• Registrarse
  • Iniciar sesión


  • Página 1 de 2 12 ÚltimoÚltimo
    Resultados 1 al 10 de 13

    virus en el facebook de mi hija (Solucionado)

    Resumen del tema: virus en el facebook de mi hija (Solucionado) - Hola compañeros. E tenido un problema con el facebook de mi hija , cuando lo usa en mi pc se me queda la cpu a tope y esto que es de 4 núcleos , pero ...

      
    1. #1
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      virus en el facebook de mi hija (Solucionado)

      Hola compañeros.
      E tenido un problema con el facebook de mi hija , cuando lo usa en mi pc se me queda la cpu a tope y esto que es de 4 núcleos , pero no ay nada abierto.
      Lo mire en mi system explorer y era facebook , le di a terminar árbol de procesos y nada.
      Al final provoque un reset , y al conectarse mi pc a internet salto avira pro impidiendo el reinicio de un virus , se puso en marcha el escáner automático detectando 4 infecciones las cuales no elimino ,y que termine cazándolos con el infalible malwarebites .
      Aquí me pregunta , como elimino el virus del facebook de mi hija?.
      Aquí os paso el repórter del malware , a me olvide de pasar primero el cleaner por esto los pups , gracias por adelantado y felices fiestas.
      Malwarebytes Anti-Malware 1.75.0.1300
      www.malwarebytes.org

      Versión de la Base de Datos: v2013.12.19.11

      Windows 7 Service Pack 1 x64 NTFS
      Internet Explorer 10.0.9200.16750
      USUARI :: USUARI-PC [administrador]

      19/12/2013 23:05:44
      mbam-log-2013-12-19 (23-05-44).txt

      Tipos de Análisis: Análisis Rápido
      Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
      Opciones de análisis desactivados: P2P
      Objetos examinados: 230148
      Tiempo transcurrido: 9 minuto(s), 25 segundo(s)

      Procesos en Memoria Detectados: 2
      C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> 1604 -> Se eliminarán al reiniciar.
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbrmon.exe (PUP.Optional.MindSpark) -> 3572 -> Se eliminarán al reiniciar.

      Módulos de Memoria Detectados: 0
      (No se han detectado elementos maliciosos)

      Claves del Registro Detectados: 6
      HKCR\Typelib\{03119103-0854-469D-807A-171568457991} (PUP.Optional.MyScrapNook.A) -> En cuarentena y eliminado con éxito.
      HKCR\Interface\{23119123-0854-469D-807A-171568457991} (PUP.Optional.MyScrapNook.A) -> En cuarentena y eliminado con éxito.
      HKCU\Software\DC3_FEXEC (Malware.Trace) -> En cuarentena y eliminado con éxito.
      HKCU\Software\Nosibay\Bubble Dock (PUP.Optional.BubbleDock.A) -> En cuarentena y eliminado con éxito.
      HKCU\Software\Nosibay\Bubble Dock Tag (PUP.Optional.BubbleDock.A) -> En cuarentena y eliminado con éxito.
      HKLM\Software\Iminent (PUP.Optional.Iminent.A) -> En cuarentena y eliminado con éxito.

      Valores del Registro Detectados: 3
      HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|SearchProtection (PUP.Optional.SearchProtection.A) -> datos: "C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Zwinky Search Scope Monitor (PUP.Optional.MindSpark) -> datos: "C:\PROGRA~2\ZWINKY~2\bar\1.bin\5qsrchmn.exe" /m=2 /w /h -> En cuarentena y eliminado con éxito.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Run|Zwinky_5q Browser Plugin Loader (PUP.Optional.MindSpark) -> datos: C:\PROGRA~2\ZWINKY~2\bar\1.bin\5qbrmon.exe -> En cuarentena y eliminado con éxito.

      Elementos de Datos del Registro Detectados: 0
      (No se han detectado elementos maliciosos)

      Carpetas Detectadas: 1
      C:\Users\USUARI\AppData\Roaming\dclogs (Stolen.Data) -> En cuarentena y eliminado con éxito.

      Archivos Detectados: 6
      C:\Users\USUARI\AppData\Roaming\LFPLG26.exe (PUP.HackTool.H) -> En cuarentena y eliminado con éxito.
      C:\Users\USUARI\AppData\Roaming\TNXSOV70.exe (PUP.HackTool.H) -> En cuarentena y eliminado con éxito.
      C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.exe (PUP.Optional.SearchProtection.A) -> Se eliminarán al reiniciar.
      C:\Users\USUARI\AppData\Roaming\dclogs\2013-12-09-2.dc (Stolen.Data) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrchMn.exe (PUP.Optional.MindSpark) -> En cuarentena y eliminado con éxito.
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbrmon.exe (PUP.Optional.MindSpark) -> Se eliminarán al reiniciar.

      fin)

    2. #2
      Moderador
      Avatar de M@co
      Registrado
      dic 2007
      Ubicación
      America
      Mensajes
      15.820

      Re: virus en el facebook de mi hija

      Hola ALBERT E.R

      Realiza lo siguiente:

      Descarga Farbar Recovery Scan Tool y guárdalo en el escritorio de windows.
      Nota 1: Tienes que descargar una versión compatible con tu sistema operativo, si no sabes si tu sistema es de 32 bit o de 64 bit lee esta FAQ
      Nota 2: No utilices un gestor de descarga, usa el navegador y bájala directamente en el escritorio de windows.
      1. Cierra todas las ventanas abiertas.
      2. Clic derecho al icono de Farbar Recover Scan Tool y selecciona la opción "Ejecutar como administrador". (Si usas XP dale doble clic)
      3. Acepta la clausula de descarga de responsabilidad o disclaimer.
      4. Presiona el botón Scan y permite que el programa se ejecute.
      5. Al terminar el análisis se abrirán dos blocks de notas, FRST.txt y Addition.txt.
      6. Pega el contenido de ambos en la próxima respuesta.


      Saludos.

      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis


      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    3. #3
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 20-12-2013 02
      Ran by USUARI (administrator) on USUARI-PC on 20-12-2013 17:07:00
      Running from C:\Users\USUARI\Desktop
      Windows 7 Ultimate Service Pack 1 (X64) OS Language: Spanish Modern Sort
      Internet Explorer Version 10
      Boot Mode: Normal

      ==================== Processes (Whitelisted) =================

      (Faronics Corporation) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe
      (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
      (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
      (IObit) C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe
      (ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
      (APN LLC.) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe
      () C:\Windows\SysWOW64\ASGT.exe
      (Nuance Communications, Inc.) C:\Program Files (x86)\Common Files\Nuance\dgnsvc.exe
      (IObit) C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe
      (Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\VS7DEBUG\mdm.exe
      (Nero AG) C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe
      (Pandora.TV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe
      () C:\Windows\SysWOW64\PnkBstrA.exe
      (StarWind Software) C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe
      (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
      (COMPANYVERS_NAME) C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbarsvc.exe
      (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
      (PandoraTV) C:\Program Files (x86)\PANDORA.TV\PanService\KMPProcess.exe
      () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe
      (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
      (Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
      ( ) C:\Program Files (x86)\CursorXP\CursorXP.exe
      () C:\Program Files (x86)\HTC Home\Clock.exe
      (Carlos Córdova - Desarrollo de Software 2005-2012) C:\Program Files (x86)\MIAGENDAV20\MiAV20.exe
      () C:\seguridad\netD.exe
      (Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
      (Almico Software (www.almico.com)) C:\Program Files (x86)\SpeedFan\speedfan.exe
      (APN) C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
      (Mister Group) C:\Program Files (x86)\System Explorer\SystemExplorer.exe
      (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
      (Faronics Corporation) C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\_$Df\FrzState2k.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe
      (Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avwebgrd.exe
      (Mister Group) C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe
      (Microsoft Corporation) C:\Windows\System32\audiodg.exe

      ==================== Registry (Whitelisted) ==================

      HKLM\...\Run: [AdobeAAMUpdater-1.0] - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [472984 2013-09-25] (Adobe Systems Incorporated)
      HKLM\...\Run: [Zwinky Home Page Guard 64 bit] - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe [548936 2013-11-29] ()
      HKLM\...\Run: [RTHDVCPL] - C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7205592 2013-12-18] (Realtek Semiconductor)
      HKLM-x32\...\RunOnce: [Malwarebytes Anti-Malware (cleanup)] - rundll32.exe "C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll",ProcessCleanupScript [1127496 2013-04-04] (Malwarebytes Corporation)
      HKCU\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
      HKCU\...\Run: [CursorXP] - C:\Program Files (x86)\CursorXP\CursorXP.exe [140288 2005-01-19] ( )
      HKCU\...\Run: [Clock Widget (HTC Home)] - C:\Program Files (x86)\HTC Home\Clock.exe [2036736 2011-11-28] ()
      HKLM-x32\...\Run: [GrooveMonitor] - C:\Program Files (x86)\Microsoft Office\Office12\GrooveMonitor.exe [31016 2006-10-26] (Microsoft Corporation)
      HKLM-x32\...\Run: [Adobe Creative Cloud] - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2237328 2013-11-05] (Adobe Systems Incorporated)
      HKLM-x32\...\Run: [SunJavaUpdateSched] - C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [254336 2013-07-02] (Oracle Corporation)
      HKLM-x32\...\Run: [ApnTBMon] - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\Updater\TBNotifier.exe [1673680 2013-10-23] (APN)
      HKLM-x32\...\Run: [avgnt] - C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [684600 2013-12-19] (Avira Operations GmbH & Co. KG)
      HKLM-x32\...\Run: [SystemExplorerAutoStart] - C:\Program Files (x86)\System Explorer\SystemExplorer.exe [2860064 2013-11-30] (Mister Group)
      HKU\UpdatusUser\...\Run: [SearchProtection] - "C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
      HKU\UpdatusUser\...\Run: [AlcoholAutomount] - C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
      HKU\UpdatusUser\...\Run: [CursorXP] - C:\Program Files (x86)\CursorXP\CursorXP.exe [140288 2005-01-19] ( )
      HKU\UpdatusUser\...\Run: [Clock Widget (HTC Home)] - C:\Program Files (x86)\HTC Home\Clock.exe [2036736 2011-11-28] ()
      Startup: C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\netD - Acceso directo.lnk
      ShortcutTarget: netD - Acceso directo.lnk -> C:\seguridad\netD.exe ()
      Startup: C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\SpeedFan.lnk
      ShortcutTarget: SpeedFan.lnk -> C:\Program Files (x86)\SpeedFan\speedfan.exe (Almico Software (www.almico.com))
      SSODL-x32: IconPackager Repair - {1799460C-0BC8-4865-B9DF-4A36CD703FF0} - C:\Program Files (x86)\Stardock\Object Desktop\IconPackager\iprepair.dll (Stardock.net, Inc)
      BootExecute: autocheck autochk * BootDefrag.exe

      ==================== Internet (Whitelisted) ====================

      HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = https://www.google.es/
      HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://es.msn.com/?ocid=iehp
      HKCU\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = es-ES
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547
      URLSearchHook: HKCU - (No Name) - {cc2e2b99-14d3-4516-883c-9ea147f594ef} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547
      SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKLM-x32 - DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
      SearchScopes: HKLM-x32 - {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
      SearchScopes: HKCU - DefaultScope {26288071-35A6-4272-B9D0-43B7FDE4ED10} URL = http://es.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}
      SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=ES&userid=d67e00d6-7f6e-45d0-9f2f-8cfc1d78dd6f&searchtype=ds&q={searchTerms}&installDate=01/07/2013
      SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4299F8D1110D5A87&affID=119357&tt=160913_m3&tsp=5013
      SearchScopes: HKCU - {26288071-35A6-4272-B9D0-43B7FDE4ED10} URL = http://es.search.yahoo.com/search?fr=chr-greentree_ie&ei=utf-8&ilc=12&type=714647&p={searchTerms}
      SearchScopes: HKCU - {7C4042BE-5946-489B-93C2-EEE26B624ED3} URL = http://www.search.ask.com/web?p2=%5EB7K%5EYYYYYY%5EYY%5EES&gct=&itbv=12.2.2.604&o=APN11290&tpid=CME-V7&apn_uid=918F4C1B-491C-460D-9B0E-7DA352B781C3&apn_ptnrs=%5EB7K&apn_dtid=%5EYYYYYY%5EYY%5EES&apn_dbr=iexplore.exe_6_10.0.9200.16635&doi=2013-08-12&trgb=IE&q={searchTerms}&psv=barid%253D%257B94688D32%252D039C%252D11E3%252DAE53%252D5404A6F27779%257D%2526cargo%253DCME%252DV7%2526spr%253Da
      BHO: ExplorerWnd Helper - {10921475-03CE-4E04-90CE-E2E7EF20C814} - C:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer64.dll (IObit)
      BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
      BHO-x32: Toolbar BHO - {27488090-768a-4d20-a938-f223f71c344c} - No File
      BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      BHO-x32: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll (Oracle Corporation)
      BHO-x32: Aplicación auxiliar de inicio de sesión en la cuenta Microsoft - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\microsoft shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
      BHO-x32: Advanced SystemCare Browser Protection - {BA0C978D-D909-49B6-AFE2-8BDE245DC7E6} - C:\Program Files (x86)\IObit\Surfing Protection\BrowerProtect\ASCPlugin_Protection.dll (IObit)
      BHO-x32: Search Assistant BHO - {bd3ea7c2-3af8-4463-9a9c-6eb8e136cb02} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      BHO-x32: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll (Oracle Corporation)
      Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
      Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      Toolbar: HKCU - No Name - {434D452D-5637-006A-76A7-7A786E7484D7} - No File
      Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
      ShellExecuteHooks-x32: - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - No File [ ]
      ShellExecuteHooks-x32: - {5AE067D3-9AFB-48E0-853A-EBB7F4A000DA} - No File [ ]
      Hosts: 127.0.0.1 www.iobit.com
      Tcpip\..\Interfaces\{66F456FF-A607-48D8-A905-EC2D2C4CEF80}: [NameServer]80.58.61.250,80.58.61.255

      FireFox:
      ========
      FF ProfilePath: C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default
      FF user.js: detected! => C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\user.js
      FF DefaultSearchEngine: Yahoo
      FF SelectedSearchEngine: Yahoo
      FF Homepage: hxxp://yahoo.es/
      FF Keyword.URL: hxxp://es.search.yahoo.com/search?fr=greentree_ff1&ei=utf-8&ilc=12&type=714647&p=
      FF Plugin: @adobe.com/FlashPlayer - C:\Windows\system32\Macromed\Flash\NPSWF64_11_9_900_117.dll ()
      FF Plugin: @java.com/DTPlugin,version=10.21.2 - C:\Windows\system32\npDeployJava1.dll (Oracle Corporation)
      FF Plugin: @microsoft.com/GENUINE - disabled No File
      FF Plugin: @videolan.org/vlc,version=2.2.0-git-20130801-0403 - C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
      FF Plugin: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll (Adobe Systems)
      FF Plugin: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\Win64Plugin\npAdobeExManDetectX64.dll (Adobe Systems)
      FF Plugin-x32: @adobe.com/FlashPlayer - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_9_900_117.dll ()
      FF Plugin-x32: @fxinteractive.com/fxplanet - C:\ProgramData\FXWebPlayer\npfxplanet.dll (FX Interactive)
      FF Plugin-x32: @Google.com/GoogleEarthPlugin - C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
      FF Plugin-x32: @java.com/DTPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
      FF Plugin-x32: @java.com/JavaPlugin,version=10.45.2 - C:\Program Files (x86)\Java\jre7\bin\plugin2\npjp2.dll (Oracle Corporation)
      FF Plugin-x32: @microsoft.com/GENUINE - disabled No File
      FF Plugin-x32: @raidcall.en/RCplugin - C:\Users\USUARI\AppData\Roaming\raidcall\plugins\nprcplugin.dll (Raidcall)
      FF Plugin-x32: @tools.google.com/Google Update;version=3 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
      FF Plugin-x32: @tools.google.com/Google Update;version=9 - C:\Program Files (x86)\Google\Update\1.3.22.3\npGoogleUpdate3.dll (Google Inc.)
      FF Plugin-x32: @Zwinky_5q.com/Plugin - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\NP5qStub.dll (MindSpark)
      FF Plugin-x32: Adobe Reader - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
      FF Plugin-x32: adobe.com/AdobeAAMDetect - C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll (Adobe Systems)
      FF Plugin-x32: adobe.com/AdobeExManDetect - C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll (Adobe Systems)
      FF Plugin HKCU: @Skype Limited.com/Facebook Video Calling Plugin - C:\Users\USUARI\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)
      FF SearchPlugin: C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\searchplugins\privitize.xml
      FF SearchPlugin: C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\searchplugins\WebSearch.xml
      FF Extension: Plus-HD-2.2 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]d2a102a9.com
      FF Extension: LyricsSay-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]a27fe618.com
      FF Extension: a2zLyrics-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]864a5978.com
      FF Extension: Advanced SystemCare Surfing Protection - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: Forecastfox - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\{0538E3E3-7E9B-4d49-8831-A227C80A7AD3}
      FF Extension: Avira SearchFree Toolbar plus Web Protection - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: Torntv 3 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: Quick Translator - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\{5C655500-E712-41e7-9349-CE462F844B19}.xpi
      FF Extension: Adblock Plus - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      FF StartMenuInternet: FIREFOX.EXE - C:\Program Files (x86)\Aurora\firefox.exe

