPlugins\@real.com/nprpjplug;version=6.0.12.732: C:\Program Files\K-Lite Codec Pack\Real\browser\plugins\nprpjplug.dll (RealNetworks, Inc.)
      FF - HKLM\Software\MozillaPlugins\@real.com/nsJSRealPlayerPlugin;version=: File not found
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files\Google\Update\1.3.21.153\npGoogleUpdate3.dll (Google Inc.)
      FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\{BBDA0591-3099-440a-AA10-41764D9DB4DB}: C:\ProgramData\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Data\IPSFFPlgn\ [2013/09/26 13:07:32 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Hewlett-Packard\SmartPrint\QPExtension [2011/01/26 14:27:28 | 000,000,000 | ---D | M]
      FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Browser\WCFirefoxExtn [2013/09/24 12:35:02 | 000,000,000 | ---D | M]
      FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Descargar Musica Gratis\SoundFrost.xpi [2013/07/31 09:02:45 | 000,038,411 | ---- | M] ()
      FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\[email protected]: C:\Program Files\Descargar Musica Gratis\keepvid.xpi [2013/07/31 09:09:25 | 000,035,009 | ---- | M] ()


      ========== Chrome ==========

      CHR - default_search_provider: Google (Enabled)
      CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
      CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
      CHR - homepage: Google
      CHR - Extension: Chrome In-App Payments service = C:\Users\asistente\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.0.4.11_1\

