Tech Support banner
Status
Not open for further replies.
1 - 4 of 4 Posts

·
Registered
Joined
·
2 Posts
Discussion Starter · #1 ·
Hi guys,

You are doing a nice job here, thanks in advance to all people involved on the forums and... sorry for my english ;)

after one week looking for a solution I don't know what is happening on my computer... May be some of you can see something strange on this log.

My problems:

-IE7 began to show "connection fail", after close IE7 and restarts SOMETIMES works. I've a 4Mb Cable provider and other programs connect to internet, but not IE7 and even Mozilla (installed to check IE7 possible errors).
-System shut down takes... 10 minutes!!!!!!
-Few ad pop up are appearing and IE7 windows with non desired adresses.

After the scan on three antivirus, spywares, hijackers... and everything I've able to find on the net I have no explanation....

The log:

Logfile of HijackThis v1.99.1
Scan saved at 3:28:54, on 27/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Windows Defender\MsMpEng.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\CLI.EXE
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Archivos de programa\Logitech\Video\LogiTray.exe
C:\Archivos de programa\HP\hpcoretech\hpcmpmgr.exe
C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
C:\Archivos de programa\Windows Defender\MSASCui.exe
C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Logitech\SetPoint\SetPoint.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Logitech\Video\FxSvr2.exe
C:\Archivos de programa\Archivos comunes\Logitech\KhalShared\KHALMNPR.EXE
C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe
C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe
C:\Archivos de programa\ATI Technologies\ATI.ACE\cli.exe
C:\Documents and Settings\Marco Antonio\Escritorio\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O4 - HKLM\..\Run: [SetCacheMode] Rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [avast!] C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Archivos de programa\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Archivos de programa\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Archivos de programa\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [Windows Defender] "C:\Archivos de programa\Windows Defender\MSASCui.exe" -hide
O4 - HKLM\..\Run: [SoundMAX] "C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Archivos de programa\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Archivos de programa\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Steam] "C:\Archivos de programa\Logitech\Video\ManifestEngine.exe" boot
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {0D41B8C5-2599-4893-8183-00195EC8D5F9} (asusTek_sysctrl Class) - http://support.asus.com/common/asusTek_sys_ctrl.cab
O16 - DPF: {31B7EB4E-8B4B-11D1-A789-00A0CC6651A8} (Cult3D ActiveX Player) - http://host.cycore.net/plugins/windows/ie/Cult3D_IE_5.3.0.228.cab
O16 - DPF: {5ED80217-570B-4DA9-BF44-BE107C0EC166} (Windows Live Safety Center Base Module) - http://cdn.scan.safety.live.com/resource/download/scanner/wlscbase8460.cab
O16 - DPF: {6E32070A-766D-4EE6-879C-DC1FA91D2FC3} (MUWebControl Class) - http://update.microsoft.com/microsoftupdate/v6/V5Controls/en/x86/client/muweb_site.cab?1166094288812
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CS1\Services\Tcpip\..\{0E402D87-3206-437D-891D-270B99F8A3E7}: NameServer = 62.42.230.24,62.42.230.136
O17 - HKLM\System\CS3\Services\Tcpip\..\{0E402D87-3206-437D-891D-270B99F8A3E7}: NameServer = 62.42.230.24,62.42.230.136
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe


Can you see anything unusual???? Thanks and have a happy new year to everybody!!!
 

·
Registered
Joined
·
2,335 Posts
Hello marcoycoco, and welcome to TSF


Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools,
then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.


Please read this post completely before begining the fix. If there's anything that you do not understand, kindly ask your questions before proceeding.
Please ensure that there aren't any opened browsers when you are carrying out the procedures below. Save the following instructions in Notepad as this
webpage would not be available when you're carrying out the fix.



IT IS IMPORTANT THAT YOU DON'T MISS A STEP & PERFORM EVERYTHING IN THE RIGHT ORDER.

----------------------------------------

The fixes we will use are specific to your problems and should only be used for this issue on this machine.

Please only use this topic to reply to. Do not start another thread.
If any other issues arise let me know.

The process is not instant. Please continue to review my answers until I tell you your machine is clear.
Absence of symptoms does not mean that everything is clear. So lets do this to the end!

Please make every effort to reply to my posts in a timely manner. Malware breeds malware and the longer an infection remains on a system, the more
likely additional infections will result.


----------------------------------------

I don't see anything really malicious in your log, so we'll run some tools and scanners to see if anything is hidden.


----------------------------------------

DOWNLOADS


CLEANUP! version 4.52 – TEMP FILE CLEANING


Please download Cleanup! and install it. You will use this later.

Alternative link Cleanup Alt


*NOTE* Cleanup deletes EVERYTHING out of temporary folders and does not make backups.



AVG Anti-Spyware 7.5



Please download AVG Anti Spyware

Use the link at the bottom of the page under "AVG Anti-Spyware Free for Windows"





  1. Install AVG Anti-Spyware 7.5.
  2. Double-click the icon on Desktop to launch AVG A-S 7.5
  3. On the top of the main screen click Shield
  4. Click the word active to change it to inactive
  5. On the top of the main screen click Update.
  6. Then click on Start Update. The update will start and a progress bar will show the updates being installed.
  7. I also recommend changing the "Update interval" to something more reasonable like 12 hours.




ComboFix



1. Download this file - You MUST save it to your desktop

COMBOFIX


2. Double click combofix.exe & follow the prompts.

3. When finished, it shall produce a log for you. Post that log in your next reply

Note:
Do not mouseclick combofix's window whilst it's running. That may cause it to stall

----------------------------------------

DISABLE ANTI-SPYWARE APPLICATIONS

Please disable these Anti-Spyware programs as they may interfere with this fix. You may re-enable them after we clean your system.