      ==================== Services (Whitelisted) =================

      R2 AntiVirFirewallService; C:\Program Files (x86)\Avira\AntiVir Desktop\avfwsvc.exe [1012280 2013-12-19] (Avira Operations GmbH & Co. KG)
      R2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc.exe [896056 2013-12-19] (Avira Operations GmbH & Co. KG)
      R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [440376 2013-12-19] (Avira Operations GmbH & Co. KG)
      R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [440376 2013-11-27] (Avira Operations GmbH & Co. KG)
      R2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\AVWEBGRD.EXE [1011768 2013-12-19] (Avira Operations GmbH & Co. KG)
      R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
      R2 ASGT; C:\Windows\SysWOW64\ASGT.exe [55296 2012-01-17] ()
      S2 AxAutoMntSrv; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\AxAutoMntSrv.exe [75624 2012-01-05] (Alcohol Soft Development Team)
      R2 DFServ; C:\Program Files (x86)\Faronics\Deep Freeze\Install C-0\DFServ.exe [1073664 2010-05-20] (Faronics Corporation)
      R2 IMFservice; C:\Program Files (x86)\IObit\IObit Malware Fighter\IMFsrv.exe [335168 2013-04-25] (IObit)
      R2 LiveUpdateSvc; C:\Program Files (x86)\IObit\LiveUpdate\LiveUpdate.exe [2151200 2013-10-25] (IObit)
      R2 PanService; C:\Program Files (x86)\PANDORA.TV\PanService\KMPService.exe [1922600 2013-07-08] (Pandora.TV)
      R2 PnkBstrA; C:\Windows\SysWow64\PnkBstrA.exe [76888 2013-09-06] ()
      S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc.)
      R2 StarWindServiceAE; C:\Program Files (x86)\Alcohol Soft\Alcohol 52\StarWind\StarWindServiceAE.exe [370688 2009-12-23] (StarWind Software)
      R3 SystemExplorerHelpService; C:\Program Files (x86)\System Explorer\service\SystemExplorerService64.exe [821720 2012-11-25] (Mister Group)
      S4 WMPNetworkSvc; C:\Program Files (x86)\Windows Media Player\wmpnetwk.exe [1525248 2010-11-21] (Microsoft Corporation)
      R2 Zwinky_5qService; C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbarsvc.exe [44752 2013-11-29] (COMPANYVERS_NAME)

      ==================== Drivers (Whitelisted) ====================

      R3 AnyDVD; C:\Windows\System32\Drivers\AnyDVD.sys [139352 2013-03-04] (SlySoft, Inc.)
      R3 AnyDVD; C:\Windows\SysWow64\Drivers\AnyDVD.sys [139352 2013-03-04] (SlySoft, Inc.)
      R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [13440 2009-08-04] ()
      R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [13368 2009-07-06] ()
      R3 avfwim; C:\Windows\System32\DRIVERS\avfwim.sys [114608 2013-10-26] (Avira GmbH)
      R1 avfwot; C:\Windows\System32\DRIVERS\avfwot.sys [141376 2013-10-26] (Avira GmbH)
      R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [108440 2013-12-19] (Avira Operations GmbH & Co. KG)
      R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [131576 2013-12-19] (Avira Operations GmbH & Co. KG)
      R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2013-11-27] (Avira Operations GmbH & Co. KG)
      R0 DeepFrz; C:\Windows\System32\Drivers\DeepFrz.sys [227352 2010-05-20] (Faronics Corporation)
      R1 ESProtectionDriver; C:\Program Files\Malwarebytes Anti-Exploit\MBAE.sys [62168 2013-08-01] ()
      S4 FileMonitor; C:\Program Files (x86)\IObit\IObit Malware Fighter\Drivers\win7_amd64\FileMonitor.sys [23048 2013-03-23] (IObit)
      R3 MTsensor; C:\Windows\System32\DRIVERS\ASACPI.sys [15416 2009-07-17] ()
      R2 NPF; C:\Windows\System32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc.)
      R2 PfFilter; C:\Program Files (x86)\IObit\Protected Folder\pffilter.sys [39504 2013-04-03] (IObit Information Technology)
      S3 RegFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\regfilter.sys [34336 2013-03-26] (IObit.com)
      R0 sptd; C:\Windows\System32\Drivers\sptd.sys [564824 2013-09-22] (Duplex Secure Ltd.)
      S3 UrlFilter; C:\Program Files (x86)\IObit\IObit Malware Fighter\drivers\win7_amd64\UrlFilter.sys [23016 2013-03-26] (IObit.com)
      U3 aq6t5yom; C:\Windows\System32\Drivers\aq6t5yom.sys [0 ] (Microsoft Corporation)
      U5 UnlockerDriver5; C:\Program Files\Unlocker\UnlockerDriver5.sys [12352 2010-07-01] ()

      ==================== NetSvcs (Whitelisted) ===================


      ==================== One Month Created Files and Folders ========

      2013-12-20 17:07 - 2013-12-20 17:07 - 00021627 _____ C:\Users\USUARI\Desktop\FRST.txt
      2013-12-20 17:06 - 2013-12-20 17:06 - 00000000 ____D C:\FRST
      2013-12-20 17:05 - 2013-12-20 17:05 - 02193141 _____ (Farbar) C:\Users\USUARI\Desktop\FRST64.exe
      2013-12-20 12:59 - 2013-12-20 12:59 - 00000056 _____ C:\Windows\setupact.log
      2013-12-20 12:59 - 2013-12-20 12:59 - 00000000 _____ C:\Windows\setuperr.log
      2013-12-20 02:45 - 2013-12-20 12:59 - 00000736 _____ C:\Windows\DFError.log
      2013-12-19 02:22 - 2013-12-19 02:22 - 00413756 _____ (DILib) C:\Windows\SysWOW64\dijpg.dll
      2013-12-19 02:19 - 2013-12-19 02:19 - 00001206 _____ C:\Users\UpdatusUser\Desktop\RS Somnífero.lnk
      2013-12-19 02:19 - 2013-12-19 02:19 - 00000000 ____D C:\Program Files (x86)\Rico Software
      2013-12-19 02:17 - 2013-12-19 02:17 - 01133103 _____ C:\Users\USUARI\Downloads\rssomnifero.exe
      2013-12-18 01:26 - 2013-12-18 01:26 - 00884952 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
      2013-12-18 01:26 - 2013-12-18 01:26 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 41974272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
      2013-12-18 01:25 - 2013-12-18 01:25 - 14153984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 05753112 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 05681196 _____ C:\Windows\system32\Drivers\rtvienna.dat
      2013-12-18 01:25 - 2013-12-18 01:25 - 03899648 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 03760344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
      2013-12-18 01:25 - 2013-12-18 01:25 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01922304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01013504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00912184 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00693329 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
      2013-12-18 01:25 - 2013-12-18 01:25 - 00618200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00154840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
      2013-12-18 01:13 - 2013-12-18 01:13 - 00000937 _____ C:\Users\USUARI\Desktop\IOBIT DBP SERIAL.txt
      2013-12-16 17:36 - 2013-12-16 17:36 - 00000000 ____D C:\Archivos de programa
      2013-12-16 16:58 - 2013-12-16 16:58 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
      2013-12-16 16:58 - 2013-12-16 16:58 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00605496 _____ C:\Windows\system32\audioLibVc.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
      2013-12-16 16:53 - 2013-12-18 01:25 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
      2013-12-16 16:52 - 2011-03-17 05:17 - 01361336 _____ (TOSHIBA Corporation) C:\Windows\system32\tosade.dll
      2013-12-16 16:52 - 2011-03-07 10:11 - 00148416 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo.dll
      2013-12-16 16:52 - 2009-11-24 02:55 - 00518896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSX64.dll
      2013-12-16 16:52 - 2009-11-24 02:55 - 00211184 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSTSH64.dll
      2013-12-16 16:52 - 2009-11-24 02:55 - 00198896 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSHP64.dll
      2013-12-16 16:52 - 2009-11-24 02:55 - 00155888 _____ (SRS Labs, Inc.) C:\Windows\system32\SRSWOW64.dll
      2013-12-16 16:51 - 2011-08-23 10:00 - 00603984 _____ (Knowles Acoustics ) C:\Windows\system32\KAAPORT64.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00375128 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEP64A.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DHT64.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00310104 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RP3DAA64.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00204120 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEED64A.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00101208 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEL64A.dll
      2013-12-16 16:51 - 2010-11-08 00:31 - 00078680 _____ (Dolby Laboratories, Inc.) C:\Windows\system32\RTEEG64A.dll
      2013-12-16 16:51 - 2010-11-03 11:30 - 00149608 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCfg64.dll
      2013-12-16 16:51 - 2010-09-27 02:34 - 00318808 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO20.dll
      2013-12-16 16:51 - 2010-07-22 09:48 - 00074064 _____ (Virage Logic Corporation / Sonic Focus) C:\Windows\SysWOW64\SFCOM.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 01756264 _____ (DTS) C:\Windows\system32\DTSS2SpeakerDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 01568360 _____ (DTS) C:\Windows\system32\DTSS2HeadphoneDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 01486952 _____ (DTS) C:\Windows\system32\DTSBoostDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00728680 _____ (DTS) C:\Windows\system32\DTSBassEnhancementDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00712296 _____ (DTS) C:\Windows\system32\DTSSymmetryDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00693352 _____ (DTS) C:\Windows\system32\DTSVoiceClarityDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00491112 _____ (DTS) C:\Windows\system32\DTSNeoPCDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00432744 _____ (DTS) C:\Windows\system32\DTSLimiterDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00428648 _____ (DTS) C:\Windows\system32\DTSGainCompensatorDLL64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSLFXAPO64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00242792 _____ (DTS) C:\Windows\system32\DTSGFXAPO64.dll
      2013-12-16 16:50 - 2011-05-31 02:42 - 00241768 _____ (DTS) C:\Windows\system32\DTSGFXAPONS64.dll
      2013-12-16 16:27 - 2013-12-16 16:27 - 00000000 ____D C:\Program Files\ATI Technologies
      2013-12-16 16:27 - 2013-12-16 16:27 - 00000000 ____D C:\Program Files\ATI
      2013-12-16 14:35 - 2013-05-10 06:56 - 14631424 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll
      2013-12-16 14:35 - 2013-05-10 06:56 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL
      2013-12-16 14:35 - 2013-05-10 05:56 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL
      2013-12-16 14:35 - 2013-05-10 05:56 - 11410432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll
      2013-12-16 14:34 - 2013-10-25 07:19 - 02241536 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
      2013-12-16 14:34 - 2013-10-25 07:19 - 01365504 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
      2013-12-16 14:34 - 2013-10-25 07:19 - 00051712 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
      2013-12-16 14:34 - 2013-10-25 07:18 - 19271168 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
      2013-12-16 14:34 - 2013-10-25 07:18 - 00603136 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 15404032 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 03959808 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 02648576 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00855552 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00526336 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00136704 _____ (Microsoft Corporation) C:\Windows\system32\iesysprep.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00067072 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00053248 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
      2013-12-16 14:34 - 2013-10-25 07:17 - 00039936 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
      2013-12-16 14:34 - 2013-10-25 05:45 - 01767936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
      2013-12-16 14:34 - 2013-10-25 05:44 - 14356992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
      2013-12-16 14:34 - 2013-10-25 05:44 - 01140736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 13761536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 02877952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 02049024 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00493056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00391168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00109056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesysprep.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00061440 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00039424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
      2013-12-16 14:34 - 2013-10-25 05:43 - 00033280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
      2013-12-16 14:34 - 2013-10-25 05:07 - 02706432 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
      2013-12-16 14:34 - 2013-10-25 04:41 - 02706432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
      2013-12-16 14:34 - 2013-10-25 04:17 - 00089600 _____ (Microsoft Corporation) C:\Windows\system32\RegisterIEPKEYs.exe
      2013-12-16 14:34 - 2013-10-25 03:49 - 00071680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\RegisterIEPKEYs.exe
      2013-12-16 14:18 - 2013-11-23 19:26 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
      2013-12-16 14:18 - 2013-11-23 18:47 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
      2013-12-16 14:18 - 2013-10-30 03:32 - 00335360 _____ (Microsoft Corporation) C:\Windows\system32\msieftp.dll
      2013-12-16 14:18 - 2013-10-30 03:19 - 00301568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msieftp.dll
      2013-12-16 14:18 - 2013-10-30 02:50 - 03159040 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
      2013-12-16 14:18 - 2013-10-19 03:18 - 00081408 _____ (Microsoft Corporation) C:\Windows\system32\imagehlp.dll
      2013-12-16 14:18 - 2013-10-19 02:36 - 00159232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
      2013-12-16 14:17 - 2013-11-12 03:23 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
      2013-12-16 14:17 - 2013-11-12 03:07 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
      2013-12-16 14:17 - 2013-10-12 03:32 - 00150016 _____ (Microsoft Corporation) C:\Windows\system32\wshom.ocx
      2013-12-16 14:17 - 2013-10-12 03:31 - 00202752 _____ (Microsoft Corporation) C:\Windows\system32\scrrun.dll
      2013-12-16 14:17 - 2013-10-12 03:04 - 00121856 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wshom.ocx
      2013-12-16 14:17 - 2013-10-12 03:03 - 00163840 _____ (Microsoft Corporation) C:\Windows\SysWOW64\scrrun.dll
      2013-12-16 14:17 - 2013-10-12 02:33 - 00168960 _____ (Microsoft Corporation) C:\Windows\system32\wscript.exe
      2013-12-16 14:17 - 2013-10-12 02:33 - 00156160 _____ (Microsoft Corporation) C:\Windows\system32\cscript.exe
      2013-12-16 14:17 - 2013-10-12 02:15 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wscript.exe
      2013-12-16 14:17 - 2013-10-12 02:15 - 00126976 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cscript.exe
      2013-12-16 14:17 - 2013-10-04 03:16 - 00116736 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\drmk.sys
      2013-12-16 14:17 - 2013-10-04 02:36 - 00230400 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\portcls.sys
      2013-12-16 09:40 - 2013-12-16 09:40 - 00000000 __SHD C:\found.001
      2013-12-11 15:10 - 2013-12-11 15:38 - 00000000 ____D C:\Users\USUARI\AppData\Local\Google
      2013-12-10 20:22 - 2013-12-10 20:25 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\.minecraft
      2013-12-09 23:33 - 2013-12-20 02:02 - 00000000 ____D C:\Program Files (x86)\Aurora
      2013-12-09 17:08 - 2013-12-09 17:37 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\FolderName
      2013-12-09 01:49 - 2013-12-09 01:49 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
      2013-12-05 22:16 - 2013-12-05 22:16 - 00000000 ____D C:\Windows\Tasks\TaskDisabled
      2013-12-05 08:45 - 2013-12-05 08:45 - 01978640 _____ (Mister Group ) C:\Users\USUARI\Downloads\SystemExplorerSetup_450.exe
      2013-12-04 21:31 - 2013-12-04 21:32 - 00000463 _____ C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
      2013-12-04 20:01 - 2013-12-04 20:01 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
      2013-12-04 20:01 - 2013-12-04 20:01 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
      2013-12-04 19:46 - 2013-12-04 19:46 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\InstallShield
      2013-12-04 19:46 - 2013-12-04 19:46 - 00000000 ____D C:\Program Files (x86)\Macrovision Corporation
      2013-12-04 00:05 - 2013-12-04 00:05 - 00000000 __SHD C:\found.000
      2013-12-03 17:19 - 2013-12-20 01:53 - 00000000 ____D C:\Users\USUARI\AppData\Local\Mirillis
      2013-12-03 17:19 - 2013-12-03 17:19 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Mirillis
      2013-12-03 17:19 - 2013-12-03 17:19 - 00000000 ____D C:\ProgramData\Mirillis
      2013-12-03 17:17 - 2013-12-03 17:17 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mirillis
      2013-12-03 17:17 - 2013-12-03 17:17 - 00000000 ____D C:\Program Files (x86)\Mirillis
      2013-12-02 15:45 - 2013-12-10 17:03 - 00000000 ____D C:\Users\USUARI\AppData\Local\Arma 3
      2013-12-02 15:45 - 2013-12-02 15:46 - 00000000 ____D C:\Users\USUARI\Documents\Arma 3
      2013-12-02 15:45 - 2013-12-02 15:45 - 00000000 ____D C:\ProgramData\Bohemia Interactive
      2013-12-02 15:19 - 2013-12-02 15:44 - 00000000 ____D C:\Program Files (x86)\ARMA 3
      2013-12-01 21:07 - 2013-12-03 18:25 - 00000000 ____D C:\Users\USUARI\Desktop\mapa original
      2013-11-29 23:39 - 2013-11-29 23:39 - 00000000 ____D C:\Program Files (x86)\Zwinky_5q
      2013-11-24 23:58 - 2013-11-25 00:00 - 97980840 _____ C:\Users\USUARI\Downloads\ManiaplanetTMDemoSetup.exe
      2013-11-23 22:55 - 2013-11-23 22:55 - 00000000 ____D C:\Users\USUARI\ManiaPlanet
      2013-11-22 18:00 - 2013-11-22 18:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
      2013-11-22 17:55 - 2013-11-22 17:55 - 00003228 _____ C:\Windows\System32\Tasks\{35A53DE7-D8B5-435E-BF81-C5F0F78F64B6}
      2013-11-22 17:55 - 2013-11-22 17:55 - 00000000 ____D C:\ProgramData\Razer
      2013-11-22 00:51 - 2013-12-12 19:20 - 00000000 ____D C:\Users\USUARI\Desktop\Gorzkowa_Map_by_TLS