      O1 HOSTS File: ([2013/09/24 12:41:02 | 000,000,852 | ---- | M]) - C:\Windows\System32\drivers\etc\hosts
      O1 - Hosts: 127.0.0.1 activate.adobe.com
      O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
      O2 - BHO: (keepvid.com) - {49ed9900-38cd-453c-bba7-3f2613317f5a} - C:\Archivos de programa\Descargar Musica Gratis\keepvid.dll (keepvid.com Company)
      O2 - BHO: (Symantec Intrusion Prevention) - {6D53EC84-6AAE-4787-AEEE-F4628F01010C} - C:\Archivos de programa\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\IPS\IPSBHO.dll (Symantec Corporation)
      O2 - BHO: (Groove GFS Browser Helper) - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Archivos de programa\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
      O2 - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
      O2 - BHO: (Adobe PDF Conversion Toolbar Helper) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O2 - BHO: (SoundFrost) - {d997c836-ff82-4519-b459-1482ba942a4f} - C:\Archivos de programa\Descargar Musica Gratis\SoundFrost.dll (SoundFrost Company)
      O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll (Sun Microsystems, Inc.)
      O2 - BHO: (SmartSelect Class) - {F4971EE7-DAA0-4053-9964-665D8EE6A077} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O3 - HKLM\..\Toolbar: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O3 - HKCU\..\Toolbar\WebBrowser: (no name) - {41545534-2D56-3700-76A7-7A786E7484D7} - No CLSID value found.
      O3 - HKCU\..\Toolbar\WebBrowser: (Adobe PDF) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [] File not found
      O4 - HKLM..\Run: [Acrobat Assistant 8.0] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrotray.exe (Adobe Systems Inc.)
      O4 - HKLM..\Run: [Adobe Acrobat Speed Launcher] C:\Program Files\Adobe\Acrobat 10.0\Acrobat\Acrobat_sl.exe (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [Adobe ARM] C:\Program Files\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
      O4 - HKLM..\Run: [EEventManager] C:\Archivos de programa\Epson Software\Event Manager\EEventManager.exe (SEIKO EPSON CORPORATION)
      O4 - HKLM..\Run: [GrooveMonitor] C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe (Microsoft Corporation)
      O4 - HKLM..\Run: [HDAudDeck] C:\Program Files\VIA\VIAudioi\VDeck\VDeck.exe (VIA)
      O4 - HKLM..\Run: [HotKeysCmds] C:\Windows\System32\hkcmd.exe (Intel Corporation)
      O4 - HKLM..\Run: [HP LaserJet M1522 MFP Series Fax] C:\Program Files\HP\hp LaserJet M1522\hppfaxprintersrv.exe (Hewlett-Packard Company)
      O4 - HKLM..\Run: [HP Software Update] C:\Archivos de programa\HP\HP Software Update\hpwuSchd2.exe (Hewlett-Packard Co.)
      O4 - HKLM..\Run: [HPUsageTracking] C:\Program Files\HP\HP UT\bin\hppusg.exe ()
      O4 - HKLM..\Run: [HPUsageTrackingLEDM] C:\Program Files\HP\HP UT LEDM\bin\hppusg.exe (Hewlett-Packard Company)
      O4 - HKLM..\Run: [IgfxTray] C:\Windows\System32\igfxtray.exe (Intel Corporation)
      O4 - HKLM..\Run: [MSC] c:\Program Files\Microsoft Security Client\msseces.exe (Microsoft Corporation)
      O4 - HKLM..\Run: [Persistence] C:\Windows\System32\igfxpers.exe (Intel Corporation)
      O4 - HKLM..\Run: [ToolBoxFX] C:\Program Files\HP\ToolBoxFX\bin\HPTLBXFX.exe (HP)
      O4 - HKCU..\Run: [FLV Player] C:\Users\asistente\AppData\Local\WebPlayer\FLV Player\WebPlayer.exe ()
      O4 - HKCU..\Run: [RESTART_STICKY_NOTES] C:\Windows\System32\StikyNot.exe (Microsoft Corporation)
      O4 - HKCU..\Run: [Skype] C:\Program Files\Skype\Phone\Skype.exe (Skype Technologies S.A.)
      O4 - Startup: C:\Users\asistente\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla e Inicio rápido de OneNote 2007.lnk = C:\Archivos de programa\Microsoft Office\Office12\ONENOTEM.EXE (Microsoft Corporation)
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableInstallerDetection = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableSecureUIAPaths = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUIADesktopToggle = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableVirtualization = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ValidateAdminCodeSignatures = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: dontdisplaylastusername = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticecaption =
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: legalnoticetext =
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: scforceoption = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: shutdownwithoutlogon = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: undockwithoutlogon = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 0
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: smbakEnableLUA = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: smbakConsentPromptBehaviorAdmin = 5
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_TEXT = 1
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_BITMAP = 2
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_OEMTEXT = 7
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIB = 8
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_PALETTE = 9
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_UNICODETEXT = 13
      O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System\UIPI\Clipboard\ExceptionFormats: CF_DIBV5 = 17
      O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
      O8 - Extra context menu item: Add to Google Photos Screensa&ver - C:\Windows\System32\GPhotos.scr (Google Inc.)
      O8 - Extra context menu item: Append Link Target to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O8 - Extra context menu item: Append to Existing PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O8 - Extra context menu item: Convert Link Target to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O8 - Extra context menu item: Convert to Adobe PDF - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEFavClient.dll (Adobe Systems Incorporated)
      O8 - Extra context menu item: E&xportar a Microsoft Excel - C:\Archivos de programa\Microsoft Office\Office12\EXCEL.EXE (Microsoft Corporation)
      O9 - Extra Button: @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
      O9 - Extra 'Tools' menuitem : @C:\Program Files\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1003 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll (Microsoft Corporation)
      O9 - Extra Button: HP Smart Print - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Archivos de programa\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
      O9 - Extra 'Tools' menuitem : SmartPrint - {22CC3EBD-C286-43aa-B8E6-06B115F74162} - C:\Archivos de programa\Hewlett-Packard\SmartPrint\smartprintsetup.exe (Hewlett-Packard)
      O9 - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra 'Tools' menuitem : &Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office12\ONBttnIE.dll (Microsoft Corporation)
      O9 - Extra Button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\Archivos de programa\Microsoft Office\Office12\REFIEBAR.DLL (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000001 [] - C:\Windows\System32\nlaapi.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000002 [] - C:\Windows\System32\NapiNSP.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000003 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Windows\System32\pnrpnsp.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000005 [] - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000006 [] - C:\Windows\System32\winrnr.dll (Microsoft Corporation)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000007 [] - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