Windows Defender

Please disable your Windows Defender Real-time Protection, as it may hinder the removal of some entries.

  • Open Windows Defender.
  • Click on Tools>Options.
  • Scroll down and uncheck "Use real-time protection (recommended)".
  • After you uncheck this, click on the Save button and close Windows Defender.

----------------------------------------

SAFE MODE RE-BOOT

Please reboot your computer in Safe Mode by doing the following:
1) Restart your computer
2) After hearing your computer beep once during startup, but before the Windows icon appears, press F8.
3) Instead of Windows loading as normal, a menu should appear
4) Use the up arrow key to highlight Safe Mode and press Enter.
5) Login with your usual account. Make sure to close any open browsers.

----------------------------------------

FIXES AND DELETIONS


Open HijackThis and click on 'Do a System Scan Only'. Check the following entries (If they still exist, make sure you do not miss any)

R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =




Please remember to close all other windows, including browsers then click Fix checked.

----------------------------------------

RUNNING SCANNERS


Cleanup

Open Cleanup! by double-clicking the icon on your desktop (or from the Start > All Programs menu).
Set the program up as follows:

Click "Options..."
Move the arrow down to "Custom CleanUp!"
Put a check next to the following (Make sure nothing else is checked!):
  • Empty Recycle Bins
  • Delete Cookies
  • Delete Prefetch files (if present)
  • Cleanup! All Users
  • Click on the Temporary Files tab and uncheck the box for Scan drives for files matching if it’s checked.
Click OK
Press the CleanUp! button to start the program and DO NOT reboot when prompted.


AVG Anti-Spyware 7.5

  • Run AVG A-s with it's updated definitions: (...it's important that all windows must be closed)
    This scan can take quite a while to run, so be prepared.
  • Click Scanner
  • Click on the Scan tab
  • Click Complete System Scan to begin scanning.



  • When the scan is complete click Recommended Action and change it to Quarantine (1),
  • If not click Recommended Action and choose Quarantine from the popup menu. (2)
  • At the bottom of the window click on the Apply all Actions button. (3)

When done, click the Save Scan Report button. (4) then click Save Report As and save it to your desktop.

IMPORTANT : Don't click on the "Save Scan Report" button before you did hit the "Apply all Actions" button.



Note: DO NOT USE the computer while AVG A/S is scanning. If Explorer or the Control Panel are opened some malware types will
reinfect your system or will not be cleaned properly.

----------------------------------------

SYSTEM RE-BOOT

Reboot into Normal Mode.

----------------------------------------


ON-LINE SCANS

Perform an online scan with Internet Explorer with Panda ActiveScan

  1. Click on
    located at the bottom of the page.
  2. A "pop up" window will appear. * Please ensure that your pop up blocker doesn't block it *
  3. Enter your e-mail address, country, and state & click "Free Online Scan" * The download of the 8 MB Panda's ActiveX control will take place *

Begin the scan by selecting

  • If it finds any malware, it will offer you a report.
  • Please ignore any entry it finds and the offer to buy the program to remove the entry, as we will address this later.
  • Click on
    then click

* You needn't remain online while it's doing the scan but you have to re-connect after it has finished to see the report.
* Turn off the real time scanner of any existing antivirus program while performing the online scan


----------------------------------------

FOLLOW-UP

Please return and post these items in the order listed:

c:\combofix.txt
AVG A/S
Panda scan
A new HJT log run in Normal Mode


Please note: In order to properly see what is on your system, all HJT logs must be run in the normal mode

Please let me know how your system is behaving.
 

·
Registered
Joined
·
2 Posts
Discussion Starter · #3 ·
Hi Fredmh, thanks a lot for your quick, useful and professional assistance!

I've done everything. Actually my system seems to run PERFECT!!! THANKS!!!

In any case I show you the results:
--------------------------
COMBOFIX:

"Marco Antonio" - 06-12-28 2:37:15,62 Service Pack 2
ComboFix 06-12-28W-BetaE2 - Running from: "C:\Documents and Settings\Marco Antonio\Escritorio"

(((((((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))


g:\autorun.inf" . . . . failed to delete


((((((((((((((((((((((((((((((( Files Created from 2006-11-28 to 2006-12-28 ))))))))))))))))))))))))))))))))))