      ==================== One Month Modified Files and Folders =======

      2013-12-20 17:07 - 2013-12-20 17:07 - 00021627 _____ C:\Users\USUARI\Desktop\FRST.txt
      2013-12-20 17:06 - 2013-12-20 17:06 - 00000000 ____D C:\FRST
      2013-12-20 17:06 - 2013-04-26 23:22 - 00000000 ___RD C:\pandora
      2013-12-20 17:05 - 2013-12-20 17:05 - 02193141 _____ (Farbar) C:\Users\USUARI\Desktop\FRST64.exe
      2013-12-20 16:09 - 2013-09-13 22:44 - 00001100 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
      2013-12-20 16:08 - 2013-05-23 21:02 - 00000932 _____ C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1011552609-289194131-2329688827-1001UA.job
      2013-12-20 13:00 - 2013-09-30 08:48 - 00000000 ____D C:\Users\USUARI\AppData\Local\CrashDumps
      2013-12-20 13:00 - 2013-05-20 14:50 - 00000000 ____D C:\Program Files (x86)\HTC Home
      2013-12-20 13:00 - 2013-04-26 22:21 - 00000000 ____D C:\Program Files (x86)\SpeedFan
      2013-12-20 12:59 - 2013-12-20 12:59 - 00000056 _____ C:\Windows\setupact.log
      2013-12-20 12:59 - 2013-12-20 12:59 - 00000000 _____ C:\Windows\setuperr.log
      2013-12-20 12:59 - 2013-12-20 02:45 - 00000736 _____ C:\Windows\DFError.log
      2013-12-20 12:59 - 2013-11-12 19:15 - 00000000 ____D C:\Program Files (x86)\MIAGENDAV20
      2013-12-20 12:59 - 2013-09-13 22:44 - 00001096 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
      2013-12-20 12:59 - 2013-04-27 13:20 - 00000326 _____ C:\Windows\Tasks\GlaryInitialize.job
      2013-12-20 12:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
      2013-12-20 02:02 - 2013-12-09 23:33 - 00000000 ____D C:\Program Files (x86)\Aurora
      2013-12-20 02:00 - 2013-04-26 12:04 - 00000000 ____D C:\Users\USUARI\AppData\Local\Adobe
      2013-12-20 01:53 - 2013-12-03 17:19 - 00000000 ____D C:\Users\USUARI\AppData\Local\Mirillis
      2013-12-20 01:40 - 2013-06-20 19:15 - 00000000 ____D C:\Users\USUARI\Documents\Euro Truck Simulator 2
      2013-12-20 00:50 - 2013-05-21 09:49 - 00000000 ____D C:\Windows\system32\log
      2013-12-19 23:24 - 2011-04-12 10:10 - 00748872 _____ C:\Windows\system32\perfh00A.dat
      2013-12-19 23:24 - 2011-04-12 10:10 - 00158942 _____ C:\Windows\system32\perfc00A.dat
      2013-12-19 23:24 - 2009-07-14 06:13 - 01679784 _____ C:\Windows\system32\PerfStringBackup.INI
      2013-12-19 23:17 - 2013-09-11 14:28 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Search Protection
      2013-12-19 20:26 - 2013-06-20 19:14 - 00000000 ____D C:\Program Files (x86)\Euro Truck Simulator 2
      2013-12-19 18:44 - 2013-04-26 12:04 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\vlc
      2013-12-19 18:41 - 2013-08-25 20:47 - 00000000 ____D C:\Program Files (x86)\The KMPlayer
      2013-12-19 13:11 - 2013-04-26 21:57 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\uTorrent
      2013-12-19 11:30 - 2013-10-26 01:25 - 00084720 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
      2013-12-19 11:30 - 2013-10-26 01:20 - 00131576 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
      2013-12-19 11:30 - 2013-10-26 01:20 - 00108440 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
      2013-12-19 02:22 - 2013-12-19 02:22 - 00413756 _____ (DILib) C:\Windows\SysWOW64\dijpg.dll
      2013-12-19 02:20 - 2013-04-26 22:16 - 00000000 ___RD C:\programas
      2013-12-19 02:19 - 2013-12-19 02:19 - 00001206 _____ C:\Users\UpdatusUser\Desktop\RS Somnífero.lnk
      2013-12-19 02:19 - 2013-12-19 02:19 - 00000000 ____D C:\Program Files (x86)\Rico Software
      2013-12-19 02:17 - 2013-12-19 02:17 - 01133103 _____ C:\Users\USUARI\Downloads\rssomnifero.exe
      2013-12-18 19:25 - 2013-08-27 16:33 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Skype
      2013-12-18 14:35 - 2013-11-02 11:11 - 00000000 ___RD C:\Users\USUARI\Desktop\baul
      2013-12-18 10:50 - 2009-07-14 06:08 - 00032636 _____ C:\Windows\Tasks\SCHEDLGU.TXT
      2013-12-18 01:31 - 2013-11-17 20:14 - 00000000 ____D C:\ProgramData\ProductData
      2013-12-18 01:26 - 2013-12-18 01:26 - 00884952 _____ (Realtek ) C:\Windows\system32\Drivers\Rt64win7.sys
      2013-12-18 01:26 - 2013-12-18 01:26 - 00074456 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RtNicProp64.dll
      2013-12-18 01:26 - 2013-04-25 17:56 - 00108760 _____ (Realtek Semiconductor Corporation) C:\Windows\system32\RTNUninst64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 41974272 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoRes64.dat
      2013-12-18 01:25 - 2013-12-18 01:25 - 14153984 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 05753112 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOlfx.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 05681196 _____ C:\Windows\system32\Drivers\rtvienna.dat
      2013-12-18 01:25 - 2013-12-18 01:25 - 03899648 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnN64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 03760344 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\Drivers\RTKVHD64.sys
      2013-12-18 01:25 - 2013-12-18 01:25 - 02810072 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtPgEx64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02588888 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkAPO64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02103040 _____ (Waves Audio Ltd.) C:\Windows\system32\WavesGUILib64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 02036992 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioEQ64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01922304 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioRealtek264.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01345280 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO5064.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01286872 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTCOM64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 01013504 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPOShell64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00912184 _____ (Nahimic Inc) C:\Windows\system32\NAHIMICAPOSettingsIPC.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00693329 _____ C:\Windows\system32\Drivers\RTAIODAT.DAT
      2013-12-18 01:25 - 2013-12-18 01:25 - 00618200 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtDataProc64.dll
      2013-12-18 01:25 - 2013-12-18 01:25 - 00154840 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RCoInstII64.dll
      2013-12-18 01:25 - 2013-12-16 16:53 - 00000000 ____D C:\Windows\SysWOW64\RTCOM
      2013-12-18 01:13 - 2013-12-18 01:13 - 00000937 _____ C:\Users\USUARI\Desktop\IOBIT DBP SERIAL.txt
      2013-12-17 14:54 - 2013-08-21 19:52 - 00003584 _____ C:\Users\USUARI\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
      2013-12-17 04:33 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
      2013-12-16 21:33 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
      2013-12-16 21:33 - 2009-07-14 05:45 - 00021072 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
      2013-12-16 18:54 - 2011-05-24 05:22 - 00000000 ____D C:\Windows\Panther
      2013-12-16 18:21 - 2013-04-27 01:17 - 00000000 ____D C:\Program Files (x86)\IObit
      2013-12-16 17:40 - 2013-10-11 11:38 - 00000040 ___SH C:\ProgramData\.zreglib
      2013-12-16 17:36 - 2013-12-16 17:36 - 00000000 ____D C:\Archivos de programa
      2013-12-16 16:58 - 2013-12-16 16:58 - 27644160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioVnA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 07164176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEP64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 06217904 _____ (Dolby Laboratories) C:\Windows\system32\DDPP64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 02743328 _____ (Fortemedia Corporation) C:\Windows\system32\FMAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01938608 _____ (Dolby Laboratories) C:\Windows\system32\DDPD64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01662024 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RTSnMg64.cpl
      2013-12-16 16:58 - 2013-12-16 16:58 - 01286400 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxSpeechAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01084160 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO4064.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01021656 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkApi64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 01014016 _____ (SRS Labs, Inc.) C:\Windows\system32\slcnt64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00947760 _____ (Sony Corporation) C:\Windows\system32\SFSS_APO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00907008 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVoiceAPO2064.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00906800 _____ (Sony Corporation) C:\Windows\system32\MISS_APO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00897792 _____ (DTS, Inc.) C:\Windows\system32\sl3apo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00871856 _____ (TOSHIBA Corporation) C:\Windows\system32\tossaeapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00836544 _____ (TOSHIBA Corporation) C:\Windows\system32\tadefxapo264.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00790272 _____ (Waves Audio Ltd.) C:\Windows\SysWOW64\MaxxAudioAPOShell.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00722688 _____ (DTS, Inc.) C:\Windows\system32\sltech64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00663296 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxAudioAPO30.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00662784 _____ (Waves Audio Ltd.) C:\Windows\system32\MaxxVolumeSDAPO.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00605496 _____ C:\Windows\system32\audioLibVc.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00582056 _____ (TOSHIBA Corporation) C:\Windows\system32\tosasfapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00501184 _____ (DTS) C:\Windows\system32\DTSU2PLFX64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00487360 _____ (DTS) C:\Windows\system32\DTSU2PGFX64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00434960 _____ (Dolby Laboratories) C:\Windows\system32\R4EED64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00415680 _____ (DTS) C:\Windows\system32\DTSU2PREC64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00331880 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtlCPAPI64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00313520 _____ (Dolby Laboratories) C:\Windows\system32\DDPO64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00260272 _____ (Dolby Laboratories) C:\Windows\system32\DDPA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00244480 _____ (TODO: <Company name>) C:\Windows\system32\slprp64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00221024 _____ (Synopsys, Inc.) C:\Windows\system32\SFNHK64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00209096 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAC64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00162224 _____ (TOSHIBA Corporation) C:\Windows\system32\toseaeapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00141584 _____ (Dolby Laboratories) C:\Windows\system32\R4EEL64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00124176 _____ (Dolby Laboratories) C:\Windows\system32\R4EEA64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00113576 _____ (Real Sound Lab SIA) C:\Windows\system32\CONEQMSAPOGUILibrary.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00109848 _____ C:\Windows\system32\AcpiServiceVnA64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00108640 _____ (Andrea Electronics Corporation) C:\Windows\system32\AERTAR64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00081248 _____ (Synopsys, Inc.) C:\Windows\system32\SFCOM64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00078688 _____ (Synopsys, Inc.) C:\Windows\system32\SFAPO64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00075024 _____ (Dolby Laboratories) C:\Windows\system32\R4EEG64A.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00065944 _____ (TOSHIBA CORPORATION.) C:\Windows\system32\tepeqapo64.dll
      2013-12-16 16:58 - 2013-12-16 16:58 - 00014952 _____ (Realtek Semiconductor Corp.) C:\Windows\system32\RtkCoLDR64.dll
      2013-12-16 16:50 - 2013-04-25 17:55 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
      2013-12-16 16:43 - 2013-04-25 17:52 - 00001769 _____ C:\Windows\Language_trs.ini
      2013-12-16 16:37 - 2013-04-25 17:56 - 00000000 ____D C:\Program Files (x86)\Realtek
      2013-12-16 16:35 - 2013-04-25 17:52 - 00037011 _____ C:\Windows\Ascd_tmp.ini
      2013-12-16 16:27 - 2013-12-16 16:27 - 00000000 ____D C:\Program Files\ATI Technologies
      2013-12-16 16:27 - 2013-12-16 16:27 - 00000000 ____D C:\Program Files\ATI
      2013-12-16 14:43 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
      2013-12-16 14:41 - 2009-07-14 05:45 - 05040376 _____ C:\Windows\system32\FNTCACHE.DAT
      2013-12-16 14:33 - 2013-08-12 02:19 - 00000000 ____D C:\Windows\system32\MRT
      2013-12-16 14:31 - 2013-04-26 09:25 - 90708896 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
      2013-12-16 14:11 - 2013-08-25 00:50 - 00000000 ____D C:\Program Files (x86)\Google
      2013-12-16 09:40 - 2013-12-16 09:40 - 00000000 __SHD C:\found.001
      2013-12-15 05:04 - 2013-04-26 20:09 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Notepad++
      2013-12-12 19:20 - 2013-11-22 00:51 - 00000000 ____D C:\Users\USUARI\Desktop\Gorzkowa_Map_by_TLS
      2013-12-11 23:33 - 2013-05-04 21:27 - 00000000 ____D C:\Program Files (x86)\Steam
      2013-12-11 16:01 - 2013-04-26 17:37 - 00000000 ____D C:\ProgramData\Norton
      2013-12-11 15:38 - 2013-12-11 15:10 - 00000000 ____D C:\Users\USUARI\AppData\Local\Google
      2013-12-11 15:34 - 2013-10-17 16:19 - 00001908 _____ C:\Windows\diagwrn.xml
      2013-12-11 15:34 - 2013-10-17 16:19 - 00001908 _____ C:\Windows\diagerr.xml
      2013-12-11 15:20 - 2013-04-26 17:36 - 00000000 ____D C:\Windows\System32\Tasks\ASUS
      2013-12-11 15:20 - 2013-04-25 18:02 - 00000000 ____D C:\Program Files (x86)\ASUS
      2013-12-11 15:11 - 2013-04-26 17:35 - 00044930 _____ C:\Windows\Ascd_log.ini
      2013-12-10 20:25 - 2013-12-10 20:22 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\.minecraft
      2013-12-10 17:03 - 2013-12-02 15:45 - 00000000 ____D C:\Users\USUARI\AppData\Local\Arma 3
      2013-12-10 14:37 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
      2013-12-10 13:22 - 2013-04-25 18:19 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Adobe
      2013-12-09 17:37 - 2013-12-09 17:08 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\FolderName
      2013-12-09 08:40 - 2013-11-15 12:20 - 00000000 ____D C:\Users\USUARI\Desktop\opjetos para mapas
      2013-12-09 01:59 - 2013-04-26 22:13 - 00000000 ___RD C:\seguridad
      2013-12-09 01:49 - 2013-12-09 01:49 - 00000000 ____D C:\Windows\Tasks\ImCleanDisabled
      2013-12-09 00:50 - 2013-04-26 20:45 - 00000000 ____D C:\Users\USUARI\Documents\My Games
      2013-12-07 18:57 - 2013-08-27 16:32 - 00000000 ___RD C:\Program Files (x86)\Skype
      2013-12-07 18:57 - 2013-08-27 16:32 - 00000000 ____D C:\ProgramData\Skype
      2013-12-07 17:39 - 2013-05-08 16:34 - 00000191 _____ C:\Users\USUARI\AppData\Roaming\default.rss
      2013-12-07 17:29 - 2013-05-08 16:34 - 00000069 _____ C:\Windows\NeroDigital.ini
      2013-12-05 22:16 - 2013-12-05 22:16 - 00000000 ____D C:\Windows\Tasks\TaskDisabled
      2013-12-05 09:04 - 2013-04-26 18:47 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\AIMP3
      2013-12-05 08:46 - 2013-04-26 22:10 - 00000000 ____D C:\Program Files (x86)\System Explorer
      2013-12-05 08:45 - 2013-12-05 08:45 - 01978640 _____ (Mister Group ) C:\Users\USUARI\Downloads\SystemExplorerSetup_450.exe
      2013-12-05 08:42 - 2013-08-03 21:46 - 00000005 _____ C:\1.txt
      2013-12-04 21:32 - 2013-12-04 21:31 - 00000463 _____ C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Google.website
      2013-12-04 20:22 - 2013-05-17 18:48 - 00007605 _____ C:\Users\USUARI\AppData\Local\resmon.resmoncfg
      2013-12-04 20:03 - 2013-04-25 18:00 - 00000000 ____D C:\ProgramData\NVIDIA
      2013-12-04 20:01 - 2013-12-04 20:01 - 30361888 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 25257248 _____ (NVIDIA Corporation) C:\Windows\system32\nvcompiler.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 22951200 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 17560352 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcompiler.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 15862272 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 15218504 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 12613408 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
      2013-12-04 20:01 - 2013-12-04 20:01 - 11600432 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 11514624 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 09691888 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 09619872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 03132704 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 03125024 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvenc.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 02947872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 02747680 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvenc.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01884448 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6433182.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01511712 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6433182.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 01242400 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00707360 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00657184 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00609568 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00562464 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00317472 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00266984 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00168616 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
      2013-12-04 20:01 - 2013-12-04 20:01 - 00141336 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
      2013-12-04 20:01 - 2013-11-12 01:34 - 18208624 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
      2013-12-04 20:01 - 2013-02-25 23:32 - 18293608 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
      2013-12-04 20:01 - 2013-02-25 23:32 - 03069608 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
      2013-12-04 20:01 - 2013-02-25 23:32 - 02697248 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
      2013-12-04 20:01 - 2013-02-25 23:32 - 01436528 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
      2013-12-04 20:01 - 2013-02-25 23:32 - 00023754 _____ C:\Windows\system32\nvinfo.pb
      2013-12-04 19:46 - 2013-12-04 19:46 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\InstallShield
      2013-12-04 19:46 - 2013-12-04 19:46 - 00000000 ____D C:\Program Files (x86)\Macrovision Corporation
      2013-12-04 00:05 - 2013-12-04 00:05 - 00000000 __SHD C:\found.000
      2013-12-03 18:25 - 2013-12-01 21:07 - 00000000 ____D C:\Users\USUARI\Desktop\mapa original
      2013-12-03 17:19 - 2013-12-03 17:19 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Mirillis
      2013-12-03 17:19 - 2013-12-03 17:19 - 00000000 ____D C:\ProgramData\Mirillis
      2013-12-03 17:17 - 2013-12-03 17:17 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Mirillis
      2013-12-03 17:17 - 2013-12-03 17:17 - 00000000 ____D C:\Program Files (x86)\Mirillis
      2013-12-03 14:41 - 2013-04-27 09:59 - 00000000 ____D C:\Windows\Minidump
      2013-12-02 16:44 - 2013-04-26 22:18 - 00000000 ___RD C:\juegos
      2013-12-02 15:46 - 2013-12-02 15:45 - 00000000 ____D C:\Users\USUARI\Documents\Arma 3
      2013-12-02 15:45 - 2013-12-02 15:45 - 00000000 ____D C:\ProgramData\Bohemia Interactive
      2013-12-02 15:44 - 2013-12-02 15:19 - 00000000 ____D C:\Program Files (x86)\ARMA 3
      2013-12-02 00:10 - 2013-10-14 14:10 - 00000000 ____D C:\Program Files\Malwarebytes Anti-Exploit
      2013-12-01 19:34 - 2013-04-25 17:47 - 00000000 ____D C:\Users\USUARI
      2013-12-01 15:52 - 2012-12-25 02:43 - 00000000 ____D C:\Program Files (x86)\Songr
      2013-12-01 13:04 - 2013-08-25 05:35 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\DiskDefrag
      2013-11-30 22:54 - 2013-08-13 21:56 - 00000000 ____D C:\Program Files (x86)\Glary Utilities 3
      2013-11-30 11:04 - 2013-09-13 22:44 - 00004096 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
      2013-11-30 11:04 - 2013-09-13 22:44 - 00003844 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
      2013-11-29 23:39 - 2013-11-29 23:39 - 00000000 ____D C:\Program Files (x86)\Zwinky_5q
      2013-11-27 09:33 - 2013-10-26 01:20 - 00028600 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avkmgr.sys
      2013-11-25 00:00 - 2013-11-24 23:58 - 97980840 _____ C:\Users\USUARI\Downloads\ManiaplanetTMDemoSetup.exe
      2013-11-23 23:59 - 2013-10-29 03:40 - 00000000 ____D C:\Users\USUARI\Documents\SimCity 4
      2013-11-23 23:58 - 2013-04-26 20:35 - 00000000 ____D C:\Users\USUARI\Documents\TrackMania
      2013-11-23 23:29 - 2013-04-27 01:35 - 00000000 ____D C:\ProgramData\TrackMania
      2013-11-23 23:06 - 2013-04-27 01:58 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
      2013-11-23 22:55 - 2013-11-23 22:55 - 00000000 ____D C:\Users\USUARI\ManiaPlanet
      2013-11-23 19:26 - 2013-12-16 14:18 - 00417792 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WMPhoto.dll
      2013-11-23 18:47 - 2013-12-16 14:18 - 00465920 _____ (Microsoft Corporation) C:\Windows\system32\WMPhoto.dll
      2013-11-22 20:01 - 2013-04-27 01:18 - 00000000 ____D C:\ProgramData\IObit
      2013-11-22 18:00 - 2013-11-22 18:00 - 00000000 ____H C:\Windows\system32\Drivers\Msft_User_WpdMtpDr_01_09_00.Wdf
      2013-11-22 17:55 - 2013-11-22 17:55 - 00003228 _____ C:\Windows\System32\Tasks\{35A53DE7-D8B5-435E-BF81-C5F0F78F64B6}
      2013-11-22 17:55 - 2013-11-22 17:55 - 00000000 ____D C:\ProgramData\Razer
      2013-11-21 09:28 - 2013-04-26 20:35 - 00000323 _____ C:\Users\USUARI\Documents\ax_files.xml