      O10 - NameSpace_Catalog5\Catalog_Entries\000000000008 [] - C:\Archivos de programa\Common Files\microsoft shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000007 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000008 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000009 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000010 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000011 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000012 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000013 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000014 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000015 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000017 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000019 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O10 - Protocol_Catalog9\Catalog_Entries\000000000020 - C:\Windows\System32\mswsock.dll (Microsoft Corporation)
      O13 - gopher Prefix: missing
      O16 - DPF: {108D3206-846A-4A93-BACB-F0572D043ED7} http://reimor.servepics.com:2010/webrec.cab (SurveillanceCtrl Control)
      O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_22)
      O16 - DPF: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_22)
      O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jin...ndows-i586.cab (Java Plug-in 1.6.0_22)
      O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/ge...sh/swflash.cab (Shockwave Flash Object)
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.10
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters: Domain = reimor.local
      O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{7C167839-569F-442B-848C-42209973BDB7}: DhcpNameServer = 192.168.1.10
      O18 - Protocol\Handler\about {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
      O18 - Protocol\Handler\cdl {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\dvd {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
      O18 - Protocol\Handler\file {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\ftp {79eac9e3-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\grooveLocalGWS {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Archivos de programa\Microsoft Office\Office12\GrooveSystemServices.dll (Microsoft Corporation)
      O18 - Protocol\Handler\http {79eac9e2-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\https {79eac9e5-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
      O18 - Protocol\Handler\javascript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
      O18 - Protocol\Handler\livecall - No CLSID value found
      O18 - Protocol\Handler\local {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\mailto {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
      O18 - Protocol\Handler\mhtml {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\Windows\System32\inetcomm.dll (Microsoft Corporation)
      O18 - Protocol\Handler\mk {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\Windows\System32\urlmon.dll (Microsoft Corporation)
      O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Common Files\microsoft shared\Help\hxds.dll (Microsoft Corporation)
      O18 - Protocol\Handler\ms-its {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\Windows\System32\itss.dll (Microsoft Corporation)
      O18 - Protocol\Handler\msnim - No CLSID value found
      O18 - Protocol\Handler\res {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
      O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Archivos de programa\Common Files\Skype\Skype4COM.dll (Skype Technologies)
      O18 - Protocol\Handler\tv {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\Windows\System32\MSVidCtl.dll (Microsoft Corporation)
      O18 - Protocol\Handler\vbscript {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\Windows\System32\mshtml.dll (Microsoft Corporation)
      O18 - Protocol\Handler\wlmailhtml {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Archivos de programa\Windows Live\Mail\mailcomm.dll (Microsoft Corporation)
      O18 - Protocol\Handler\wlpg {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Archivos de programa\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll (Microsoft Corporation)
      O18 - Protocol\Filter\application/octet-stream {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      O18 - Protocol\Filter\application/x-complus {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      O18 - Protocol\Filter\application/x-msdownload {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\microsoft shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
      O20 - AppInit_DLLs: (C:\PROGRA~1\Google\GOOGLE~1\GO36F4~1.DLL) - File not found
      O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\System32\userinit.exe (Microsoft Corporation)
      O20 - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\System32\SystemPropertiesPerformance.exe (Microsoft Corporation)
      O20 - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\System32\igfxdev.dll (Intel Corporation)
      O20 - Winlogon\Notify\SEP: DllName - (C:\Program Files\Symantec\Symantec Endpoint Protection\12.1.1101.401.105\Bin\WinLogoutNotifier.dll) - File not found
      O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
      O28 - HKLM ShellExecuteHooks: {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\Archivos de programa\Microsoft Office\Office12\GrooveShellExtensions.dll (Microsoft Corporation)
      O29 - HKLM SecurityProviders - (credssp.dll) - C:\Windows\System32\credssp.dll (Microsoft Corporation)
      O30 - LSA: Authentication Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (kerberos) - C:\Windows\System32\kerberos.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (msv1_0) - C:\Windows\System32\msv1_0.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (schannel) - C:\Windows\System32\schannel.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (wdigest) - C:\Windows\System32\wdigest.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (tspkg) - C:\Windows\System32\tspkg.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (pku2u) - C:\Windows\System32\pku2u.dll (Microsoft Corporation)
      O30 - LSA: Security Packages - (livessp) - C:\Windows\System32\livessp.dll (Microsoft Corp.)
      O31 - SafeBoot: AlternateShell - cmd.exe
      O32 - HKLM CDRom: AutoRun - 1
      O32 - AutoRun File - [2009/06/10 17:12:20 | 000,000,024 | ---- | M] () - C:\autoexec.bat -- [ NTFS ]
      O33 - MountPoints2\{5de611e5-28cf-11e2-b72b-002522c03adc}\Shell - "" = AutoRun
      O33 - MountPoints2\{5de611e5-28cf-11e2-b72b-002522c03adc}\Shell\AutoRun\command - "" = F:\SISetup.exe
      O33 - MountPoints2\{b0655545-8448-11e1-9a4c-806e6f6e6963}\Shell - "" = AutoRun
      O33 - MountPoints2\{b0655545-8448-11e1-9a4c-806e6f6e6963}\Shell\AutoRun\command - "" = D:\AUTORUN\MenuInstall.bat
      O34 - HKLM BootExecute: (autocheck autochk *)
      O35 - HKLM\..comfile [open] -- "%1" %*
      O35 - HKLM\..exefile [open] -- "%1" %*
      O37 - HKLM\...com [@ = comfile] -- "%1" %*
      O37 - HKLM\...exe [@ = exefile] -- "%1" %*
      O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
      O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
      O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