2006-12-28 02:38 <DIR> d-------- C:\WINDOWS\erdnt
2006-12-27 20:03 3,968 --a------ C:\WINDOWS\system32\drivers\AvgAsCln.sys
2006-12-27 20:03 <DIR> d-------- C:\Archivos de programa\Grisoft
2006-12-27 06:35 <DIR> d-------- C:\WINDOWS\setupupd
2006-12-27 06:35 <DIR> d-------- C:\WINDOWS\setup.pss
2006-12-27 06:26 <DIR> dr-h----- C:\DOCUME~1\Invitado\Reciente
2006-12-27 06:26 <DIR> dr-h----- C:\DOCUME~1\Invitado\Datos de programa
2006-12-27 06:26 <DIR> dr------- C:\DOCUME~1\Invitado\Mis documentos
2006-12-27 06:26 <DIR> dr------- C:\DOCUME~1\Invitado\Men£ Inicio
2006-12-27 06:26 <DIR> dr------- C:\DOCUME~1\Invitado\Favoritos
2006-12-27 06:26 <DIR> d--h----- C:\DOCUME~1\Invitado\Plantillas
2006-12-27 06:26 <DIR> d--h----- C:\DOCUME~1\Invitado\Impresoras
2006-12-27 06:26 <DIR> d--h----- C:\DOCUME~1\Invitado\Entorno de red
2006-12-27 06:26 <DIR> d--h----- C:\DOCUME~1\Invitado\Configuraci¢n local
2006-12-27 06:26 <DIR> d-------- C:\DOCUME~1\Invitado\Escritorio
2006-12-27 06:26 <DIR> d-------- C:\DOCUME~1\Invitado\DATOSD~1\PC Suite
2006-12-27 06:26 <DIR> d-------- C:\DOCUME~1\Invitado\DATOSD~1\Logitech
2006-12-27 06:09 <DIR> d-------- C:\Archivos de programa\MSN Messenger
2006-12-27 05:51 90,112 --a------ C:\WINDOWS\system\BisonVfw.dll
2006-12-27 05:51 82,038 --a------ C:\WINDOWS\system32\BisonRem.dll
2006-12-27 05:51 649,088 --a------ C:\WINDOWS\system32\drivers\BisonCam.sys
2006-12-27 05:51 180,224 --a------ C:\WINDOWS\system\StillDrv.dll
2006-12-27 05:51 126,976 --a------ C:\WINDOWS\system\BisonCam.dll
2006-12-27 05:51 <DIR> d-------- C:\WINDOWS\Options
2006-12-27 05:51 <DIR> d-------- C:\WINDOWS\ASUS USB2.0 Webcam
2006-12-27 03:54 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Avg7
2006-12-26 05:48 <DIR> d-------- C:\Archivos de programa\Archivos comunes\PCSuite
2006-12-26 05:48 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Nokia
2006-12-26 05:47 <DIR> d-------- C:\Archivos de programa\PC Connectivity Solution
2006-12-26 05:46 9,216 --a------ C:\WINDOWS\system32\drivers\nmwcdc.sys
2006-12-26 05:46 4,608 --a------ C:\WINDOWS\system32\nmwcdlog.dll
2006-12-26 05:46 30,720 --a------ C:\WINDOWS\system32\nmwcdcocls.dll
2006-12-26 05:46 138,240 --a------ C:\WINDOWS\system32\drivers\nmwcd.sys
2006-12-26 05:46 12,800 --a------ C:\WINDOWS\system32\drivers\nmwcdcm.sys
2006-12-25 04:39 <DIR> d-------- C:\Archivos de programa\Windows Live Safety Center
2006-12-24 22:31 <DIR> d-------- C:\WINDOWS\system32\ActiveScan
2006-12-24 22:29 <DIR> d-------- C:\Archivos de programa\Overland
2006-12-24 22:26 <DIR> d-------- C:\WINDOWS\Hewlett-Packard
2006-12-24 21:49 <DIR> d-------- C:\Archivos de programa\Mozilla Firefox
2006-12-24 15:23 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Nokia Multimedia Player
2006-12-23 06:19 <DIR> d-------- C:\WINDOWS\system32\NtmsData
2006-12-22 19:44 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Spybot - Search & Destroy
2006-12-22 16:26 <DIR> d-------- C:\Archivos de programa\MSECACHE
2006-12-22 08:01 <DIR> d-------- C:\WINDOWS\SxsCaPendDel
2006-12-22 07:57 33,792 --a------ C:\WINDOWS\system32\lmmib2.dll
2006-12-22 04:56 <DIR> d-------- C:\Archivos de programa\ASUS LifeFrame
2006-12-22 04:17 606,848 --a------ C:\WINDOWS\flashax.exe
2006-12-22 04:17 12,288 --a------ C:\WINDOWS\impborl.dll
2006-12-19 17:39 <DIR> d--hs---- C:\WINDOWS\CSC
2006-12-19 17:24 <DIR> d-------- C:\WINDOWS\pss
2006-12-19 02:55 25,992 --a------ C:\WINDOWS\system32\pgdfgsvc.exe
2006-12-15 03:48 68,888 --a------ C:\WINDOWS\system32\xinput1_3.dll
2006-12-15 03:48 62,744 --a------ C:\WINDOWS\system32\xinput1_2.dll
2006-12-15 03:48 3,426,072 --a------ C:\WINDOWS\system32\d3dx9_32.dll
2006-12-15 03:48 251,672 --a------ C:\WINDOWS\system32\xactengine2_5.dll
2006-12-15 03:48 237,848 --a------ C:\WINDOWS\system32\xactengine2_4.dll
2006-12-15 03:48 236,824 --a------ C:\WINDOWS\system32\xactengine2_3.dll
2006-12-15 03:48 2,414,360 --a------ C:\WINDOWS\system32\d3dx9_31.dll
2006-12-15 03:48 2,297,552 --a------ C:\WINDOWS\system32\d3dx9_26.dll
2006-12-15 03:48 15,128 --a------ C:\WINDOWS\system32\x3daudio1_1.dll
2006-12-15 03:30 <DIR> d-------- C:\WINDOWS\Performance
2006-12-15 03:29 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Microsoft Corporation
2006-12-15 02:02 128,232 --a------ C:\WINDOWS\system32\mucltui.dll
2006-12-14 20:28 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\teamspeak2
2006-12-14 20:27 <DIR> d-------- C:\Archivos de programa\Teamspeak2_RC2
2006-12-12 17:57 <DIR> d-------- C:\Archivos de programa\MindSoft