      Some content of TEMP:
      ====================
      C:\Users\USUARI\AppData\Local\Temp\avgnt.exe
      C:\Users\USUARI\AppData\Local\Temp\rssomnifero.exe
      C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll


      ==================== Bamital & volsnap Check =================

      C:\Windows\System32\winlogon.exe
      [2011-05-22 02:55] - [2011-05-22 02:55] - 0390656 ____A (Microsoft Corporation) BAEDB39886EB4BD51990EE2B7893E806

      C:\Windows\System32\wininit.exe => MD5 is legit
      C:\Windows\SysWOW64\wininit.exe => MD5 is legit
      C:\Windows\explorer.exe
      [2011-05-22 03:20] - [2011-05-22 03:20] - 2871808 ____A (Microsoft Corporation) 3B69712041F3D63605529BD66DC00C48

      C:\Windows\SysWOW64\explorer.exe
      [2011-05-22 03:20] - [2011-05-22 03:20] - 2616320 ____A (Microsoft Corporation) 0FB9C74046656D1579A64660AD67B746

      C:\Windows\System32\svchost.exe => MD5 is legit
      C:\Windows\SysWOW64\svchost.exe => MD5 is legit
      C:\Windows\System32\services.exe => MD5 is legit
      C:\Windows\System32\User32.dll => MD5 is legit
      C:\Windows\SysWOW64\User32.dll => MD5 is legit
      C:\Windows\System32\userinit.exe => MD5 is legit
      C:\Windows\SysWOW64\userinit.exe => MD5 is legit
      C:\Windows\System32\Drivers\volsnap.sys
      [2011-05-22 03:12] - [2011-05-22 03:12] - 0296320 ____A (Microsoft Corporation) 879CE6AEA3FE874AD4C500B6B6198EB0



      LastRegBack: 2013-12-10 12:59

      ==================== End Of Log ============================







      Hago otro post ya que me comenta que es muy grande ok.

    4. #4
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2013 02
      Ran by USUARI at 2013-12-20 17:08:28
      Running from C:\Users\USUARI\Desktop
      Boot Mode: Normal
      ==========================================================


      ==================== Security Center ========================

      AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
      AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
      AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

      ==================== Installed Programs ======================

      "Nero SoundTrax Help (x32 Version: 4.0.15.0)
      µTorrent (HKCU Version: 3.3.2.30303)
      4shared Desktop (x32)
      7plugincoupon (x32)
      AC3D 7.0.11 (x32)
      Actualización de NVIDIA 1.11.3 (Version: 1.11.3)
      Adobe AIR (x32 Version: 3.9.0.1380)
      Adobe Creative Cloud (x32 Version: 2.2.1.260)
      Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
      Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
      Adobe Photoshop CS6 (x32 Version: 13.0)
      Adobe Reader XI (11.0.05) - Español (x32 Version: 11.0.05)
      Advertising Center (x32 Version: 0.0.0.1)
      AIMP3 (x32 Version: v3.51.1288, 07.08.2013)
      Any Video Converter 5.0.9 (x32)
      AnyDVD (x32 Version: 7.1.6.0)
      Argente - Registry Cleaner 3.0.0.2 (x32 Version: 3.0.0.2)
      ARMA 3 (x32 Version: 1)
      ASUS GPU Tweak (x32 Version: 2.1.0.1)
      ASUSUpdate (x32 Version: 7.18.03)
      ATI Catalyst Install Manager (Version: 3.0.762.0)
      Aurora 27.0a2 (x86 es-ES) (x32 Version: 27.0a2)
      Avira Internet Security (x32 Version: 14.0.2.286)
      Avira SearchFree Toolbar (x32 Version: 12.6.0.1900)
      AVS Screen Capture version 2.0.1 (x32)
      AVS Update Manager 1.0 (x32)
      AVS Video Editor 6 (x32)
      AVS Video Recorder 2.4 (x32)
      AVS4YOU Software Navigator 1.4 (x32)
      Call of Duty Ghosts MULTI 5 (x32 Version: 1)
      Camtasia Studio 6 (x32 Version: 6.0.0)
      CCleaner (Version: 4.07)
      Cheat Engine 6.2 (x32)
      CursorXP (x32)
      D3DX10 (x32 Version: 15.4.2368.0902)
      DolbyFiles (x32 Version: 2.0)
      Dragon NaturallySpeaking 11 (x32 Version: 11.0.200)
      Driver Booster (x32 Version: 1.0)
      DVD Shrink 3.2 (x32)
      EA Download Manager UI (x32 Version: 6.0.4)
      EA Download Manager UI (x32 Version: 6.0.4.124)
      eMule (x32)
      EPU-4 Engine (x32 Version: 1.02.01)
      Euro Truck Simulator 2 (x32 Version: 1.1.1)
      Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
      Farming Simulator 2011 (x32 Version: 1.0)
      Farming Simulator 2013 (x32 Version: 1.0)
      Fraps (remove only) (x32)
      FXWebPlayer (x32)
      German Truck Simulator 1.04 (x32 Version: 1.04)
      GIANTS Editor 5.0.1 (x32 Version: 5.0.1)
      GIANTS Editor 5.0.3 64-bit (x32 Version: 5.0.3)
      Glary Utilities 2.56.0.1822 (x32 Version: 2.56.0.1822)
      Glary Utilities 3.9.4 (x32 Version: 3.9.4.144)
      Google Earth Plug-in (x32 Version: 7.1.2.2041)
      Google Update Helper (x32 Version: 1.3.22.3)
      GRID Demo (x32 Version: 1.00.0000)
      HTC Home Apis (x32 Version: 3.0.620.0)
      IconPackager (x32 Version: 5.00)
      IconPackager (x32)
      ImagXpress (x32 Version: 7.0.74.0)
      IObit Malware Fighter (x32 Version: 2.1)
      IObit Uninstaller (x32 Version: 3.0.3.1064)
      Java 7 Update 21 (64-bit) (Version: 7.0.210)
      Java 7 Update 45 (x32 Version: 7.0.450)
      Java Auto Updater (x32 Version: 2.1.9.8)
      Java(TM) 6 Update 25 (64-bit) (Version: 6.0.250)
      join.me (HKCU Version: 1.10.1.255)
      K-Lite Codec Pack 9.8.0 (64-bit) (Version: 9.8.0)
      KMP Service (x32)
      Landwirtschafts Simulator 2013 Hagensted Modified 2013 (x32 Version: Landwirtschafts Simulator 2013 Hagensted Modified 3.2.6)
      Malwarebytes Anti-Exploit version 0.09.3.1000 (Version: 0.09.3.1000)
      Malwarebytes Anti-Malware versión 1.75.0.1300 (x32 Version: 1.75.0.1300)
      Maxthon Cloud Browser (x32 Version: 4.0.5.4000)
      Mayordomo Virtual 1.4E (x32)
      Medal of Honor (TM) (x32 Version: 1.0.0.0)
      Menu Templates - Starter Kit (x32 Version: 9.0.4.0)
      Mi Agenda Ver. 2.0.5 (x32 Version: 2.0.5)
      Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
      Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
      Microsoft Application Error Reporting (Version: 12.0.6015.5000)
      Microsoft Office Access MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Excel MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Groove MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office InfoPath MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
      Microsoft Office OneNote MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Outlook MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office PowerPoint MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Basque) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Catalan) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Galician) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Portuguese (Brazil)) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proofing (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Publisher MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Shared 64-bit MUI (Spanish) 2007 (Version: 12.0.4518.1014)
      Microsoft Office Shared MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Word MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
      Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
      Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
      Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
      Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
      Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
      Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
      Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
      Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
      MiPony 2.1.0 (x32 Version: 2.1.0)
      Movie Templates - Starter Kit (x32 Version: 9.0.4.0)
      Mozilla Thunderbird 24.1.0 (x86 es-ES) (x32 Version: 24.1.0)
      MSVCRT (x32 Version: 15.4.2862.0708)
      MSVCRT110 (x32 Version: 16.4.1108.0727)
      MSVCRT110_amd64 (Version: 16.4.1109.0912)
      MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
      MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
      Need For Speed™ World (x32 Version: 1.0.0.1108)
      Nero 9 (x32)
      Nero BurningROM (x32 Version: 9.0.0.0)
      Nero BurnRights (x32 Version: 2.99.6.100)
      Nero ControlCenter (x32 Version: 0.0.0.1)
      Nero ControlCenter (x32 Version: 9.0.0.1)
      Nero CoverDesigner (x32 Version: 4.0.5.100)
      Nero CoverDesigner Help (x32 Version: 4.0.0.0)
      Nero Disc Copy Gadget (x32 Version: 1.53.0.0)
      Nero Disc Copy Gadget Help (x32 Version: 2.0.0.0)
      Nero DiscSpeed (x32 Version: 4.99.5.105)
      Nero DriveSpeed (x32 Version: 3.99.5.105)
      Nero Express (x32 Version: 9.0.0.0)
      Nero InfoTool (x32 Version: 5.99.5.105)
      Nero Installer (x32 Version: 2.0.0.1)
      Nero Live (x32 Version: 1.0.164.0)
      Nero Live Help (x32 Version: 1.0.162.0)
      Nero PhotoSnap (x32 Version: 1.53.2.0)
      Nero PhotoSnap Help (x32 Version: 1.53.2.0)
      Nero Recode (x32 Version: 3.53.0.0)
      Nero Recode Help (x32 Version: 3.53.0.0)
      Nero Rescue Agent (x32 Version: 1.99.0.1)
      Nero RescueAgent Help (x32 Version: 1.99.0.1)
      Nero ShowTime (x32 Version: 4.99.0.0)
      Nero StartSmart (x32 Version: 9.0.9.100)
      Nero StartSmart Help (x32 Version: 9.0.0.0)
      Nero Vision (x32 Version: 0.0.0.1)
      Nero Vision (x32 Version: 6.0.6.100)
      Nero WaveEditor (x32 Version: 5.0.18.0)
      Nero WaveEditor Help (x32 Version: 5.0.15.0)
      NeroBurningROM (x32 Version: 9.0.9.100)
      NeroExpress (x32 Version: 9.0.9.100)
      neroxml (x32 Version: 1.0.0)
      Notepad++ (x32 Version: 6.5)
      NVIDIA Controlador de la controladora 3D Vision 296.16 (Version: 296.16)
      NVIDIA Install Application (Version: 2.1002.133.889)
      NVIDIA PhysX (x32 Version: 9.12.0213)
      NVIDIA Software del sistema PhysX 9.12.0213 (Version: 9.12.0213)
      NVIDIA Update Components (Version: 1.11.3)
      OpenAL (x32)
      Panel de control de NVIDIA 331.82 (Version: 331.82)
      PDF Settings CS6 (x32 Version: 11.0)
      PDFCreator (x32 Version: 1.7.0)
      PeaZip 4.9.2 (WIN64)
      PeaZip 5.1.0 (x32)
      Photo Common (x32 Version: 16.4.3505.0912)
      Protected Folder (x32)
      RaidCall (x32 Version: 7.2.4-1.0.7299.14)
      Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011)
      Realtek High Definition Audio Driver (x32 Version: 6.0.1.7106)
      RS Somnífero (x32 Version: 2.7.2005.4163)
      SafeSaver 1.74 (x32) <==== ATTENTION
      SCANIA Truck Driving Simulator 1.0.0 (x32 Version: 1.0.0)
      Search Assistant WebSearch 1.74 (x32) <==== ATTENTION
      Search Protection (HKCU Version: 7.5.0.1)
      Silent Hunter 4 Wolves of the Pacific (x32 Version: 1.05.0000)
      Skype™ 6.11 (x32 Version: 6.11.102)
      Sniper Elite V.2 Repack (x32)
      Songr (x32 Version: 2.0.2197)
      SoundTrax (x32 Version: 4.0.18.0)
      SpeedFan (remove only) (x32)
      SpinTires Tech Demo (June 040613) (x32 Version: 1.3)
      Splash PRO EX (x32 Version: 1.13.2)
      Steam (x32 Version: 1.0.0.0)
      Surfing Protection (x32 Version: 1.0)
      System Explorer 4.5.0 (x32)
      TeraCopy 2.27
      The KMPlayer (remove only) (x32 Version: 3.7.0.113)
      TornTV (x32 Version: 2.1 Build 26473) <==== ATTENTION
      Train Simulator 2013 (x32)
      Unlocker 1.9.1-x64 (Version: 1.9.1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
      Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
      Utilidad de Cliente Inalámbrico TP-LINK (x32 Version: 7)
      Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64) (Version: 11.0.200)
      Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
      VLC media player 2.2.0-git-20130801-0403 (Version: 2.2.0-git-20130801-0403)
      Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
      Windows Live Essentials (x32 Version: 16.4.3505.0912)
      Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
      Windows Live Installer (x32 Version: 16.4.3505.0912)
      Windows Live Messenger (x32 Version: 16.4.3505.0912)
      Windows Live Photo Common (x32 Version: 16.4.3505.0912)
      Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
      Windows Live SOXE (x32 Version: 16.4.3505.0912)
      Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
      Windows Live UX Platform (x32 Version: 16.4.3505.0912)
      Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
      WinPcap 4.1.3 (x32 Version: 4.1.0.2980)
      WinRAR 4.00 (64-bit) (Version: 4.00.0)

      ==================== Restore Points =========================

      10-12-2013 12:20:11 Windows Update
      11-12-2013 14:19:51 Installed ASUSUpdate
      11-12-2013 14:34:50 IObit Uninstaller restore point
      16-12-2013 13:13:57 funsiona
      16-12-2013 13:18:09 Windows Update
      16-12-2013 13:31:22 Windows Update
      16-12-2013 15:36:44 Instalado Realtek Ethernet Controller Driver
      16-12-2013 15:57:45 Driver Booster : Dispositivo de High Definition Audio
      18-12-2013 00:24:18 Driver Booster : Realtek High Definition Audio

      ==================== Hosts content: ==========================

      2009-07-14 03:34 - 2013-11-17 21:06 - 00000849 ____A C:\Windows\system32\Drivers\etc\hosts
      127.0.0.1 Speed Up Slow Computer, Keep PC and Internet Secure, Freeware Download - IObit

      ==================== Scheduled Tasks (whitelisted) =============

      Task: {258D0F18-9940-4489-A3AD-431F410B0648} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1011552609-289194131-2329688827-1001UA => C:\Users\USUARI\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-23] (Facebook Inc.)
      Task: {33C5DC6B-5263-4D34-A340-544438145B5D} - \{0A7D6358-5CA2-4805-9701-8DC8B103B39C} No Task File
      Task: {3BA94DF4-9E1A-45AA-AD85-C91469ABEEFF} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2013-09-08] (IObit)
      Task: {4BA52BF1-69C9-469B-9B45-F3B6E313E298} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2013-05-27] (Glarysoft Ltd)
      Task: {595C1747-E286-4704-885C-85081C54D5DC} - \SmartDefragUpdate No Task File
      Task: {7537D3E9-AF9F-4DFA-8999-9B4DF9E2B76E} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)
      Task: {A4EF56DD-0641-4797-9DFB-6B422C555746} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
      Task: {B354C35E-878B-4005-8CB5-361EB4E8D210} - \Maxthon Update No Task File
      Task: {C445E391-BB60-4AF2-A774-BA19551E3C6C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
      Task: {C8DDDBA0-DD3C-45B8-97B8-25D3D671E24B} - \CreateChoiceProcessTask No Task File
      Task: {D2491DFF-1300-4521-A4D6-5FBF10557C92} - System32\Tasks\AdobeAAMUpdater-1.0-USUARI-PC-USUARI => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-09-25] (Adobe Systems Incorporated)
      Task: {D9A37F54-10E7-499E-B06E-7AAAC9EACDA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-13] (Google Inc.)
      Task: {FBE0451E-F37C-46BA-98F2-57D862F11E44} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-13] (Google Inc.)
      Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1011552609-289194131-2329688827-1001UA.job => C:\Users\USUARI\AppData\Local\Facebook\Update\FacebookUpdate.exe
      Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
      Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