      ========== Files/Folders - Created Within 30 Days ==========

      [2013/09/26 13:11:53 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\asistente\Desktop\OTL.exe
      [2013/09/26 13:06:06 | 000,000,000 | ---D | C] -- C:\AdwCleaner
      [2013/09/26 13:02:48 | 000,000,000 | ---D | C] -- C:\_AT-Destroyer
      [2013/09/25 07:35:31 | 000,000,000 | ---D | C] -- C:\Users\asistente\Documents\transporte
      [2013/09/24 12:41:09 | 000,000,000 | ---D | C] -- C:\ProgramData\regid.1986-12.com.adobe
      [2013/09/24 12:35:47 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe LiveCycle ES2
      [2013/09/19 07:00:08 | 000,000,000 | ---D | C] -- C:\Users\asistente\AppData\Local\WinZip Courier
      [2013/09/19 06:59:19 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZipEC
      [2013/09/19 06:59:12 | 000,000,000 | ---D | C] -- C:\Users\asistente\AppData\Local\assembly
      [2013/09/17 13:15:05 | 000,000,000 | ---D | C] -- C:\Users\asistente\aTubeCatcher
      [2013/09/17 12:03:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinZip
      [2013/09/17 12:02:44 | 000,000,000 | ---D | C] -- C:\Users\asistente\AppData\Local\WinZip
      [2013/09/17 12:01:37 | 000,000,000 | ---D | C] -- C:\ProgramData\WinZip
      [2013/09/17 12:01:28 | 000,000,000 | ---D | C] -- C:\Program Files\WinZip
      [2013/09/17 11:46:17 | 000,000,000 | ---D | C] -- C:\Program Files\JDownloader
      [2013/09/17 11:44:33 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\aTube Catcher
      [2013/09/17 11:41:59 | 000,000,000 | ---D | C] -- C:\Users\asistente\AppData\Local\CrashRpt
      [2013/09/11 15:58:35 | 002,706,432 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\mshtml.tlb
      [2013/09/11 15:58:34 | 002,876,928 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jscript9.dll
      [2013/09/11 15:58:33 | 000,391,168 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ieui.dll
      [2013/09/11 15:58:33 | 000,061,440 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesetup.dll
      [2013/09/11 15:58:33 | 000,039,424 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\jsproxy.dll
      [2013/09/11 15:58:32 | 000,493,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\msfeeds.dll
      [2013/09/11 15:58:32 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\ie4uinit.exe
      [2013/09/11 15:58:32 | 000,033,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iernonce.dll
      [2013/09/11 15:58:31 | 000,109,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\iesysprep.dll
      [2013/09/11 15:58:31 | 000,071,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\RegisterIEPKEYs.exe
      [2013/09/11 10:50:26 | 002,348,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\win32k.sys
      [2013/09/11 10:50:26 | 000,133,056 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\drivers\ataport.sys
      [2013/09/11 10:50:25 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\winsrv.dll
      [2013/09/11 10:50:24 | 000,271,360 | ---- | C] (Microsoft Corporation) -- C:\Windows\System32\conhost.exe
      [2013/09/11 10:50:24 | 000,006,144 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-security-base-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,005,120 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-file-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-threadpool-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,608 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processthreads-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-sysinfo-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-synch-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-misc-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localregistry-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-xstate-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-processenvironment-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-namedpipe-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-memory-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-libraryloader-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-interlocked-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,584 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-heap-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-string-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-rtlsupport-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-profile-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-io-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-handle-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-fibers-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-errorhandling-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-delayload-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-debug-l1-1-0.dll
      [2013/09/11 10:50:24 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-datetime-l1-1-0.dll
      [2013/09/11 10:50:23 | 000,004,096 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-localization-l1-1-0.dll
      [2013/09/11 10:50:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-util-l1-1-0.dll
      [2013/09/11 10:50:23 | 000,003,072 | -H-- | C] (Microsoft Corporation) -- C:\Windows\System32\api-ms-win-core-console-l1-1-0.dll
      [2013/09/05 08:19:47 | 000,000,000 | ---D | C] -- C:\Users\asistente\Documents\ARCV ANUAL
      [2013/08/28 10:00:13 | 000,000,000 | ---D | C] -- C:\Users\asistente\Documents\RESCARVEN
      [2013/08/28 09:58:26 | 000,000,000 | ---D | C] -- C:\Users\asistente\Documents\fetejos
      [2013/08/28 08:50:35 | 000,000,000 | ---D | C] -- C:\Users\asistente\Documents\FOTOS MES 8
      [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