2006-12-12 13:35 38,016 --a------ C:\WINDOWS\system32\drivers\bthmodem.sys
2006-12-12 13:34 100,992 --a------ C:\WINDOWS\system32\drivers\bthpan.sys
2006-12-12 13:33 8,192 --a------ C:\WINDOWS\system32\wshirda.dll
2006-12-12 13:33 59,648 --a------ C:\WINDOWS\system32\drivers\rfcomm.sys
2006-12-12 13:33 28,160 --a------ C:\WINDOWS\system32\irmon.dll
2006-12-12 13:33 274,688 --a------ C:\WINDOWS\system32\drivers\bthport.sys
2006-12-12 13:33 18,944 --a------ C:\WINDOWS\system32\drivers\BTHUSB.SYS
2006-12-12 13:33 17,024 --a------ C:\WINDOWS\system32\drivers\BthEnum.sys
2006-12-12 13:33 153,600 --a------ C:\WINDOWS\system32\irftp.exe
2006-12-11 17:47 <DIR> d-------- C:\Archivos de programa\PalickSoft
2006-12-11 17:00 <DIR> d-------- C:\Archivos de programa\Motherboard Monitor 5
2006-12-11 13:35 221,184 --a------ C:\WINDOWS\system32\wmpns.dll
2006-12-11 06:04 <DIR> d-------- C:\DOCUME~1\MARCOA~1\.aladin
2006-12-11 05:29 <DIR> d-------- C:\Archivos de programa\Celestia
2006-12-11 05:13 <DIR> d-------- C:\WINDOWS\system32\appmgmt
2006-12-11 05:05 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Help
2006-12-11 05:03 <DIR> d-------- C:\Archivos de programa\Andersson Digital Design
2006-12-11 04:29 69,632 --a------ C:\WINDOWS\system32\gravit.scr
2006-12-11 04:29 <DIR> d-------- C:\Archivos de programa\gravit
2006-12-10 06:21 <DIR> d-------- C:\WINDOWS\Sun
2006-12-10 06:21 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Sun
2006-12-10 06:20 <DIR> d-------- C:\Archivos de programa\Java
2006-12-10 06:20 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Java
2006-12-10 06:09 <DIR> d-------- C:\WINDOWS\system32\Cult3D
2006-12-10 04:00 <DIR> d--h----- C:\WINDOWS\system32\GroupPolicy
2006-12-03 13:24 98,304 --a------ C:\WINDOWS\system32\msir3jp.dll
2006-12-03 13:24 838,144 --a------ C:\WINDOWS\system32\chtbrkr.dll
2006-12-03 13:24 70,656 --a------ C:\WINDOWS\system32\korwbrkr.dll
2006-12-03 13:24 1,677,824 --a------ C:\WINDOWS\system32\chsbrkr.dll
2006-12-03 13:23 9,216 --a------ C:\WINDOWS\system32\kbdnecAT.dll
2006-12-03 13:23 811,064 --a------ C:\WINDOWS\system32\imjp81k.dll
2006-12-03 13:23 76,288 --a------ C:\WINDOWS\system32\uniime.dll
2006-12-03 13:23 7,680 --a------ C:\WINDOWS\system32\kbdnecNT.dll
2006-12-03 13:23 7,168 --a------ C:\WINDOWS\system32\kbdnec95.dll
2006-12-03 13:23 7,168 --a------ C:\WINDOWS\system32\kbdibm02.dll
2006-12-03 13:23 7,168 --a------ C:\WINDOWS\system32\f3ahvoas.dll
2006-12-03 13:23 6,656 --a------ C:\WINDOWS\system32\kbdlk41a.dll
2006-12-03 13:23 6,656 --a------ C:\WINDOWS\system32\c_is2022.dll
2006-12-03 13:23 6,144 --a------ C:\WINDOWS\system32\kbdlk41j.dll
2006-12-03 13:23 6,144 --a------ C:\WINDOWS\system32\kbdax2.dll
2006-12-03 13:23 6,144 --a------ C:\WINDOWS\system32\kbd106n.dll
2006-12-03 13:23 6,144 --a------ C:\WINDOWS\system32\kbd101a.dll
2006-12-03 13:23 6,144 --a------ C:\WINDOWS\system32\kbd101.dll
2006-12-03 13:23 218,112 --a------ C:\WINDOWS\system32\c_g18030.dll
2006-12-02 08:15 8,704 --a------ C:\WINDOWS\system32\kbdjpn.dll
2006-12-02 08:15 8,192 --a------ C:\WINDOWS\system32\kbdkor.dll
2006-12-02 08:15 6,144 --a------ C:\WINDOWS\system32\kbd106.dll
2006-12-02 08:15 6,144 --a------ C:\WINDOWS\system32\kbd101c.dll
2006-12-02 08:15 6,144 --a------ C:\WINDOWS\system32\kbd101b.dll
2006-12-02 08:15 5,632 --a------ C:\WINDOWS\system32\kbd103.dll
2006-12-01 15:45 <DIR> d-------- C:\DOCUME~1\MARCOA~1\Phone Browser
2006-12-01 15:45 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Nokia
2006-12-01 15:45 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Datalayer
2006-12-01 15:40 <DIR> d-------- C:\Archivos de programa\GoldEsel
2006-12-01 15:40 <DIR> d-------- C:\Archivos de programa\Ahead
2006-12-01 15:23 <DIR> d-------- C:\Archivos de programa\MSXML 4.0
2006-12-01 15:20 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Ahead
2006-12-01 15:18 <DIR> d-------- C:\Archivos de programa\Nero
2006-12-01 15:18 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Ahead
2006-12-01 05:34 <DIR> d-------- C:\Archivos de programa\eMule
2006-12-01 05:14 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\AdobeUM
2006-12-01 04:41 <DIR> d-------- C:\Archivos de programa\FreshDevices
2006-12-01 03:55 <DIR> d-------- C:\DOCUME~1\MARCOA~1\Configuracin local
2006-12-01 03:54 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Adobe
2006-12-01 03:15 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\PC Suite
2006-12-01 03:15 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\PC Suite
2006-12-01 03:15 <DIR> d-------- C:\Archivos de programa\DIFX