      ==================== Loaded Modules (whitelisted) =============

      2013-11-29 23:39 - 2013-11-29 23:39 - 00292424 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegratorStub64.dll
      2013-10-16 18:02 - 2013-10-16 18:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
      2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
      2013-04-24 02:31 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
      2013-04-27 07:58 - 2011-10-26 16:41 - 00318976 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
      2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
      2013-01-23 12:54 - 2013-01-23 12:54 - 00653824 _____ () C:\Program Files (x86)\4shared Desktop\CMenu64.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00442952 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\HPG64.DLL
      2011-06-21 07:06 - 2011-06-21 07:06 - 00249344 _____ () C:\Program Files (x86)\HTC Home\Home.Base.dll
      2011-06-20 14:12 - 2011-06-20 14:12 - 00011776 _____ () C:\Program Files (x86)\HTC Home\Home.Packaging.dll
      2011-06-21 07:06 - 2011-06-22 09:15 - 00016896 _____ () C:\Program Files (x86)\HTC Home\Weather.Base.dll
      2011-06-20 14:12 - 2011-06-22 09:15 - 00018432 _____ () C:\Program Files (x86)\HTC Home\Extras\Weather\MSN.dll
      2011-06-20 09:49 - 2011-06-20 09:49 - 04660736 _____ () C:\Program Files (x86)\HTC Home\UIFramework.Weather.dll
      2013-10-26 01:20 - 2013-10-26 01:15 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
      2013-04-26 17:36 - 2009-03-19 21:35 - 00208896 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
      2013-04-26 17:36 - 2009-03-19 21:35 - 00008704 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
      2013-04-26 17:36 - 2009-01-15 13:55 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
      2013-04-26 17:36 - 2009-03-25 15:53 - 00053248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
      2013-08-25 20:47 - 2012-10-22 10:21 - 01277952 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avformat-53.dll
      2013-08-25 20:47 - 2012-07-09 16:57 - 02090496 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avcodec-53.dll
      2013-08-25 20:47 - 2011-12-06 15:19 - 00133632 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avutil-51.dll
      2013-08-25 20:47 - 2012-03-23 09:07 - 00224768 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\libupnp.dll
      2013-12-20 13:00 - 2013-12-20 13:00 - 00158720 _____ () C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-04-28 14:53 - 2013-12-20 13:00 - 00192512 _____ () C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      2013-10-26 01:20 - 2013-10-26 01:14 - 00447848 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\libxml2.dll
      2013-10-26 01:20 - 2013-10-26 01:14 - 00060264 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\cares.dll

      ==================== Alternate Data Streams (whitelisted) =========

      AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8

      ==================== Safe Mode (whitelisted) ===================

      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DFServ => ""="Service"
      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

      ==================== Faulty Device Manager Devices =============


      ==================== Event log errors: =========================

      Application errors:
      ==================
      Error: (12/20/2013 01:30:48 PM) (Source: .NET Runtime) (User: )
      Description: .NET Runtime version 4.0.30319.1008 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 2832. Message ID: [0x2509].

      Error: (12/20/2013 01:29:15 PM) (Source: .NET Runtime) (User: )
      Description: .NET Runtime version 4.0.30319.1008 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4632. Message ID: [0x2509].

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el índice.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar la aplicación.

      Contexto: aplicación Windows

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el objeto Recopilador.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el complemento <Search.TripoliIndexer>.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      No se ha encontrado el elemento. (HRESULT : 0x80070490) (0x80070490)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el complemento <Search.JetPropStore>.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio Windows Search no puede cargar la información del almacén de propiedades.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      La base de datos del índice de contenido está dañada. (HRESULT : 0xc0041800) (0xc0041800)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: The catalog is corrupt.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio de búsqueda detectó archivos de datos dañados en el índice {id=4700}. Este servicio intentará corregir este problema automáticamente mediante la nueva generación del índice.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)


      System errors:
      =============
      Error: (12/20/2013 01:03:33 PM) (Source: Service Control Manager) (User: )
      Description: El servicio NVIDIA Update Service Daemon no pudo iniciarse debido al siguiente error:
      %%1069

      Error: (12/20/2013 01:03:33 PM) (Source: Service Control Manager) (User: )
      Description: El servicio nvUpdatusService no se pudo iniciarse como .\UpdatusUser con la contraseña configurada actualmente debido al siguiente error:
      %%1330

      Para asegurarse de que el servicio esté correctamente configurado, use el complemento Servicios en Microsoft Management Console (MMC).

      Error: (12/20/2013 01:02:14 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Proveedor de Grupo Hogar depende del servicio Host de proveedor de detección de función, el cual no pudo iniciarse debido al siguiente error:
      %%1058

      Error: (12/20/2013 01:01:39 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Windows Search terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

      Error: (12/20/2013 01:01:38 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Windows Search se cerró con el error específico de servicio %%-1073473535.

      Error: (12/20/2013 00:59:41 PM) (Source: NetBT) (User: )
      Description: No se pudo registrar el nombre "USUARI-PC :20" en la interfaz con dirección IP 192.168.1.128.
      El equipo la con dirección IP 192.168.1.35 no admite el nombre reclamado por este equipo.

      Error: (12/20/2013 00:59:41 PM) (Source: Server) (User: )
      Description: El servidor no pudo enlazarse al transporte \Device\NetBT_Tcpip_{66F456FF-A607-48D8-A905-EC2D2C4CEF80} debido a que otro equipo en la red tiene el mismo nombre. No se puede iniciar el servidor.

      Error: (12/20/2013 00:59:37 PM) (Source: NetBT) (User: )
      Description: No se pudo registrar el nombre "USUARI-PC :0" en la interfaz con dirección IP 192.168.1.128.
      El equipo la con dirección IP 192.168.1.35 no admite el nombre reclamado por este equipo.

      Error: (12/20/2013 00:59:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
      Description: El módulo de extensibilidad de WLAN no se pudo iniciar.

      Ruta de acceso del módulo: C:\Windows\system32\athExt.dll
      Código de error: 126

      Error: (12/20/2013 00:17:40 AM) (Source: Service Control Manager) (User: )
      Description: El servicio Proveedor de Grupo Hogar depende del servicio Host de proveedor de detección de función, el cual no pudo iniciarse debido al siguiente error:
      %%1058


      Microsoft Office Sessions:
      =========================

      CodeIntegrity Errors:
      ===================================
      Date: 2013-08-13 23:01:59.842
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-08-13 23:01:59.753
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.798
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.736
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.673
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.595
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.533
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.455
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.392
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.330
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.


      ==================== Memory info ===========================

      Percentage of memory in use: 28%
      Total physical RAM: 8174.12 MB
      Available physical RAM: 5878.63 MB
      Total Pagefile: 16346.42 MB
      Available Pagefile: 13856.28 MB
      Total Virtual: 8192 MB
      Available Virtual: 8191.82 MB

      ==================== Drives ================================

      Drive c: () (Fixed) (Total:465.66 GB) (Free:196.87 GB) NTFS
      Drive d: (Nuevo) (CDROM) (Total:1.51 GB) (Free:0 GB) CDFS
      Drive e: (xenia) (Fixed) (Total:931.51 GB) (Free:176.52 GB) NTFS

      ==================== MBR & Partition Table ==================

      ========================================================
      Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0469C520)
      Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
      Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

      ========================================================
      Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 882085E0)
      Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

      ==================== End Of Log ============================

      Aquí lo tienes , esto e de decir que mi pc (creo) que está limpia es cuando vuelva conectar el facebook de mi hija se volverá a infectar ya que si lo hago con el mío no pasa nada , aconséjame que hacer gracias compi.

    5. #5
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      Additional scan result of Farbar Recovery Scan Tool (x64) Version: 20-12-2013 02
      Ran by USUARI at 2013-12-20 17:08:28
      Running from C:\Users\USUARI\Desktop
      Boot Mode: Normal
      ==========================================================


      ==================== Security Center ========================

      AV: Avira Desktop (Disabled - Up to date) {F67B4DE5-C0B4-6C3F-0EFF-6C83BD5D0C2C}
      AS: Avira Desktop (Disabled - Up to date) {4D1AAC01-E68E-63B1-344F-57F1C6DA4691}
      AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
      AS: IObit Malware Fighter (Disabled - Up to date) {A751AC20-3B48-5237-898A-78C4436BB78D}

      ==================== Installed Programs ======================

      "Nero SoundTrax Help (x32 Version: 4.0.15.0)
      µTorrent (HKCU Version: 3.3.2.30303)
      4shared Desktop (x32)
      7plugincoupon (x32)
      AC3D 7.0.11 (x32)
      Actualización de NVIDIA 1.11.3 (Version: 1.11.3)
      Adobe AIR (x32 Version: 3.9.0.1380)
      Adobe Creative Cloud (x32 Version: 2.2.1.260)
      Adobe Flash Player 11 ActiveX (x32 Version: 11.9.900.117)
      Adobe Flash Player 11 Plugin (x32 Version: 11.9.900.117)
      Adobe Photoshop CS6 (x32 Version: 13.0)
      Adobe Reader XI (11.0.05) - Español (x32 Version: 11.0.05)
      Advertising Center (x32 Version: 0.0.0.1)
      AIMP3 (x32 Version: v3.51.1288, 07.08.2013)
      Any Video Converter 5.0.9 (x32)
      AnyDVD (x32 Version: 7.1.6.0)
      Argente - Registry Cleaner 3.0.0.2 (x32 Version: 3.0.0.2)
      ARMA 3 (x32 Version: 1)
      ASUS GPU Tweak (x32 Version: 2.1.0.1)
      ASUSUpdate (x32 Version: 7.18.03)
      ATI Catalyst Install Manager (Version: 3.0.762.0)
      Aurora 27.0a2 (x86 es-ES) (x32 Version: 27.0a2)
      Avira Internet Security (x32 Version: 14.0.2.286)
      Avira SearchFree Toolbar (x32 Version: 12.6.0.1900)
      AVS Screen Capture version 2.0.1 (x32)
      AVS Update Manager 1.0 (x32)
      AVS Video Editor 6 (x32)
      AVS Video Recorder 2.4 (x32)
      AVS4YOU Software Navigator 1.4 (x32)
      Call of Duty Ghosts MULTI 5 (x32 Version: 1)
      Camtasia Studio 6 (x32 Version: 6.0.0)
      CCleaner (Version: 4.07)
      Cheat Engine 6.2 (x32)
      CursorXP (x32)
      D3DX10 (x32 Version: 15.4.2368.0902)
      DolbyFiles (x32 Version: 2.0)
      Dragon NaturallySpeaking 11 (x32 Version: 11.0.200)
      Driver Booster (x32 Version: 1.0)
      DVD Shrink 3.2 (x32)
      EA Download Manager UI (x32 Version: 6.0.4)
      EA Download Manager UI (x32 Version: 6.0.4.124)
      eMule (x32)
      EPU-4 Engine (x32 Version: 1.02.01)
      Euro Truck Simulator 2 (x32 Version: 1.1.1)
      Facebook Video Calling 1.2.0.287 (x32 Version: 1.2.287)
      Farming Simulator 2011 (x32 Version: 1.0)
      Farming Simulator 2013 (x32 Version: 1.0)
      Fraps (remove only) (x32)
      FXWebPlayer (x32)
      German Truck Simulator 1.04 (x32 Version: 1.04)
      GIANTS Editor 5.0.1 (x32 Version: 5.0.1)
      GIANTS Editor 5.0.3 64-bit (x32 Version: 5.0.3)
      Glary Utilities 2.56.0.1822 (x32 Version: 2.56.0.1822)
      Glary Utilities 3.9.4 (x32 Version: 3.9.4.144)
      Google Earth Plug-in (x32 Version: 7.1.2.2041)
      Google Update Helper (x32 Version: 1.3.22.3)
      GRID Demo (x32 Version: 1.00.0000)
      HTC Home Apis (x32 Version: 3.0.620.0)
      IconPackager (x32 Version: 5.00)
      IconPackager (x32)
      ImagXpress (x32 Version: 7.0.74.0)
      IObit Malware Fighter (x32 Version: 2.1)
      IObit Uninstaller (x32 Version: 3.0.3.1064)
      Java 7 Update 21 (64-bit) (Version: 7.0.210)
      Java 7 Update 45 (x32 Version: 7.0.450)
      Java Auto Updater (x32 Version: 2.1.9.8)
      Java(TM) 6 Update 25 (64-bit) (Version: 6.0.250)
      join.me (HKCU Version: 1.10.1.255)
      K-Lite Codec Pack 9.8.0 (64-bit) (Version: 9.8.0)
      KMP Service (x32)
      Landwirtschafts Simulator 2013 Hagensted Modified 2013 (x32 Version: Landwirtschafts Simulator 2013 Hagensted Modified 3.2.6)
      Malwarebytes Anti-Exploit version 0.09.3.1000 (Version: 0.09.3.1000)
      Malwarebytes Anti-Malware versión 1.75.0.1300 (x32 Version: 1.75.0.1300)
      Maxthon Cloud Browser (x32 Version: 4.0.5.4000)
      Mayordomo Virtual 1.4E (x32)
      Medal of Honor (TM) (x32 Version: 1.0.0.0)
      Menu Templates - Starter Kit (x32 Version: 9.0.4.0)
      Mi Agenda Ver. 2.0.5 (x32 Version: 2.0.5)
      Microsoft .NET Framework 4 Client Profile (Version: 4.0.30319)
      Microsoft .NET Framework 4 Extended (Version: 4.0.30319)
      Microsoft Application Error Reporting (Version: 12.0.6015.5000)
      Microsoft Office Access MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Enterprise 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Excel MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Groove MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office InfoPath MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Office 64-bit Components 2007 (Version: 12.0.4518.1014)
      Microsoft Office OneNote MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Outlook MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office PowerPoint MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Basque) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Catalan) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (English) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (French) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Galician) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Portuguese (Brazil)) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proof (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Proofing (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Publisher MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Shared 64-bit MUI (Spanish) 2007 (Version: 12.0.4518.1014)
      Microsoft Office Shared MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Office Word MUI (Spanish) 2007 (x32 Version: 12.0.4518.1014)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.50727.42)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.56336)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.59193)
      Microsoft Visual C++ 2005 Redistributable (x32 Version: 8.0.61001)
      Microsoft Visual C++ 2005 Redistributable (x64) (Version: 8.0.61000)
      Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (Version: 9.0.30729.4148)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (x32 Version: 9.0.30729)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (x32 Version: 9.0.30729)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (x32 Version: 9.0.30729.4148)
      Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (x32 Version: 9.0.30729.6161)
      Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (Version: 10.0.40219)
      Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (x32 Version: 10.0.40219)
      Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.51106 (x32 Version: 11.0.51106.1)
      Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.51106 (Version: 11.0.51106)
      Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.51106 (Version: 11.0.51106)
      Microsoft_VC80_CRT_x86 (x32 Version: 8.0.50727.4053)
      Microsoft_VC90_CRT_x86 (x32 Version: 1.00.0000)
      MiPony 2.1.0 (x32 Version: 2.1.0)
      Movie Templates - Starter Kit (x32 Version: 9.0.4.0)
      Mozilla Thunderbird 24.1.0 (x86 es-ES) (x32 Version: 24.1.0)
      MSVCRT (x32 Version: 15.4.2862.0708)
      MSVCRT110 (x32 Version: 16.4.1108.0727)
      MSVCRT110_amd64 (Version: 16.4.1109.0912)
      MSXML 4.0 SP2 (KB954430) (x32 Version: 4.20.9870.0)
      MSXML 4.0 SP2 (KB973688) (x32 Version: 4.20.9876.0)
      Need For Speed™ World (x32 Version: 1.0.0.1108)
      Nero 9 (x32)
      Nero BurningROM (x32 Version: 9.0.0.0)
      Nero BurnRights (x32 Version: 2.99.6.100)
      Nero ControlCenter (x32 Version: 0.0.0.1)
      Nero ControlCenter (x32 Version: 9.0.0.1)
      Nero CoverDesigner (x32 Version: 4.0.5.100)
      Nero CoverDesigner Help (x32 Version: 4.0.0.0)
      Nero Disc Copy Gadget (x32 Version: 1.53.0.0)
      Nero Disc Copy Gadget Help (x32 Version: 2.0.0.0)
      Nero DiscSpeed (x32 Version: 4.99.5.105)
      Nero DriveSpeed (x32 Version: 3.99.5.105)
      Nero Express (x32 Version: 9.0.0.0)
      Nero InfoTool (x32 Version: 5.99.5.105)
      Nero Installer (x32 Version: 2.0.0.1)
      Nero Live (x32 Version: 1.0.164.0)
      Nero Live Help (x32 Version: 1.0.162.0)
      Nero PhotoSnap (x32 Version: 1.53.2.0)
      Nero PhotoSnap Help (x32 Version: 1.53.2.0)
      Nero Recode (x32 Version: 3.53.0.0)
      Nero Recode Help (x32 Version: 3.53.0.0)
      Nero Rescue Agent (x32 Version: 1.99.0.1)
      Nero RescueAgent Help (x32 Version: 1.99.0.1)
      Nero ShowTime (x32 Version: 4.99.0.0)
      Nero StartSmart (x32 Version: 9.0.9.100)
      Nero StartSmart Help (x32 Version: 9.0.0.0)
      Nero Vision (x32 Version: 0.0.0.1)
      Nero Vision (x32 Version: 6.0.6.100)
      Nero WaveEditor (x32 Version: 5.0.18.0)
      Nero WaveEditor Help (x32 Version: 5.0.15.0)
      NeroBurningROM (x32 Version: 9.0.9.100)
      NeroExpress (x32 Version: 9.0.9.100)
      neroxml (x32 Version: 1.0.0)
      Notepad++ (x32 Version: 6.5)
      NVIDIA Controlador de la controladora 3D Vision 296.16 (Version: 296.16)
      NVIDIA Install Application (Version: 2.1002.133.889)
      NVIDIA PhysX (x32 Version: 9.12.0213)
      NVIDIA Software del sistema PhysX 9.12.0213 (Version: 9.12.0213)
      NVIDIA Update Components (Version: 1.11.3)
      OpenAL (x32)
      Panel de control de NVIDIA 331.82 (Version: 331.82)
      PDF Settings CS6 (x32 Version: 11.0)
      PDFCreator (x32 Version: 1.7.0)
      PeaZip 4.9.2 (WIN64)
      PeaZip 5.1.0 (x32)
      Photo Common (x32 Version: 16.4.3505.0912)
      Protected Folder (x32)
      RaidCall (x32 Version: 7.2.4-1.0.7299.14)
      Realtek Ethernet Controller Driver (x32 Version: 7.46.610.2011)
      Realtek High Definition Audio Driver (x32 Version: 6.0.1.7106)
      RS Somnífero (x32 Version: 2.7.2005.4163)
      SafeSaver 1.74 (x32) <==== ATTENTION
      SCANIA Truck Driving Simulator 1.0.0 (x32 Version: 1.0.0)
      Search Assistant WebSearch 1.74 (x32) <==== ATTENTION
      Search Protection (HKCU Version: 7.5.0.1)
      Silent Hunter 4 Wolves of the Pacific (x32 Version: 1.05.0000)
      Skype™ 6.11 (x32 Version: 6.11.102)
      Sniper Elite V.2 Repack (x32)
      Songr (x32 Version: 2.0.2197)
      SoundTrax (x32 Version: 4.0.18.0)
      SpeedFan (remove only) (x32)
      SpinTires Tech Demo (June 040613) (x32 Version: 1.3)
      Splash PRO EX (x32 Version: 1.13.2)
      Steam (x32 Version: 1.0.0.0)
      Surfing Protection (x32 Version: 1.0)
      System Explorer 4.5.0 (x32)
      TeraCopy 2.27
      The KMPlayer (remove only) (x32 Version: 3.7.0.113)
      TornTV (x32 Version: 2.1 Build 26473) <==== ATTENTION
      Train Simulator 2013 (x32)
      Unlocker 1.9.1-x64 (Version: 1.9.1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2468871) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2533523) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2600217) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2836939) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Client Profile (KB2836939v3) (x32 Version: 3)
      Update for Microsoft .NET Framework 4 Extended (KB2468871) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2533523) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2600217) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2836939) (x32 Version: 1)
      Update for Microsoft .NET Framework 4 Extended (KB2836939v3) (x32 Version: 3)
      Utilidad de Cliente Inalámbrico TP-LINK (x32 Version: 7)
      Visual C++ 9.0 Runtime for Dragon NaturallySpeaking 64bit (x64) (Version: 11.0.200)
      Visual Studio 2010 x64 Redistributables (Version: 13.0.0.1)
      VLC media player 2.2.0-git-20130801-0403 (Version: 2.2.0-git-20130801-0403)
      Windows Live Communications Platform (x32 Version: 16.4.3505.0912)
      Windows Live Essentials (x32 Version: 16.4.3505.0912)
      Windows Live ID Sign-in Assistant (Version: 7.250.4311.0)
      Windows Live Installer (x32 Version: 16.4.3505.0912)
      Windows Live Messenger (x32 Version: 16.4.3505.0912)
      Windows Live Photo Common (x32 Version: 16.4.3505.0912)
      Windows Live PIMT Platform (x32 Version: 16.4.3505.0912)
      Windows Live SOXE (x32 Version: 16.4.3505.0912)
      Windows Live SOXE Definitions (x32 Version: 16.4.3505.0912)
      Windows Live UX Platform (x32 Version: 16.4.3505.0912)
      Windows Live UX Platform Language Pack (x32 Version: 16.4.3505.0912)
      WinPcap 4.1.3 (x32 Version: 4.1.0.2980)
      WinRAR 4.00 (64-bit) (Version: 4.00.0)