      ========== Files - Modified Within 30 Days ==========

      [2013/09/26 13:14:37 | 000,014,848 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      [2013/09/26 13:14:37 | 000,014,848 | -H-- | M] () -- C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      [2013/09/26 13:07:40 | 000,001,026 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
      [2013/09/26 13:07:16 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
      [2013/09/26 13:07:11 | 1386,225,664 | -HS- | M] () -- C:\hiberfil.sys
      [2013/09/26 13:00:11 | 000,000,965 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
      [2013/09/26 12:32:57 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\asistente\Desktop\OTL.exe
      [2013/09/26 12:02:07 | 000,000,838 | ---- | M] () -- C:\Windows\tasks\Adobe Flash Player Updater.job
      [2013/09/26 11:53:29 | 538,649,600 | ---- | M] () -- C:\Users\asistente\Documents\Outlook.pst
      [2013/09/26 11:51:17 | 000,002,743 | ---- | M] () -- C:\Users\Public\Desktop\Ret.lnk
      [2013/09/26 11:48:53 | 000,002,743 | ---- | M] () -- C:\Users\Public\Desktop\Saw.lnk
      [2013/09/26 11:45:34 | 000,002,889 | ---- | M] () -- C:\Users\Public\Desktop\Administrador de Base de Datos.lnk
      [2013/09/26 11:43:00 | 000,001,030 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
      [2013/09/25 07:04:08 | 000,468,976 | ---- | M] () -- C:\Windows\System32\FNTCACHE.DAT
      [2013/09/24 12:41:02 | 000,000,852 | ---- | M] () -- C:\Windows\System32\drivers\etc\hosts
      [2013/09/24 12:35:50 | 000,001,996 | ---- | M] () -- C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
      [2013/09/24 10:32:28 | 000,558,254 | ---- | M] () -- C:\Users\asistente\Documents\CAPI.pdf
      [2013/09/24 07:09:03 | 000,002,117 | ---- | M] () -- C:\Users\asistente\Desktop\FLV Player.lnk
      [2013/09/23 14:54:54 | 000,173,484 | ---- | M] () -- C:\Users\asistente\Documents\img20130923_14544945.pdf
      [2013/09/23 11:43:44 | 000,168,148 | ---- | M] () -- C:\Users\asistente\Documents\img20130923_11433979.pdf
      [2013/09/23 08:02:30 | 000,692,616 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerApp.exe
      [2013/09/23 08:02:30 | 000,071,048 | ---- | M] (Adobe Systems Incorporated) -- C:\Windows\System32\FlashPlayerCPLApp.cpl
      [2013/09/23 07:49:15 | 000,002,129 | ---- | M] () -- C:\Users\Public\Desktop\Google Chrome.lnk
      [2013/09/17 13:24:09 | 000,792,574 | ---- | M] () -- C:\Windows\System32\perfh00A.dat
      [2013/09/17 13:24:09 | 000,699,276 | ---- | M] () -- C:\Windows\System32\perfh009.dat
      [2013/09/17 13:24:09 | 000,176,068 | ---- | M] () -- C:\Windows\System32\perfc00A.dat
      [2013/09/17 13:24:09 | 000,139,202 | ---- | M] () -- C:\Windows\System32\perfc009.dat
      [2013/09/17 12:03:12 | 000,002,247 | ---- | M] () -- C:\Users\Public\Desktop\WinZip.lnk
      [2013/09/17 11:44:56 | 000,001,144 | ---- | M] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
      [2013/09/17 10:50:20 | 000,016,727 | ---- | M] () -- C:\Users\asistente\Documents\finiquito luis.pdf
      [1 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]