2006-12-01 03:14 50,688 --a------ C:\WINDOWS\system32\nmwcdcls.dll
2006-12-01 03:14 <DIR> d-------- C:\Archivos de programa\Nokia
2006-12-01 03:12 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\DVD Shrink
2006-12-01 03:12 <DIR> d-------- C:\Archivos de programa\DVD Shrink
2006-12-01 02:15 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Adobe Systems
2006-12-01 02:15 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Adobe Systems Shared
2006-12-01 02:12 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Adobe
2006-12-01 02:12 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Adobe
2006-11-30 22:12 <DIR> d-------- C:\Archivos de programa\Steam
2006-11-30 21:48 <DIR> d-------- C:\WINDOWS\Ulead.dat
2006-11-30 21:35 212,480 --------- C:\WINDOWS\system32\PCDLIB32.DLL
2006-11-30 21:31 90,112 --a------ C:\WINDOWS\unvise32.exe
2006-11-30 21:31 57,856 --a------ C:\WINDOWS\system32\masd32.dll
2006-11-30 21:31 27,648 --a------ C:\WINDOWS\system32\ma32.dll
2006-11-30 21:31 196,096 --a------ C:\WINDOWS\system32\macd32.dll
2006-11-30 21:31 138,752 --a------ C:\WINDOWS\system32\mase32.dll
2006-11-30 21:31 136,192 --a------ C:\WINDOWS\system32\mamc32.dll
2006-11-30 21:31 <DIR> d-------- C:\WINDOWS\Downloaded Installations
2006-11-30 21:25 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\SmartSound Software Inc
2006-11-30 21:25 <DIR> d-------- C:\Archivos de programa\SmartSound Software
2006-11-30 21:24 934,576 --a------ C:\WINDOWS\system32\ltr13n.dll
2006-11-30 21:24 86,016 --a------ C:\WINDOWS\unvise32qt.exe
2006-11-30 21:24 80,896 --a------ C:\WINDOWS\system32\lfwmf13s.dll
2006-11-30 21:24 79,360 --a------ C:\WINDOWS\system32\lfeps13s.dll
2006-11-30 21:24 74,752 --a------ C:\WINDOWS\system32\lfgif13s.dll
2006-11-30 21:24 70,144 --a------ C:\WINDOWS\system32\lfbmp13s.dll
2006-11-30 21:24 65,536 --a------ C:\WINDOWS\system32\lfpcx13s.dll
2006-11-30 21:24 64,000 --a------ C:\WINDOWS\system32\lftga13s.dll
2006-11-30 21:24 59,904 --a------ C:\WINDOWS\system32\lfpcd13s.dll
2006-11-30 21:24 487,424 --a------ C:\WINDOWS\system32\msvcp70.dll
2006-11-30 21:24 466,624 --a------ C:\WINDOWS\system32\LTRPR13n.DLL
2006-11-30 21:24 393,728 --a------ C:\WINDOWS\system32\LFCMP13s.DLL
2006-11-30 21:24 344,064 --a------ C:\WINDOWS\system32\msvcr70.dll
2006-11-30 21:24 304,816 --a------ C:\WINDOWS\system32\LTRIO13N.DLL
2006-11-30 21:24 283,136 --a------ C:\WINDOWS\system32\LFJ2K13s.dll
2006-11-30 21:24 194,248 --a------ C:\WINDOWS\system32\LTRFD13n.DLL
2006-11-30 21:24 185,856 --a------ C:\WINDOWS\system32\lfpng13s.dll
2006-11-30 21:24 166,400 --a------ C:\WINDOWS\system32\lftif13s.dll
2006-11-30 21:24 116,224 --a------ C:\WINDOWS\system32\lffax13s.dll
2006-11-30 21:24 110,080 --a------ C:\WINDOWS\system32\lfpsd13s.dll
2006-11-30 21:24 104,960 --a------ C:\WINDOWS\system32\lfpct13s.dll
2006-11-30 21:24 1,772,032 --a------ C:\WINDOWS\system32\LTCLR13s.dll
2006-11-30 21:24 <DIR> d-------- C:\WINDOWS\system32\QuickTime
2006-11-30 21:24 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\QuickTime
2006-11-30 21:24 <DIR> d-------- C:\Archivos de programa\QuickTime
2006-11-30 21:23 <DIR> d-------- C:\Archivos de programa\Pinnacle
2006-11-30 21:23 <DIR> d-------- C:\Archivos de programa\DivX
2006-11-30 21:19 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Pinnacle
2006-11-30 21:19 <DIR> d-------- C:\Archivos de programa\Avid
2006-11-30 21:11 <DIR> d-------- C:\WINDOWS\system32\LogFiles
2006-11-30 21:10 <DIR> d-------- C:\Archivos de programa\R4
2006-11-30 20:47 85,376 --a------ C:\WINDOWS\system32\drivers\NABTSFEC.sys
2006-11-30 20:47 5,504 --a------ C:\WINDOWS\system32\drivers\MSTEE.sys
2006-11-30 20:47 19,328 --a------ C:\WINDOWS\system32\drivers\WSTCODEC.SYS
2006-11-30 20:47 17,024 --a------ C:\WINDOWS\system32\drivers\CCDECODE.sys
2006-11-30 20:47 15,360 --a------ C:\WINDOWS\system32\drivers\StreamIP.sys
2006-11-30 20:47 11,136 --a------ C:\WINDOWS\system32\drivers\SLIP.sys
2006-11-30 20:47 10,880 --a------ C:\WINDOWS\system32\drivers\NdisIP.sys
2006-11-30 20:46 54,784 --a------ C:\WINDOWS\system32\vfwwdm32.dll
2006-11-30 20:41 82,432 -ra------ C:\WINDOWS\system32\MSXML4r.dll
2006-11-30 20:41 626,960 -ra------ C:\WINDOWS\system32\hpvaut32.dll
2006-11-30 20:41 487,424 -ra------ C:\WINDOWS\system32\hpvcp70.dll
2006-11-30 20:41 44,544 -ra------ C:\WINDOWS\system32\MSXML4a.dll
2006-11-30 20:41 344,064 -ra------ C:\WINDOWS\system32\hpvcr70.dll
2006-11-30 20:41 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Hewlett-Packard