      ==================== Restore Points =========================

      10-12-2013 12:20:11 Windows Update
      11-12-2013 14:19:51 Installed ASUSUpdate
      11-12-2013 14:34:50 IObit Uninstaller restore point
      16-12-2013 13:13:57 funsiona
      16-12-2013 13:18:09 Windows Update
      16-12-2013 13:31:22 Windows Update
      16-12-2013 15:36:44 Instalado Realtek Ethernet Controller Driver
      16-12-2013 15:57:45 Driver Booster : Dispositivo de High Definition Audio
      18-12-2013 00:24:18 Driver Booster : Realtek High Definition Audio

      ==================== Hosts content: ==========================

      2009-07-14 03:34 - 2013-11-17 21:06 - 00000849 ____A C:\Windows\system32\Drivers\etc\hosts
      127.0.0.1 Speed Up Slow Computer, Keep PC and Internet Secure, Freeware Download - IObit

      ==================== Scheduled Tasks (whitelisted) =============

      Task: {258D0F18-9940-4489-A3AD-431F410B0648} - System32\Tasks\FacebookUpdateTaskUserS-1-5-21-1011552609-289194131-2329688827-1001UA => C:\Users\USUARI\AppData\Local\Facebook\Update\FacebookUpdate.exe [2013-05-23] (Facebook Inc.)
      Task: {33C5DC6B-5263-4D34-A340-544438145B5D} - \{0A7D6358-5CA2-4805-9701-8DC8B103B39C} No Task File
      Task: {3BA94DF4-9E1A-45AA-AD85-C91469ABEEFF} - System32\Tasks\Driver Booster Scan => C:\Program Files (x86)\IObit\Driver Booster\Scheduler.exe [2013-09-08] (IObit)
      Task: {4BA52BF1-69C9-469B-9B45-F3B6E313E298} - System32\Tasks\GlaryInitialize => C:\Program Files (x86)\Glary Utilities\initialize.exe [2013-05-27] (Glarysoft Ltd)
      Task: {595C1747-E286-4704-885C-85081C54D5DC} - \SmartDefragUpdate No Task File
      Task: {7537D3E9-AF9F-4DFA-8999-9B4DF9E2B76E} - System32\Tasks\ASUS\ASUS SIX Engine => C:\Program Files (x86)\ASUS\EPU-4 Engine\FourEngine.exe [2010-02-03] (ASUSTeK Computer Inc.)
      Task: {A4EF56DD-0641-4797-9DFB-6B422C555746} - System32\Tasks\ASUS\ASUS Update Checker => C:\Program Files (x86)\ASUS\ASUSUpdate\UpdateChecker\UpdateChecker.exe [2009-12-28] (ASUSTeK Computer Inc.)
      Task: {B354C35E-878B-4005-8CB5-361EB4E8D210} - \Maxthon Update No Task File
      Task: {C445E391-BB60-4AF2-A774-BA19551E3C6C} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2013-10-22] (Piriform Ltd)
      Task: {C8DDDBA0-DD3C-45B8-97B8-25D3D671E24B} - \CreateChoiceProcessTask No Task File
      Task: {D2491DFF-1300-4521-A4D6-5FBF10557C92} - System32\Tasks\AdobeAAMUpdater-1.0-USUARI-PC-USUARI => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\updaterstartuputility.exe [2013-09-25] (Adobe Systems Incorporated)
      Task: {D9A37F54-10E7-499E-B06E-7AAAC9EACDA2} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-13] (Google Inc.)
      Task: {FBE0451E-F37C-46BA-98F2-57D862F11E44} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2013-09-13] (Google Inc.)
      Task: C:\Windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1011552609-289194131-2329688827-1001UA.job => C:\Users\USUARI\AppData\Local\Facebook\Update\FacebookUpdate.exe
      Task: C:\Windows\Tasks\GlaryInitialize.job => C:\Program Files (x86)\Glary Utilities\initialize.exe
      Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
      Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

      ==================== Loaded Modules (whitelisted) =============

      2013-11-29 23:39 - 2013-11-29 23:39 - 00292424 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegratorStub64.dll
      2013-10-16 18:02 - 2013-10-16 18:02 - 03358064 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync_x64.dll
      2010-07-15 05:44 - 2010-07-15 05:44 - 00020032 _____ () C:\Program Files\Unlocker\UnlockerCOM.dll
      2013-04-24 02:31 - 2011-03-02 11:40 - 00164864 _____ () C:\Program Files\WinRAR\rarext.dll
      2013-04-27 07:58 - 2011-10-26 16:41 - 00318976 _____ () C:\Program Files\TeraCopy\TeraCopyExt64.dll
      2012-06-18 16:24 - 2012-06-18 16:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
      2013-01-23 12:54 - 2013-01-23 12:54 - 00653824 _____ () C:\Program Files (x86)\4shared Desktop\CMenu64.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00442952 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\HPG64.DLL
      2011-06-21 07:06 - 2011-06-21 07:06 - 00249344 _____ () C:\Program Files (x86)\HTC Home\Home.Base.dll
      2011-06-20 14:12 - 2011-06-20 14:12 - 00011776 _____ () C:\Program Files (x86)\HTC Home\Home.Packaging.dll
      2011-06-21 07:06 - 2011-06-22 09:15 - 00016896 _____ () C:\Program Files (x86)\HTC Home\Weather.Base.dll
      2011-06-20 14:12 - 2011-06-22 09:15 - 00018432 _____ () C:\Program Files (x86)\HTC Home\Extras\Weather\MSN.dll
      2011-06-20 09:49 - 2011-06-20 09:49 - 04660736 _____ () C:\Program Files (x86)\HTC Home\UIFramework.Weather.dll
      2013-10-26 01:20 - 2013-10-26 01:15 - 00394824 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\sqlite3.dll
      2013-04-26 17:36 - 2009-03-19 21:35 - 00208896 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AiNap.dll
      2013-04-26 17:36 - 2009-03-19 21:35 - 00008704 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\vvc.dll
      2013-04-26 17:36 - 2009-01-15 13:55 - 00565248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\pngio.dll
      2013-04-26 17:36 - 2009-03-25 15:53 - 00053248 _____ () C:\Program Files (x86)\ASUS\EPU-4 Engine\AsSpindownTimeout.dll
      2013-08-25 20:47 - 2012-10-22 10:21 - 01277952 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avformat-53.dll
      2013-08-25 20:47 - 2012-07-09 16:57 - 02090496 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avcodec-53.dll
      2013-08-25 20:47 - 2011-12-06 15:19 - 00133632 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\avutil-51.dll
      2013-08-25 20:47 - 2012-03-23 09:07 - 00224768 _____ () C:\Program Files (x86)\PANDORA.TV\PanService\libupnp.dll
      2013-12-20 13:00 - 2013-12-20 13:00 - 00158720 _____ () C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-04-28 14:53 - 2013-12-20 13:00 - 00192512 _____ () C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      2013-10-26 01:20 - 2013-10-26 01:14 - 00447848 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\libxml2.dll
      2013-10-26 01:20 - 2013-10-26 01:14 - 00060264 _____ () C:\Program Files (x86)\Avira\AntiVir Desktop\cares.dll

      ==================== Alternate Data Streams (whitelisted) =========

      AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8

      ==================== Safe Mode (whitelisted) ===================

      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\DFServ => ""="Service"
      HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\IMFservice => ""="Service"

      ==================== Faulty Device Manager Devices =============


      ==================== Event log errors: =========================

      Application errors:
      ==================
      Error: (12/20/2013 01:30:48 PM) (Source: .NET Runtime) (User: )
      Description: .NET Runtime version 4.0.30319.1008 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 2832. Message ID: [0x2509].

      Error: (12/20/2013 01:29:15 PM) (Source: .NET Runtime) (User: )
      Description: .NET Runtime version 4.0.30319.1008 - There was a failure initializing profiling API attach infrastructure. This process will not allow a profiler to attach. HRESULT: 0x80004005. Process ID (decimal): 4632. Message ID: [0x2509].

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el índice.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar la aplicación.

      Contexto: aplicación Windows

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el objeto Recopilador.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el complemento <Search.TripoliIndexer>.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      No se ha encontrado el elemento. (HRESULT : 0x80070490) (0x80070490)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: No se puede inicializar el complemento <Search.JetPropStore>.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio Windows Search no puede cargar la información del almacén de propiedades.

      Contexto: aplicación Windows, catálogo SystemIndex

      Detalles:
      La base de datos del índice de contenido está dañada. (HRESULT : 0xc0041800) (0xc0041800)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio Windows Search se está deteniendo porque hay un problema con el indizador: The catalog is corrupt.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)

      Error: (12/20/2013 01:01:37 PM) (Source: Windows Search Service) (User: )
      Description: El servicio de búsqueda detectó archivos de datos dañados en el índice {id=4700}. Este servicio intentará corregir este problema automáticamente mediante la nueva generación del índice.

      Detalles:
      El catálogo del índice de contenido está dañado. (HRESULT : 0xc0041801) (0xc0041801)


      System errors:
      =============
      Error: (12/20/2013 01:03:33 PM) (Source: Service Control Manager) (User: )
      Description: El servicio NVIDIA Update Service Daemon no pudo iniciarse debido al siguiente error:
      %%1069

      Error: (12/20/2013 01:03:33 PM) (Source: Service Control Manager) (User: )
      Description: El servicio nvUpdatusService no se pudo iniciarse como .\UpdatusUser con la contraseña configurada actualmente debido al siguiente error:
      %%1330

      Para asegurarse de que el servicio esté correctamente configurado, use el complemento Servicios en Microsoft Management Console (MMC).

      Error: (12/20/2013 01:02:14 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Proveedor de Grupo Hogar depende del servicio Host de proveedor de detección de función, el cual no pudo iniciarse debido al siguiente error:
      %%1058

      Error: (12/20/2013 01:01:39 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Windows Search terminó inesperadamente. Esto se ha repetido 1 veces. Se realizará la siguiente acción correctora en 30000 milisegundos: Reiniciar el servicio.

      Error: (12/20/2013 01:01:38 PM) (Source: Service Control Manager) (User: )
      Description: El servicio Windows Search se cerró con el error específico de servicio %%-1073473535.

      Error: (12/20/2013 00:59:41 PM) (Source: NetBT) (User: )
      Description: No se pudo registrar el nombre "USUARI-PC :20" en la interfaz con dirección IP 192.168.1.128.
      El equipo la con dirección IP 192.168.1.35 no admite el nombre reclamado por este equipo.

      Error: (12/20/2013 00:59:41 PM) (Source: Server) (User: )
      Description: El servidor no pudo enlazarse al transporte \Device\NetBT_Tcpip_{66F456FF-A607-48D8-A905-EC2D2C4CEF80} debido a que otro equipo en la red tiene el mismo nombre. No se puede iniciar el servidor.

      Error: (12/20/2013 00:59:37 PM) (Source: NetBT) (User: )
      Description: No se pudo registrar el nombre "USUARI-PC :0" en la interfaz con dirección IP 192.168.1.128.
      El equipo la con dirección IP 192.168.1.35 no admite el nombre reclamado por este equipo.

      Error: (12/20/2013 00:59:30 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (User: NT AUTHORITY)
      Description: El módulo de extensibilidad de WLAN no se pudo iniciar.

      Ruta de acceso del módulo: C:\Windows\system32\athExt.dll
      Código de error: 126

      Error: (12/20/2013 00:17:40 AM) (Source: Service Control Manager) (User: )
      Description: El servicio Proveedor de Grupo Hogar depende del servicio Host de proveedor de detección de función, el cual no pudo iniciarse debido al siguiente error:
      %%1058


      Microsoft Office Sessions:
      =========================

      CodeIntegrity Errors:
      ===================================
      Date: 2013-08-13 23:01:59.842
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-08-13 23:01:59.753
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Program Files (x86)\Glary Utilities 3\ProcObsrv.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.798
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.736
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.673
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.595
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.533
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.455
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.392
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.

      Date: 2013-05-06 20:44:40.330
      Description: Windows no puede comprobar la integridad de imagen del archivo \Device\HarddiskVolume2\Windows\System32\drivers\VComm.sys porque el hash del archivo no se encuentra en el sistema. Puede que un cambio reciente de hardware o software haya instalado un archivo dañado o con una firma incorrecta, o que exista un software malintencionado de origen desconocido.


      ==================== Memory info ===========================

      Percentage of memory in use: 28%
      Total physical RAM: 8174.12 MB
      Available physical RAM: 5878.63 MB
      Total Pagefile: 16346.42 MB
      Available Pagefile: 13856.28 MB
      Total Virtual: 8192 MB
      Available Virtual: 8191.82 MB

      ==================== Drives ================================

      Drive c: () (Fixed) (Total:465.66 GB) (Free:196.87 GB) NTFS
      Drive d: (Nuevo) (CDROM) (Total:1.51 GB) (Free:0 GB) CDFS
      Drive e: (xenia) (Fixed) (Total:931.51 GB) (Free:176.52 GB) NTFS

      ==================== MBR & Partition Table ==================

      ========================================================
      Disk: 0 (MBR Code: Windows 7 or 8) (Size: 466 GB) (Disk ID: 0469C520)
      Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
      Partition 2: (Not Active) - (Size=466 GB) - (Type=07 NTFS)

      ========================================================
      Disk: 1 (MBR Code: Windows XP) (Size: 932 GB) (Disk ID: 882085E0)
      Partition 1: (Not Active) - (Size=932 GB) - (Type=07 NTFS)

      ==================== End Of Log ============================


      Aquí lo tienes , esto e de decir que mi pc (creo) que está limpia es cuando vuelva conectar el facebook de mi hija se volverá a infectar ya que si lo hago con el mío no pasa nada , aconséjame que hacer gracias compi.