      ========== Files Created - No Company Name ==========

      [2013/09/26 13:00:11 | 000,000,965 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
      [2013/09/26 11:48:52 | 000,002,743 | ---- | C] () -- C:\Users\Public\Desktop\Saw.lnk
      [2013/09/24 12:35:50 | 000,001,996 | ---- | C] () -- C:\Users\Public\Desktop\Adobe Acrobat X Pro.lnk
      [2013/09/24 12:35:46 | 000,002,453 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat X Pro.lnk
      [2013/09/24 12:35:45 | 000,002,465 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Acrobat Distiller X.lnk
      [2013/09/24 10:32:28 | 000,558,254 | ---- | C] () -- C:\Users\asistente\Documents\CAPI.pdf
      [2013/09/23 14:54:54 | 000,173,484 | ---- | C] () -- C:\Users\asistente\Documents\img20130923_14544945.pdf
      [2013/09/23 11:43:44 | 000,168,148 | ---- | C] () -- C:\Users\asistente\Documents\img20130923_11433979.pdf
      [2013/09/17 12:03:11 | 000,002,247 | ---- | C] () -- C:\Users\Public\Desktop\WinZip.lnk
      [2013/09/17 11:47:31 | 000,001,947 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader.lnk
      [2013/09/17 11:47:28 | 000,001,891 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Uninstaller.lnk
      [2013/09/17 11:47:20 | 000,001,870 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JDownloader Update.lnk
      [2013/09/17 11:44:56 | 000,001,144 | ---- | C] () -- C:\Users\Public\Desktop\aTube Catcher.lnk
      [2013/09/17 10:50:20 | 000,016,727 | ---- | C] () -- C:\Users\asistente\Documents\finiquito luis.pdf
      [2013/09/11 07:58:44 | 000,000,930 | ---- | C] () -- C:\Users\asistente\Desktop\EPSON Scan - copia - copia.lnk
      [2013/07/31 09:02:51 | 000,001,092 | RHS- | C] () -- C:\Users\asistente\ntuser.pol
      [2012/11/27 11:09:34 | 000,000,000 | ---- | C] () -- C:\Windows\EEventManager.INI
      [2012/11/07 09:25:03 | 001,511,424 | ---- | C] () -- C:\Windows\System32\HP1100SM.EXE
      [2012/11/07 09:25:03 | 000,284,160 | ---- | C] () -- C:\Windows\System32\mvhlewsi.DLL
      [2012/11/07 09:25:03 | 000,151,552 | ---- | C] () -- C:\Windows\System32\HP1100LM.DLL
      [2012/10/10 05:32:16 | 000,272,928 | ---- | C] () -- C:\Windows\System32\igvpkrng600.bin
      [2012/10/10 05:32:16 | 000,094,208 | ---- | C] () -- C:\Windows\System32\IccLibDll.dll
      [2012/10/10 05:32:16 | 000,000,259 | ---- | C] () -- C:\Windows\System32\GfxUI.exe.config
      [2012/10/10 05:32:12 | 000,064,512 | ---- | C] () -- C:\Windows\System32\igdde32.dll
      [2012/10/10 05:32:10 | 000,009,728 | ---- | C] ( ) -- C:\Windows\System32\IGFXDEVLib.dll
      [2012/10/10 05:32:08 | 000,963,452 | ---- | C] () -- C:\Windows\System32\igcodeckrng600.bin
      [2012/09/25 10:52:06 | 000,081,920 | ---- | C] () -- C:\Windows\System32\mvusbews.dll
      [2012/09/25 10:52:06 | 000,052,736 | ---- | C] () -- C:\Windows\System32\HP1100SMs.dll
      [2012/05/16 10:36:19 | 000,073,220 | ---- | C] () -- C:\Windows\System32\EPPICPrinterDB.dat
      [2012/05/16 10:36:19 | 000,031,053 | ---- | C] () -- C:\Windows\System32\EPPICPattern131.dat
      [2012/05/16 10:36:19 | 000,029,114 | ---- | C] () -- C:\Windows\System32\EPPICPattern1.dat
      [2012/05/16 10:36:19 | 000,027,417 | ---- | C] () -- C:\Windows\System32\EPPICPattern121.dat
      [2012/05/16 10:36:19 | 000,021,021 | ---- | C] () -- C:\Windows\System32\EPPICPattern3.dat
      [2012/05/16 10:36:19 | 000,015,670 | ---- | C] () -- C:\Windows\System32\EPPICPattern5.dat
      [2012/05/16 10:36:19 | 000,013,280 | ---- | C] () -- C:\Windows\System32\EPPICPattern2.dat