2006-11-30 20:41 <DIR> d-------- C:\Archivos de programa\Hewlett-Packard
2006-11-30 20:41 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Hewlett-Packard
2006-11-30 20:40 25,856 --a------ C:\WINDOWS\system32\drivers\usbprint.sys
2006-11-30 20:39 15,104 --a------ C:\WINDOWS\system32\drivers\usbscan.sys
2006-11-30 20:37 90,112 --a------ C:\WINDOWS\system32\LQCUI2.dll
2006-11-30 20:37 89,088 --a------ C:\WINDOWS\system32\atl71.dll
2006-11-30 20:37 856,064 --a------ C:\WINDOWS\system32\Ltwvc12n.dll
2006-11-30 20:37 78,336 --a------ C:\WINDOWS\system32\lffax12n.dll
2006-11-30 20:37 65,536 --a------ C:\WINDOWS\system32\MFC71DEU.DLL
2006-11-30 20:37 61,440 --a------ C:\WINDOWS\system32\MFC71ITA.DLL
2006-11-30 20:37 61,440 --a------ C:\WINDOWS\system32\MFC71ESP.DLL
2006-11-30 20:37 57,344 --a------ C:\WINDOWS\system32\MFC71ENU.DLL
2006-11-30 20:37 53,248 -ra------ C:\WINDOWS\system32\InstMed.exe
2006-11-30 20:37 49,152 --a------ C:\WINDOWS\system32\MFC71KOR.DLL
2006-11-30 20:37 49,152 --a------ C:\WINDOWS\system32\MFC71JPN.DLL
2006-11-30 20:37 466,944 --a------ C:\WINDOWS\system32\QCUI2.dll
2006-11-30 20:37 458,752 --a------ C:\WINDOWS\system32\LCamCpl.dll
2006-11-30 20:37 45,056 --a------ C:\WINDOWS\system32\MFC71CHT.DLL
2006-11-30 20:37 406,016 --a------ C:\WINDOWS\system32\ltkrn12n.dll
2006-11-30 20:37 40,960 --a------ C:\WINDOWS\system32\MFC71CHS.DLL
2006-11-30 20:37 372,736 --a------ C:\WINDOWS\system32\LVUI2RC.dll
2006-11-30 20:37 348,160 --a------ C:\WINDOWS\system\msvcr71.dll
2006-11-30 20:37 328,704 --a------ C:\WINDOWS\system32\LFCMP12n.DLL
2006-11-30 20:37 326,656 --a------ C:\WINDOWS\system32\drivers\Camdrl.sys
2006-11-30 20:37 30,720 --a------ C:\WINDOWS\system32\lfbmp12n.dll
2006-11-30 20:37 259,072 --a------ C:\WINDOWS\system32\LTDIS12n.dll
2006-11-30 20:37 22,016 --a------ C:\WINDOWS\system32\drivers\LVUSBSta.sys
2006-11-30 20:37 215,552 --a------ C:\WINDOWS\system32\Lvkrn12n.dll
2006-11-30 20:37 207,872 --a------ C:\WINDOWS\system32\ltefx12n.dll
2006-11-30 20:37 204,800 --a------ C:\WINDOWS\system32\LVUI2.dll
2006-11-30 20:37 204,800 --a------ C:\WINDOWS\system32\LVCodec2.dll
2006-11-30 20:37 2,180,096 --a------ C:\WINDOWS\system32\drivers\lvsvf2.sys
2006-11-30 20:37 164,864 --a------ C:\WINDOWS\system32\ltimg12n.dll
2006-11-30 20:37 141,312 --a------ C:\WINDOWS\system32\lftif12n.dll
2006-11-30 20:37 139,264 --a------ C:\WINDOWS\system\CamExL20.dll
2006-11-30 20:37 131,072 --a------ C:\WINDOWS\system32\ltfil12n.DLL
2006-11-30 20:37 106,496 --a------ C:\WINDOWS\system32\lvcoinst.dll
2006-11-30 20:37 1,047,552 --a------ C:\WINDOWS\system32\MFC71u.dll
2006-11-30 20:34 <DIR> d-------- C:\DOCUME~1\MARCOA~1\Contacts
2006-11-30 20:33 <DIR> d----c--- C:\WINDOWS\system32\DRVSTORE
2006-11-30 20:32 36,528 --------- C:\WINDOWS\system32\drivers\PxHelp20.sys
2006-11-30 20:32 2,560 --------- C:\WINDOWS\system32\drivers\cdralw2k.sys
2006-11-30 20:32 2,432 --------- C:\WINDOWS\system32\drivers\cdr4_xp.sys
2006-11-30 20:32 129,784 --------- C:\WINDOWS\system32\pxafs.dll
2006-11-30 20:32 115,880 --------- C:\WINDOWS\system32\pxinsi64.exe
2006-11-30 20:31 <DIR> d-------- C:\WINDOWS\RegisteredPackages
2006-11-30 20:31 <DIR> d-------- C:\Archivos de programa\Winamp
2006-11-30 20:15 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\OpenOffice.org2
2006-11-30 20:13 <DIR> d-------- C:\Archivos de programa\OpenOffice.org 2.1
2006-11-30 19:54 319,104 --a------ C:\WINDOWS\system32\drivers\rt61.sys
2006-11-30 19:51 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\Logitech
2006-11-30 19:51 <DIR> d-------- C:\Archivos de programa\HP
2006-11-30 19:50 94,208 --a------ C:\WINDOWS\KHALMNPR.Exe
2006-11-30 19:50 71,680 --a------ C:\WINDOWS\system32\drivers\LMouKE.Sys
2006-11-30 19:50 56,064 --a------ C:\WINDOWS\system32\drivers\L8042mou.Sys
2006-11-30 19:50 53,248 --a------ C:\WINDOWS\system32\KemXML.dll
2006-11-30 19:50 3,712 --a------ C:\WINDOWS\system32\drivers\LBeepKE.sys
2006-11-30 19:50 155,648 --a------ C:\WINDOWS\system32\kemutb.dll
2006-11-30 19:50 13,568 --a------ C:\WINDOWS\system32\drivers\L8042Kbd.sys
2006-11-30 19:50 126,976 --a------ C:\WINDOWS\system32\KemUtil.dll
2006-11-30 19:50 110,592 --a------ C:\WINDOWS\system32\KemWnd.dll
2006-11-30 19:50 <DIR> d-------- C:\Archivos de programa\Logitech
2006-11-30 19:50 <DIR> d-------- C:\Archivos de programa\Archivos comunes\Logitech
2006-11-30 19:48 <DIR> d-------- C:\DOCUME~1\MARCOA~1\DATOSD~1\ATI
2006-11-30 19:36 <DIR> dr--s---- C:\WINDOWS\assembly
2006-11-30 19:35 <DIR> d-------- C:\WINDOWS\Microsoft.NET