    6. #6
      Moderador
      Avatar de M@co
      Registrado
      dic 2007
      Ubicación
      America
      Mensajes
      15.820

      Re: virus en el facebook de mi hija

      Hola.

      Tienes el PC bastante lleno de Adware.

      No entendí lo ultimo que has escrito.

      Realiza lo siguiente:

      1.- Crea un punto de restauración del sistema. Windows XP | Windows seven

      2.- Desactiva temporalmente el Antivirus y/o Antispyware.

      3.- Abre el block de notas (Inicio > todos los programas > accesorios > Block de notas).
      • Copia por completo el contenido de la siguiente casilla dentro del block de notas:

      Código:
      () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe
      HKLM\...\Run: [Zwinky Home Page Guard 64 bit] - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe [548936 2013-11-29] ()
      HKU\UpdatusUser\...\Run: [SearchProtection] - "C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=hp&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547
      URLSearchHook: HKCU - (No Name) - {cc2e2b99-14d3-4516-883c-9ea147f594ef} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll
      StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe http://www.qvo6.com/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=sc&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547
      SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=ES&userid=d67e00d6-7f6e-45d0-9f2f-8cfc1d78dd6f&searchtype=ds&q={searchTerms}&installDate=01/07/2013
      SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4299F8D1110D5A87&affID=119357&tt=160913_m3&tsp=5013
      SearchScopes: HKCU - {7C4042BE-5946-489B-93C2-EEE26B624ED3} URL = http://www.search.ask.com/web?p2=%5EB7K%5EYYYYYY%5EYY%5EES&gct=&itbv=12.2.2.604&o=APN11290&tpid=CME-V7&apn_uid=918F4C1B-491C-460D-9B0E-7DA352B781C3&apn_ptnrs=%5EB7K&apn_dtid=%5EYYYYYY%5EYY%5EES&apn_dbr=iexplore.exe_6_10.0.9200.16635&doi=2013-08-12&trgb=IE&q={searchTerms}&psv=barid%253D%257B94688D32%252D039C%252D11E3%252DAE53%252D5404A6F27779%257D%2526cargo%253DCME%252DV7%2526spr%253Da
      BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      BHO-x32: Toolbar BHO - {27488090-768a-4d20-a938-f223f71c344c} - No File
      BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      BHO-x32: Search Assistant BHO - {bd3ea7c2-3af8-4463-9a9c-6eb8e136cb02} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
      Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      Toolbar: HKCU - No Name - {434D452D-5637-006A-76A7-7A786E7484D7} - No File
      Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      FF user.js: detected! => C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\user.js
      FF Plugin-x32: @Zwinky_5q.com/Plugin - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\NP5qStub.dll (MindSpark)
      FF SearchPlugin: C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\searchplugins\WebSearch.xml
      FF Extension: Plus-HD-2.2 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]d2a102a9.com
      FF Extension: LyricsSay-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]a27fe618.com
      FF Extension: a2zLyrics-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]864a5978.com
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: Torntv 3 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
      R2 Zwinky_5qService; C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbarsvc.exe [44752 2013-11-29] (COMPANYVERS_NAME)
      2013-11-29 23:39 - 2013-11-29 23:39 - 00000000 ____D C:\Program Files (x86)\Zwinky_5q
      2013-12-19 23:17 - 2013-09-11 14:28 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Search Protection
      C:\Users\USUARI\AppData\Local\Temp\avgnt.exe
      C:\Users\USUARI\AppData\Local\Temp\rssomnifero.exe
      C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00292424 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegratorStub64.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00442952 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\HPG64.DLL
      2013-12-20 13:00 - 2013-12-20 13:00 - 00158720 _____ () C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-04-28 14:53 - 2013-12-20 13:00 - 00192512 _____ () C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8
      cmd: ipconfig /flushdns
      • Guarda este archivo en el escritorio de windows con el nombre de fixlist.txt.
        Nota: Es importante que ambos archivos, FRST.exe/FRST64.exe y fixlist.txt, estén ubicados en el mismo directorio, de lo contrario no se podrá llevar a cabo la reparación.
      • Ejecuta FRST y presiona el botón Fix.

      • Al terminar se generará un reporte llamado Fixlog.txt.
      • Pega el contenido de ese log en la próxima respuesta.

      Advertencia: Este script fue escrito específicamente para este usuario y para ser usado en su maquina; ejecutarlo en otra Pc puede causar daños al sistema operativo.
      4.- Descarga AdwCleaner en el escritorio.
      • NOTA: Desactiva temporalmente el Antivirus y/o Antispyware y cierra todos los programas antes de ejecutar esta herramienta
      • Haz click Derecho | Ejecutar como administrador al icono de Adwcleaner (o doble click si eres usuario de Windows Xp).
      • Una Vez abierto le das al botón Escanear y espera a que el análisis finalice.
      • Al terminar envía todo a la cuarentena haciendo click en el botón Limpiar.
      • NOTA: En caso de que EL PROGRAMA te pida reiniciar hazlo .
      • Se va a abrir un reporte donde muestra lo que detectó, lo copias y lo pegas en el próximo mensaje.
      • En caso de que no se abra el reporte lo buscas en C:\AdwCleaner[R1].txt


      Recuerda dejarnos los reportes y comentar como evoluciona el problema para poder seguir con el tema...

      Saludos.

      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis


      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    7. #7
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      Fix result of Farbar Recovery Tool (FRST written by Farbar) (x64) Version: 20-12-2013 02
      Ran by USUARI at 2013-12-20 18:17:14 Run:1
      Running from C:\Users\USUARI\Desktop
      Boot Mode: Normal
      ==============================================

      Content of fixlist:
      *****************
      () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe
      HKLM\...\Run: [Zwinky Home Page Guard 64 bit] - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe [548936 2013-11-29] ()
      HKU\UpdatusUser\...\Run: [SearchProtection] - "C:\Users\USUARI\AppData\Roaming\Search Protection\SearchProtection.EXE" /autostart
      HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = QVO6
      URLSearchHook: HKCU - (No Name) - {cc2e2b99-14d3-4516-883c-9ea147f594ef} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll
      StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe QVO6
      SearchScopes: HKLM - DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKLM - {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = http://search.qvo6.com/web/?utm_source=b&utm_medium=cor&utm_campaign=eXQ&utm_content=ds&from=cor&uid=ST3500312CS_6VVE160ZXXXX6VVE160Z&ts=1380289547&type=default&q={searchTerms}
      SearchScopes: HKCU - {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = http://feed.snapdo.com/?publisher=SnapdoGOblidooYB&dpid=SnapdoGOblidooYB&co=ES&userid=d67e00d6-7f6e-45d0-9f2f-8cfc1d78dd6f&searchtype=ds&q={searchTerms}&installDate=01/07/2013
      SearchScopes: HKCU - {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} URL = http://www2.delta-search.com/?q={searchTerms}&babsrc=SP_ss&mntrId=4299F8D1110D5A87&affID=119357&tt=160913_m3&tsp=5013
      SearchScopes: HKCU - {7C4042BE-5946-489B-93C2-EEE26B624ED3} URL = http://www.search.ask.com/web?p2=%5EB7K%5EYYYYYY%5EYY%5EES&gct=&itbv=12.2.2.604&o=APN11290&tpid=CME-V7&apn_uid=918F4C1B-491C-460D-9B0E-7DA352B781C3&apn_ptnrs=%5EB7K&apn_dtid=%5EYYYYYY%5EYY%5EES&apn_dbr=iexplore.exe_6_10.0.9200.16635&doi=2013-08-12&trgb=IE&q={searchTerms}&psv=barid%253D%257B94688D32%252D039C%252D11E3%252DAE53%252D5404A6F27779%257D%2526cargo%253DCME%252DV7%2526spr%253Da
      BHO: Snap.DoEngine - {31ad400d-1b06-4e33-a59a-90c2c140cba0} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      BHO: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      BHO-x32: Toolbar BHO - {27488090-768a-4d20-a938-f223f71c344c} - No File
      BHO-x32: Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      BHO-x32: Search Assistant BHO - {bd3ea7c2-3af8-4463-9a9c-6eb8e136cb02} - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll (MindSpark)
      Toolbar: HKLM - Snap.Do - {ae07101b-46d4-4a98-af68-0333ea26e113} - C:\Windows\System32\mscoree.dll (Microsoft Corporation)
      Toolbar: HKLM - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      Toolbar: HKLM-x32 - No Name - {ae07101b-46d4-4a98-af68-0333ea26e113} - No File
      Toolbar: HKLM-x32 - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport.dll (APN LLC.)
      Toolbar: HKCU - No Name - {434D452D-5637-006A-76A7-7A786E7484D7} - No File
      Toolbar: HKCU - Avira SearchFree Toolbar - {41564952-412D-5637-00A7-7A786E7484D7} - C:\Program Files (x86)\AskPartnerNetwork\Toolbar\AVIRA-V7\Passport_x64.dll (APN LLC.)
      FF user.js: detected! => C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\user.js
      FF Plugin-x32: @Zwinky_5q.com/Plugin - C:\Program Files (x86)\Zwinky_5q\bar\1.bin\NP5qStub.dll (MindSpark)
      FF SearchPlugin: C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\searchplugins\WebSearch.xml
      FF Extension: Plus-HD-2.2 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]d2a102a9.com
      FF Extension: LyricsSay-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]a27fe618.com
      FF Extension: a2zLyrics-15 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]864a5978.com
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF Extension: Torntv 3 - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]
      FF HKLM-x32\...\Firefox\Extensions: [[email protected]] - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      FF Extension: MagniiPiC - C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected]
      R2 APNMCP; C:\Program Files (x86)\AskPartnerNetwork\Toolbar\apnmcp.exe [166352 2013-10-23] (APN LLC.)
      R2 Zwinky_5qService; C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qbarsvc.exe [44752 2013-11-29] (COMPANYVERS_NAME)
      2013-11-29 23:39 - 2013-11-29 23:39 - 00000000 ____D C:\Program Files (x86)\Zwinky_5q
      2013-12-19 23:17 - 2013-09-11 14:28 - 00000000 ____D C:\Users\USUARI\AppData\Roaming\Search Protection
      C:\Users\USUARI\AppData\Local\Temp\avgnt.exe
      C:\Users\USUARI\AppData\Local\Temp\rssomnifero.exe
      C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00292424 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegratorStub64.dll
      2013-11-29 23:39 - 2013-11-29 23:39 - 00442952 _____ () C:\Program Files (x86)\Zwinky_5q\bar\1.bin\HPG64.DLL
      2013-12-20 13:00 - 2013-12-20 13:00 - 00158720 _____ () C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll
      2013-04-28 14:53 - 2013-12-20 13:00 - 00192512 _____ () C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll
      AlternateDataStreams: C:\ProgramData\TEMP:0FF263E8
      cmd: ipconfig /flushdns
      *****************

      [3024] C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegrator64.exe => Process closed successfully.
      HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\Zwinky Home Page Guard 64 bit => Value deleted successfully.
      HKU\UpdatusUser\Software\Microsoft\Windows\CurrentVersion\Run\\SearchProtection => Value deleted successfully.
      HKLM\Software\\Microsoft\Internet Explorer\Main\\Start Page => Value was restored successfully.
      HKCU\Software\Microsoft\Internet Explorer\URLSearchHooks\\{cc2e2b99-14d3-4516-883c-9ea147f594ef} => Value deleted successfully.
      HKCR\Wow6432Node\CLSID\{cc2e2b99-14d3-4516-883c-9ea147f594ef} => Key deleted successfully.
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\5qSrcAs.dll => Moved successfully.
      HKLM\SOFTWARE\Clients\StartMenuInternet\IEXPLORE.EXE\shell\open\command\\Default => Value was restored successfully.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\\DefaultScope => Value was restored successfully.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key deleted successfully.
      HKCR\CLSID\{33BB0A4E-99AF-4226-BDF6-49120163DE86} => Key not found.
      HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key deleted successfully.
      HKCR\CLSID\{006ee092-9658-4fd6-bd8e-a21a348e59f5} => Key not found.
      HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key deleted successfully.
      HKCR\CLSID\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9} => Key not found.
      HKCU\SOFTWARE\Microsoft\Internet Explorer\SearchScopes\{7C4042BE-5946-489B-93C2-EEE26B624ED3} => Key deleted successfully.
      HKCR\CLSID\{7C4042BE-5946-489B-93C2-EEE26B624ED3} => Key not found.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{31ad400d-1b06-4e33-a59a-90c2c140cba0} => Key deleted successfully.
      HKCR\CLSID\{31ad400d-1b06-4e33-a59a-90c2c140cba0} => Key deleted successfully.
      HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
      HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
      HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{27488090-768a-4d20-a938-f223f71c344c} => Key deleted successfully.
      HKCR\Wow6432Node\CLSID\{27488090-768a-4d20-a938-f223f71c344c} => Key deleted successfully.
      HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
      HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key deleted successfully.
      HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{bd3ea7c2-3af8-4463-9a9c-6eb8e136cb02} => Key deleted successfully.
      HKCR\Wow6432Node\CLSID\{bd3ea7c2-3af8-4463-9a9c-6eb8e136cb02} => Key deleted successfully.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.
      HKCR\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key deleted successfully.
      HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
      HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
      HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{ae07101b-46d4-4a98-af68-0333ea26e113} => Value deleted successfully.
      HKCR\Wow6432Node\CLSID\{ae07101b-46d4-4a98-af68-0333ea26e113} => Key not found.
      HKLM\SOFTWARE\Wow6432Node\Microsoft\Internet Explorer\Toolbar\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
      HKCR\Wow6432Node\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{434D452D-5637-006A-76A7-7A786E7484D7} => Value deleted successfully.
      HKCR\CLSID\{434D452D-5637-006A-76A7-7A786E7484D7} => Key not found.
      HKCU\Software\Microsoft\Internet Explorer\Toolbar\WebBrowser\\{41564952-412D-5637-00A7-7A786E7484D7} => Value deleted successfully.
      HKCR\CLSID\{41564952-412D-5637-00A7-7A786E7484D7} => Key not found.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\user.js => Moved successfully.
      HKLM\Software\Wow6432Node\MozillaPlugins\@Zwinky_5q.com/Plugin => Key deleted successfully.
      C:\Program Files (x86)\Zwinky_5q\bar\1.bin\NP5qStub.dll => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\searchplugins\WebSearch.xml => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]d2a102a9.com => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]a27fe618.com => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected]864a5978.com => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected] => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\Extensions\[email protected] => Moved successfully.
      HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\[email protected] => Value deleted successfully.
      C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\extensions\[email protected] not found.
      APNMCP => Service deleted successfully.
      Zwinky_5qService => Service deleted successfully.
      C:\Program Files (x86)\Zwinky_5q => Moved successfully.
      C:\Users\USUARI\AppData\Roaming\Search Protection => Moved successfully.
      C:\Users\USUARI\AppData\Local\Temp\avgnt.exe => Moved successfully.
      C:\Users\USUARI\AppData\Local\Temp\rssomnifero.exe => Moved successfully.
      C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll => Moved successfully.
      C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll => Moved successfully.
      "C:\Program Files (x86)\Zwinky_5q\bar\1.bin\AppIntegratorStub64.dll" => File/Directory not found.
      "C:\Program Files (x86)\Zwinky_5q\bar\1.bin\HPG64.DLL" => File/Directory not found.
      "C:\Users\USUARI\AppData\Local\Temp\sfareca00001.dll" => File/Directory not found.
      "C:\Users\USUARI\AppData\Local\Temp\sfamcc00001.dll" => File/Directory not found.
      C:\ProgramData\TEMP => ":0FF263E8" ADS removed successfully.

      ========= ipconfig /flushdns =========


      Configuraci�n IP de Windows

      Se vaci� correctamente la cach� de resoluci�n de DNS.

      ========= End of CMD: =========



      The system needs a manual reboot.