      [2012/05/16 10:36:19 | 000,010,673 | ---- | C] () -- C:\Windows\System32\EPPICPattern4.dat
      [2012/05/16 10:36:19 | 000,004,943 | ---- | C] () -- C:\Windows\System32\EPPICPattern6.dat
      [2012/05/16 10:36:19 | 000,001,140 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_PT.dat
      [2012/05/16 10:36:19 | 000,001,140 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_BP.dat
      [2012/05/16 10:36:19 | 000,001,137 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_ES.dat
      [2012/05/16 10:36:19 | 000,001,130 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_FR.dat
      [2012/05/16 10:36:19 | 000,001,130 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_CF.dat
      [2012/05/16 10:36:19 | 000,001,104 | ---- | C] () -- C:\Windows\System32\EPPICPresetData_EN.dat
      [2012/05/16 10:36:19 | 000,000,097 | ---- | C] () -- C:\Windows\System32\PICSDK.ini
      [2012/05/16 10:33:56 | 000,000,044 | ---- | C] () -- C:\Windows\WFP GTS5080.ini
      [2012/04/25 10:22:20 | 000,000,017 | ---- | C] () -- C:\Users\asistente\AppData\Local\resmon.resmoncfg
      [2012/04/16 07:55:26 | 000,066,048 | ---- | C] () -- C:\Windows\System32\PrintBrmUi.exe
      [2012/04/12 08:16:33 | 000,000,608 | -HS- | C] () -- C:\Windows\System32\winzvprt5.sys
      [2012/04/12 08:16:33 | 000,000,186 | ---- | C] () -- C:\Windows\System32\hppfaxprinter5.ini
      [2012/04/12 08:14:44 | 000,000,207 | ---- | C] () -- C:\Windows\System32\AddPort.ini
      [2012/04/12 08:14:21 | 000,000,713 | ---- | C] () -- C:\Windows\hpntwksetup.ini
      [2012/04/12 08:13:11 | 000,171,106 | ---- | C] () -- C:\Windows\hppins08.dat
      [2012/04/12 08:13:11 | 000,171,036 | ---- | C] () -- C:\Windows\System32\hppins08.dat
      [2012/04/12 08:13:11 | 000,001,116 | ---- | C] () -- C:\Windows\hppmdl08.dat
      [2012/04/12 08:12:27 | 000,000,685 | ---- | C] () -- C:\Windows\System32\hppapr08.dat
      [2012/04/11 09:55:43 | 000,165,376 | ---- | C] () -- C:\Windows\System32\unrar.dll
      [2012/04/11 09:55:43 | 000,000,038 | ---- | C] () -- C:\Windows\avisplitter.ini
      [2012/04/11 09:55:42 | 000,790,528 | ---- | C] () -- C:\Windows\System32\xvidcore.dll
      [2012/04/11 09:55:42 | 000,134,144 | ---- | C] () -- C:\Windows\System32\xvidvfw.dll
      [2012/04/11 09:55:42 | 000,108,032 | ---- | C] () -- C:\Windows\System32\ff_vfw.dll

      ========== ZeroAccess Check ==========

      [2009/07/14 00:12:31 | 000,000,227 | RHS- | M] () -- C:\Windows\assembly\Desktop.ini

      [HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

      [HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
      "" = %SystemRoot%\system32\shell32.dll -- [2013/07/25 21:25:59 | 012,872,704 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Apartment

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
      "" = %systemroot%\system32\wbem\fastprox.dll -- [2010/11/20 07:49:02 | 000,606,208 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Free

      [HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]
      "" = %systemroot%\system32\wbem\wbemess.dll -- [2009/07/13 20:46:17 | 000,342,528 | ---- | M] (Microsoft Corporation)
      "ThreadingModel" = Both

      ========== LOP Check ==========

      [2012/05/16 13:37:18 | 000,000,000 | ---D | M] -- C:\Users\asistente\AppData\Roaming\Epson
      [2012/10/24 09:08:24 | 000,000,000 | ---D | M] -- C:\Users\asistente\AppData\Roaming\TightVNC
      [2013/01/31 08:53:13 | 000,000,000 | ---D | M] -- C:\Users\asistente\AppData\Roaming\Windows Live Writer

      ========== Purity Check ==========



      < End of report >