2006-11-30 19:31 520,192 --------- C:\WINDOWS\system32\ati2sgag.exe
2006-11-30 19:31 <DIR> d-------- C:\Archivos de programa\ATI Technologies
2006-11-30 19:26 <DIR> d-------- C:\WINDOWS\WBEM
2006-11-30 19:26 <DIR> d-------- C:\WINDOWS\system32\es-es
2006-11-30 19:25 <DIR> d--h-c--- C:\WINDOWS\ie7
2006-11-30 19:24 121,856 --------- C:\WINDOWS\system32\xmllite.dll
2006-11-30 19:24 <DIR> d-------- C:\WINDOWS\network diagnostic
2006-11-30 19:22 <DIR> d--hs---- C:\RECYCLER
2006-11-30 19:21 991,232 --a------ C:\WINDOWS\system32\virtear.dll
2006-11-30 19:21 765,952 --a------ C:\WINDOWS\system\crlds3d.dll
2006-11-30 19:21 720,896 --a------ C:\WINDOWS\system32\Audio3d.dll
2006-11-30 19:21 720,896 --a------ C:\WINDOWS\system32\a3d.dll
2006-11-30 19:21 578,304 --a------ C:\WINDOWS\system32\drivers\smwdm.sys
2006-11-30 19:21 49,152 --a------ C:\WINDOWS\system32\DSndUp.exe
2006-11-30 19:21 45,056 --a------ C:\WINDOWS\system32\CleanUp.exe
2006-11-30 19:21 30,208 --a------ C:\WINDOWS\system32\wdmioctl.dll
2006-11-30 19:21 3,744 --a------ C:\WINDOWS\system32\drivers\smsens.sys
2006-11-30 19:21 235,100 --a------ C:\WINDOWS\system32\drivers\MidiSyn.sys
2006-11-30 19:21 100,224 --a------ C:\WINDOWS\system32\drivers\aeaudio.sys
2006-11-30 19:21 1,285,632 --a------ C:\WINDOWS\system32\SMMedia.dll
2006-11-30 19:21 <DIR> d-------- C:\WINDOWS\VirtualEar
2006-11-30 19:21 <DIR> d-------- C:\Archivos de programa\Analog Devices
2006-11-30 19:11 90,112 --a------ C:\WINDOWS\system32\AVASTSS.scr
2006-11-30 19:11 87,424 --a------ C:\WINDOWS\system32\drivers\aswmon2.sys
2006-11-30 19:11 85,952 --a------ C:\WINDOWS\system32\drivers\aswmon.sys
2006-11-30 19:11 666,240 --a------ C:\WINDOWS\system32\aswBoot.exe
2006-11-30 19:11 499,712 --a------ C:\WINDOWS\system32\msvcp71.dll
2006-11-30 19:11 36,176 --a------ C:\WINDOWS\system32\drivers\aswTdi.sys
2006-11-30 19:11 348,160 --a------ C:\WINDOWS\system32\msvcr71.dll
2006-11-30 19:11 24,560 --a------ C:\WINDOWS\system32\drivers\aavmker4.sys
2006-11-30 19:11 16,352 --a------ C:\WINDOWS\system32\drivers\aswRdr.sys
2006-11-30 19:11 1,060,864 --a------ C:\WINDOWS\system32\MFC71.dll
2006-11-30 19:11 <DIR> d-------- C:\Archivos de programa\Alwil Software
2006-11-30 19:06 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Windows Genuine Advantage
2006-11-30 18:25 <DIR> dr-hsc--- C:\WINDOWS\system32\dllcache
2006-11-30 18:25 <DIR> dr--s---- C:\WINDOWS\Fonts
2006-11-30 18:25 <DIR> dr------- C:\WINDOWS\Web
2006-11-30 18:25 <DIR> d--h----- C:\WINDOWS\inf
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\WinSxS
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\twain_32
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\wins
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\wbem
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\usmt
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\spool
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\ShellExt
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\Setup
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\ras
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\oobe
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\npp
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\mui
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\inetsrv
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\IME
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\icsxml
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\ias
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\export
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\drivers\etc
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\drivers\disdn
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\drivers
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\dhcp
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\config
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\3com_dmi
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\3082
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\3076
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\2052
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1054
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1042
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1041
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1037
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1033
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1031
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1028
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32\1025