      ==== End of Fixlog ====

    8. #8
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      # AdwCleaner v3.015 - Reporte Creado 20/12/2013 en 18:22:49
      # Actualizado 10/12/2013 por Xplode
      # Sistema Operativo : Windows 7 Ultimate Service Pack 1 (64 bits)
      # Nombre de usuario : USUARI - USUARI-PC
      # Ejecutado desde : C:\Users\USUARI\Desktop\adwcleaner.exe
      # Opción : Limpiar

      ***** [ Servicios ] *****

      Servicio Borrar : Zwinky_5qService

      ***** [ Archivos / Carpetas ] *****

      Carpeta Borrar : C:\ProgramData\DSearchLink
      Carpeta Borrar : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Bywifi
      Carpeta Borrar : C:\Program Files (x86)\SafeSaver
      Carpeta Borrar : C:\Program Files (x86)\TornTV.com
      Carpeta Borrar : C:\Program Files (x86)\WebSearch
      Carpeta Borrar : C:\Users\USUARI\AppData\Local\b1e
      Carpeta Borrar : C:\Users\USUARI\AppData\LocalLow\Minibar
      Carpeta Borrar : C:\Users\USUARI\AppData\LocalLow\Smartbar
      Carpeta Borrar : C:\Users\USUARI\AppData\LocalLow\Zwinky_5q
      Carpeta Borrar : C:\Users\USUARI\AppData\Roaming\B1Toolbar
      Carpeta Borrar : C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TornTV.com
      Archivo Borrar : C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\bprotector_extensions.sqlite
      Archivo Borrar : C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\invalidprefs.js

      ***** [ Accesos directos ] *****

      Acceso directo Desinfectado : C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
      Acceso directo Desinfectado : C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Search.lnk
      Acceso directo Desinfectado : C:\Users\USUARI\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories\System Tools\Internet Explorer (No Add-ons).lnk
      Acceso directo Desinfectado : C:\Users\USUARI\AppData\Roaming\Microsoft\Internet Explorer\Quick Launch\Launch Internet Explorer Browser.lnk

      ***** [ Registro ] *****

      Clave Borrar : HKLM\SOFTWARE\Google\Chrome\Extensions\bicnnkjibmphdeigoodpjlcklcnaobdj
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.bandobjectattribute
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.dockingpanel
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbar
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.iesmartbarbandobject
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.smartbardisplaystate
      Clave Borrar : HKLM\SOFTWARE\Classes\iesmartbar.smartbarmenuform
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.DynamicBarButton
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.DynamicBarButton.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.FeedManager
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.FeedManager.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.HTMLMenu
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.HTMLMenu.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.HTMLPanel
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.HTMLPanel.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.MultipleButton
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.MultipleButton.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.PseudoTransparentPlugin
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.PseudoTransparentPlugin.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.Radio
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.Radio.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.RadioSettings
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.RadioSettings.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.ScriptButton
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.ScriptButton.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.SettingsPlugin
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.SettingsPlugin.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.ThirdPartyInstaller
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.ThirdPartyInstaller.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.UrlAlertButton
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.UrlAlertButton.1
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.XMLSessionPlugin
      Clave Borrar : HKLM\SOFTWARE\Classes\Zwinky_5q.XMLSessionPlugin.1
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\Iminent_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasapi32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\privitizevpn_rasmancs
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASAPI32
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Tracing\SnapDo_RASMANCS
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_4e24eecb
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\SP_f5d3e0aa
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\FarmingSimulator2011ES_is1
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{00FB52B5-0779-46DD-AFC6-C6EB55F21A26}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{02054E11-5113-4BE3-8153-AA8DFB5D3761}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{076A9B45-DE24-4CDF-89BE-716C279B3B55}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{148DCAEC-C91D-441D-A0E7-519A0673E7F5}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{3033124F-06BF-4829-873A-310A125B4D4C}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{315C7727-2B4D-4EF9-95FA-EA6CDA9AEB9D}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{35DAB87A-026F-4503-B5F1-6774E16EAFFA}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{4A75066C-E359-4CE6-830C-E09830A3CD2D}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{61789F17-B8ED-4867-BA4A-DC19DAC8EF5B}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{70658616-D7AE-4F31-BD19-4F1775792E9B}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{7E0AE9C4-366B-43F2-91FF-329D170BC335}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{8C775DBE-2382-4EAB-A48A-6859C3B9EF29}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{A00289B5-2C16-4EC7-9780-2B56977ADC65}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{C6A7154F-EA0E-4DE3-AFB9-144FC620E780}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{D675A74C-29F6-4AA7-A098-66373D746CB9}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{DA4EBFA0-6BA0-4E18-817F-304B4192C393}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{F2E03ADB-A325-4084-BA22-2F2260F6A90F}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{F346CF98-FA03-4E7A-81B6-EB19B718F9C1}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{F90EAF3D-6A09-4FAF-A84C-E6E91F97561B}
      Clave Borrar : HKLM\SOFTWARE\Classes\CLSID\{FBC663ED-1560-421B-BD71-F5B94DCEA09C}
      Clave Borrar : HKLM\SOFTWARE\Classes\Interface\{328D6F78-0DBB-4F17-ACD5-26A2EA4EF251}
      Clave Borrar : HKLM\SOFTWARE\Classes\Interface\{98623C86-E768-4C5A-B23B-EE8CE3727CD3}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{06CEAB46-0EFC-479A-B66B-AB6B11E1138A}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{15496D19-91EA-4930-9150-B24A27FE3DE1}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{2BF2028E-3F3C-4C05-AB45-B2F1DCFE0759}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{3B82BA62-32FD-4623-BB38-464D186E7453}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{4A8AE59A-2F19-4777-B0B4-177188AB839B}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{644413C0-4090-4A84-BC29-DC69E91A7D73}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{648CEC5D-18E0-4445-9A17-C1589D0C9169}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{782D4CC0-74AE-41B6-B445-3D4C23AE6B9A}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{A283A85F-ED85-43CE-9199-952A2D106802}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{B2828F8B-EDAF-4A77-974E-78AE784A9AA3}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{B6CC4C24-962F-4314-9358-C998FD4B4288}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{BD48A3C7-5201-4093-AB66-04BD35BAC3D8}
      Clave Borrar : HKLM\SOFTWARE\Classes\TypeLib\{DB538320-D3C5-433C-BCA9-C4081A054FCF}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{27488090-768A-4D20-A938-F223F71C344C}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{3033124F-06BF-4829-873A-310A125B4D4C}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{7854F00C-DC77-477E-A10E-603F48442D3B}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F464A68D-1CF2-4991-93AB-A84351D7F676}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{3033124F-06BF-4829-873A-310A125B4D4C}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{AE07101B-46D4-4A98-AF68-0333EA26E113}
      Clave Borrar : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{BD3EA7C2-3AF8-4463-9A9C-6EB8E136CB02}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{076A9B45-DE24-4CDF-89BE-716C279B3B55}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{148DCAEC-C91D-441D-A0E7-519A0673E7F5}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{315C7727-2B4D-4EF9-95FA-EA6CDA9AEB9D}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{35DAB87A-026F-4503-B5F1-6774E16EAFFA}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{8C775DBE-2382-4EAB-A48A-6859C3B9EF29}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{A00289B5-2C16-4EC7-9780-2B56977ADC65}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Ext\PreApproved\{F464A68D-1CF2-4991-93AB-A84351D7F676}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{09E90109-A9AA-4980-BCEF-76F8D924E902}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{328D6F78-0DBB-4F17-ACD5-26A2EA4EF251}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{4250488A-CB24-0893-C066-B1AEA57BCFF2}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{61789F17-B8ED-4867-BA4A-DC19DAC8EF5B}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{7695996F-9846-4A09-A037-632E45737712}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{98623C86-E768-4C5A-B23B-EE8CE3727CD3}
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Internet Explorer\Low Rights\ElevationPolicy\{B803084B-B069-485E-B5D0-F9A6D318AF02}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\CLSID\{56561B2A-FB5D-363A-9631-4C03D6054209}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\CLSID\{A717364F-69F3-3A24-ADD5-3901A57F880E}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\CLSID\{CCB08265-B35D-30B2-A6AF-6986CA957358}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\CLSID\{CD92622E-49B9-33B7-98D1-EC51049457D7}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\CLSID\{E041E037-FA4B-364A-B440-7A1051EA0301}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{021B4049-F57D-4565-A693-FD3B04786BFA}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{0362AA09-808D-48E9-B360-FB51A8CBCE09}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{06844020-CD0B-3D3D-A7FE-371153013E49}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{06E50566-0AB7-431C-841D-62794727DAF9}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{0ADC01BB-303B-3F8E-93DA-12C140E85460}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{10D3722F-23E6-3901-B6C1-FF6567121920}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{1231839B-064E-4788-B865-465A1B5266FD}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{1675E62B-F911-3B7B-A046-EB57261212F3}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{192929F2-9273-3894-91B0-F54671C4C861}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{23119123-0854-469D-807A-171568457991}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{26E7211D-0650-43CF-8498-4C81E83AEAAA}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{2932897E-3036-43D9-8A64-B06447992065}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{2DAC2231-CC35-482B-97C5-CED1D4185080}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{2DE92D29-A042-3C37-BFF8-07C7D8893EFA}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{328D6F78-0DBB-4F17-ACD5-26A2EA4EF251}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{32B80AD6-1214-45F4-994E-78A5D482C000}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{3A8E103F-B2B7-3BEF-B3B0-88E29B2420E4}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{3F1CD84C-04A3-4EA0-9EA1-7D134FD66C82}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{3F83A9CA-B5F0-44EC-9357-35BB3E84B07F}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{431532BD-0AE1-4ABC-BE8C-919F3D1332E2}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{478CE5D3-D38E-3FFE-8DBE-8C4A0F1C4D8D}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{47E520EA-CAD2-4F51-8F30-613B3A1C33EB}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{48B7DA4E-69ED-39E3-BAD5-3E3EFF22CFB0}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{57C91446-8D81-4156-A70E-624551442DE9}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{5982F405-44E4-3BBB-BAC4-CF8141CBBC5C}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{5D8C3CC3-3C05-38A1-B244-924A23115FE9}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{641593AF-D9FD-30F7-B783-36E16F7A2E08}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{70AFB7B2-9FB5-4A70-905B-0E9576142E1D}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{711FC48A-1356-3932-94D8-A8B733DBC7E4}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{72227B7F-1F02-3560-95F5-592E68BACC0C}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{7AD65FD1-79E0-406D-B03C-DD7C14726D69}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{7B5E8CE3-4722-4C0E-A236-A6FF731BEF37}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{890D4F59-5ED0-3CB4-8E0E-74A5A86E7ED0}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{8C68913C-AC3C-4494-8B9C-984D87C85003}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{8D019513-083F-4AA5-933F-7D43A6DA82C4}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{923F6FB8-A390-370E-A0D2-DD505432481D}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{97DD820D-2E20-40AD-B01E-6730B2FCE630}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{98623C86-E768-4C5A-B23B-EE8CE3727CD3}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{9BBB26EF-B178-35D6-9D3D-B485F4279FE5}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{A62DDBE0-8D2A-339A-B089-8CBCC5CD322A}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{A82AD04D-0B8E-3A49-947B-6A69A8A9C96D}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{ADEB3CC9-A05D-4FCC-BD09-9025456AA3EA}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{B06D4521-D09C-3F41-8E39-9D784CCA2A75}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{B177446D-54A4-4869-BABC-8566110B4BE0}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{C06DAD42-6F39-4CE1-83CC-9A8B9105E556}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{C2E799D0-43A5-3477-8A98-FC5F3677F35C}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D16107CD-2AD5-46A8-BA59-303B7C32C500}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D25B101F-8188-3B43-9D85-201F372BC205}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D2BA7595-5E44-3F1E-880F-03B3139FA5ED}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D35F5C81-17D9-3E1C-A1FC-4472542E1D25}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D8FA96CA-B250-312C-AF34-4FF1DD72589D}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{D9D1DFC5-502D-43E4-B1BB-4D0B7841489A}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{DAFC1E63-3359-416D-9BC2-E7DCA6F7B0F3}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{DC5E5C44-80FD-3697-9E65-9F286D92F3E7}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{E0B07188-A528-4F9E-B2F7-C7FDE8680AE4}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{E1B4C9DE-D741-385F-981E-6745FACE6F01}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{E7B623F5-9715-3F9F-A671-D1485A39F8A2}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{ED916A7B-7C68-3198-B87D-2DABC30A5587}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{EFA1BDB2-BB3D-3D9A-8EB5-D0D22E0F64F4}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{F05B12E1-ADE8-4485-B45B-898748B53C37}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{F4CBF4DD-F8FE-35BA-BB7E-68304DAAB70B}
      Clave Borrar : [x64] HKLM\SOFTWARE\Classes\Interface\{FC32005D-E27C-32E0-ADFA-152F598B75E7}
      Clave Borrar : HKCU\Software\APN PIP
      Clave Borrar : HKCU\Software\FLEXnet
      Clave Borrar : HKCU\Software\InstalledThirdPartyPrograms
      Clave Borrar : HKCU\Software\lollipop
      Clave Borrar : HKCU\Software\Nosibay
      Clave Borrar : HKCU\Software\Optimizer Pro
      Clave Borrar : HKCU\Software\PrivitizeVPNInstallDates
      Clave Borrar : HKCU\Software\SmartBar
      Clave Borrar : HKCU\Software\smartbarbackup
      Clave Borrar : HKCU\Software\smartbarlog
      Clave Borrar : HKCU\Software\Softonic
      Clave Borrar : HKCU\Software\Webplayer
      Clave Borrar : HKCU\Software\Zwinky_5q
      Clave Borrar : HKCU\Software\AppDataLow\Software\Crossrider
      Clave Borrar : HKCU\Software\AppDataLow\Software\Plus-HD-2.2
      Clave Borrar : HKCU\Software\AppDataLow\Software\Zwinky_5q
      Clave Borrar : HKLM\Software\Conduit
      Clave Borrar : HKLM\Software\InstallIQ
      Clave Borrar : HKLM\Software\PIP
      Clave Borrar : HKLM\Software\SProtector
      Clave Borrar : HKLM\Software\Zwinky_5q
      Clave Borrar : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\1ClickDownload
      Clave Borrar : [x64] HKLM\SOFTWARE\InstalledThirdPartyPrograms

      ***** [ Navegadores ] *****

      -\\ Internet Explorer v10.0.9200.16750

      Ajustes Restaurar : HKCU\Software\Microsoft\Internet Explorer\SearchUrl [Default]
      Ajustes Restaurar : HKLM\SOFTWARE\Microsoft\Internet Explorer\SearchUrl [Default]

      -\\ Mozilla Firefox v

      [ Archivo : C:\Users\USUARI\AppData\Roaming\Mozilla\Firefox\Profiles\llcqx0g0.default\prefs.js ]

      Linea borrada : user_pref("aol_toolbar.default.homepage.check", false);
      Linea borrada : user_pref("aol_toolbar.default.search.check", false);
      Linea borrada : user_pref("extensions.BabylonToolbar.prtkDS", 0);
      Linea borrada : user_pref("extensions.BabylonToolbar.prtkHmpg", 0);
      Linea borrada : user_pref("extensions.crossrider.bic", "13e64c16ce5637e1ef725a61f0985b04");
      Linea borrada : user_pref("extensions.delta.admin", false);
      Linea borrada : user_pref("extensions.delta.aflt", "babsst");
      Linea borrada : user_pref("extensions.delta.appId", "{C26644C4-2A12-4CA6-8F2E-0EDE6CF018F3}");
      Linea borrada : user_pref("extensions.delta.autoRvrt", "false");
      Linea borrada : user_pref("extensions.delta.dfltLng", "es");
      Linea borrada : user_pref("extensions.delta.excTlbr", false);
      Linea borrada : user_pref("extensions.delta.ffxUnstlRst", true);
      Linea borrada : user_pref("extensions.delta.id", "42998d4e000000000000f8d1110d5a87");
      Linea borrada : user_pref("extensions.delta.instlDay", "15970");
      Linea borrada : user_pref("extensions.delta.instlRef", "sst");
      Linea borrada : user_pref("extensions.delta.newTab", false);
      Linea borrada : user_pref("extensions.delta.prdct", "delta");
      Linea borrada : user_pref("extensions.delta.prtnrId", "delta");
      Linea borrada : user_pref("extensions.delta.rvrt", "false");
      Linea borrada : user_pref("extensions.delta.smplGrp", "none");
      Linea borrada : user_pref("extensions.delta.tlbrId", "base");
      Linea borrada : user_pref("extensions.delta.tlbrSrchUrl", "");
      Linea borrada : user_pref("extensions.delta.vrsn", "1.8.24.6");
      Linea borrada : user_pref("extensions.delta.vrsnTs", "1.8.24.618:51:55");
      Linea borrada : user_pref("extensions.delta.vrsni", "1.8.24.6");
      Linea borrada : user_pref("extensions.delta_i.babExt", "");
      Linea borrada : user_pref("extensions.delta_i.babTrack", "affID=119357&tt=160913_m3&tsp=5013");
      Linea borrada : user_pref("extensions.delta_i.srcExt", "ss");
      Linea borrada : user_pref("sweetim.toolbar.previous.browser.startup.homepage", "");
      Linea borrada : user_pref("sweetim.toolbar.scripts.1.domain-blacklist", "");
      Linea borrada : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_DS", "");
      Linea borrada : user_pref("sweetim.toolbar.searchguard.UserRejectedGuard_HP", "");
      Linea borrada : user_pref("sweetim.toolbar.searchguard.enable", "");

      *************************

      AdwCleaner[R0].txt - [23449 octets] - [20/12/2013 18:21:02]
      AdwCleaner[S0].txt - [20567 octets] - [20/12/2013 18:22:49]

      ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [20628 octets] ##########

    9. #9
      Moderador
      Avatar de M@co
      Registrado
      dic 2007
      Ubicación
      America
      Mensajes
      15.820

      Re: virus en el facebook de mi hija

      Hola.

      Se te olvidó decirnos que tal funciona el pc ahora, ¿se ha solucionado el problema?.


      Descarga DelFix en el escritorio de windows. (Clic en telecharger).
      • Haz doble clic para ejecutarla.
      • Verifica que la casilla Remove disinfection tools esté marcada.:

      Clic en Run.

      Al terminar Se abrirá un reporte llamado DelFix.txt, verifica que se hayan eliminado las herramientas usadas para desinfectar el Pc.

      Un saludo.

      Blog | Antivirus Online | Eliminar Malwares | Antivirus Gratis


      * Síguenos en nuestro Twitter y hazte nuestro amigo en Facebook.
      * Infórmate de las ultimas amenazas de la red desde: InfoSpyware Blog
      * No se resuelven dudas por Privados ni por E-mail, ya que para eso esta el foro.

    10. #10
      Usuario Avatar de ALBERT E.R
      Registrado
      feb 2009
      Ubicación
      monistrol de caldes ( cataluña)
      Mensajes
      193

      Re: virus en el facebook de mi hija

      Primero gracias , y ahora e de decir que culpa mía por no saber explicarme bien.( aun no e hecho lo del delfix )
      Es facebook el que me mete el virus , el facebook de mi hija de 11 añitos , al conectar en el me mete un virus,,, ok
      Al conectar mi facebook ( el mio ok) esto no pasa , solo el de mi niña , si estuviera aquí mi hija le pediría la clave y si pudiera pasártelo por MP te lo pasaría , pero ya advirtiéndote
      QUE ESTA INFECTADO OK.
      Este es el problema . Ahora que hago ?
      Para probar si se reparo conecto el facebook y haber que pasa? , ,, ( si sigue allí se me infectara la pc de nuevo)
      Tu mandas .
      Pd , mi pc ba bien ok
      Última edición por ALBERT E.R fecha: 20/12/13 a las 13:59:24 Razón: añadir

    Página 1 de 2 12 ÚltimoÚltimo