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system32
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\system
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\security
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Resources
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\repair
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Provisioning
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\PeerNet
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\pchealth
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\mui
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\msapps
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\msagent
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Media
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\java
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\ime
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Help
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\ehome
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Driver_Cache
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Debug
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Cursors
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Connection Wizard
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\Config
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\AppPatch
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS\addins
2006-11-30 18:25 <DIR> d-------- C:\WINDOWS
2006-11-30 18:02 22,752 --a------ C:\WINDOWS\system32\spupdsvc.exe
2006-11-30 18:02 <DIR> d--h----- C:\WINDOWS\$hf_mig$
2006-11-30 18:02 <DIR> d-------- C:\WINDOWS\system32\PreInstall
2006-11-30 18:00 <DIR> d--hs---- C:\DOCUME~1\MARCOA~1\UserData
2006-11-30 17:59 24,064 -ra------ C:\WINDOWS\system32\IntelNic.dll
2006-11-30 17:59 126,976 -ra------ C:\WINDOWS\system32\e1000msg.dll
2006-11-30 17:59 121,344 -ra------ C:\WINDOWS\system32\drivers\e1000325.sys
2006-11-30 17:59 118,784 -ra------ C:\WINDOWS\system32\Prounstl.exe
2006-11-30 17:59 <DIR> d-------- C:\WINDOWS\system32\SoftwareDistribution
2006-11-30 17:57 24,576 -ra------ C:\WINDOWS\system32\ptipbmf.dll
2006-11-30 17:57 135,680 -ra------ C:\WINDOWS\system32\drivers\Fasttx2k.sys
2006-11-30 17:50 <DIR> d--h----- C:\Archivos de programa\InstallShield Installation Information
2006-11-30 17:50 <DIR> d-------- C:\WINDOWS\system32\ReinstallBackups
2006-11-30 17:50 <DIR> d-------- C:\Archivos de programa\Intel
2006-11-30 17:50 <DIR> d-------- C:\Archivos de programa\Archivos comunes\InstallShield
2006-11-30 17:49 5,824 --a------ C:\WINDOWS\system32\drivers\ASUSHWIO.SYS
2006-11-30 17:47 <DIR> dr-h----- C:\DOCUME~1\MARCOA~1\Reciente
2006-11-30 17:47 <DIR> dr-h----- C:\DOCUME~1\MARCOA~1\Datos de programa
2006-11-30 17:47 <DIR> dr------- C:\DOCUME~1\MARCOA~1\Mis documentos
2006-11-30 17:47 <DIR> dr------- C:\DOCUME~1\MARCOA~1\Men£ Inicio
2006-11-30 17:47 <DIR> dr------- C:\DOCUME~1\MARCOA~1\Favoritos
2006-11-30 17:47 <DIR> d--h----- C:\DOCUME~1\MARCOA~1\Plantillas
2006-11-30 17:47 <DIR> d--h----- C:\DOCUME~1\MARCOA~1\Impresoras
2006-11-30 17:47 <DIR> d--h----- C:\DOCUME~1\MARCOA~1\Entorno de red
2006-11-30 17:47 <DIR> d--h----- C:\DOCUME~1\MARCOA~1\Configuraci¢n local
2006-11-30 17:47 <DIR> d-------- C:\DOCUME~1\MARCOA~1\Escritorio
2006-11-30 17:46 <DIR> d-------- C:\WINDOWS\SoftwareDistribution
2006-11-30 17:46 <DIR> d-------- C:\WINDOWS\Prefetch
2006-11-30 17:45 <DIR> dr-h----- C:\WINDOWS\system32\config\SYSTEM~1\Datos de programa
2006-11-30 17:45 <DIR> dr-h----- C:\WINDOWS\system32\config\SYSTEM~1\Configuraci¢n local
2006-11-30 17:45 <DIR> dr------- C:\WINDOWS\system32\config\SYSTEM~1\Men£ Inicio
2006-11-30 17:45 <DIR> d--h----- C:\WINDOWS\system32\config\SYSTEM~1\Reciente
2006-11-30 17:45 <DIR> d--h----- C:\WINDOWS\system32\config\SYSTEM~1\Plantillas
2006-11-30 17:45 <DIR> d--h----- C:\WINDOWS\system32\config\SYSTEM~1\Impresoras
2006-11-30 17:45 <DIR> d--h----- C:\WINDOWS\system32\config\SYSTEM~1\Entorno de red
2006-11-30 17:45 <DIR> d-------- C:\WINDOWS\system32\config\SYSTEM~1\Mis documentos
2006-11-30 17:45 <DIR> d-------- C:\WINDOWS\system32\config\SYSTEM~1\Favoritos
2006-11-30 17:45 <DIR> d-------- C:\WINDOWS\system32\config\SYSTEM~1\Escritorio
2006-11-30 17:44 <DIR> d-------- C:\WINDOWS\system32\xircom
2006-11-30 17:44 <DIR> d-------- C:\Archivos de programa\microsoft frontpage
2006-11-30 17:43 112,128 --a------ C:\WINDOWS\system32\mapi32.dll
2006-11-30 17:43 0 -rahs---- C:\MSDOS.SYS
2006-11-30 17:43 0 -rahs---- C:\IO.SYS
2006-11-30 17:43 0 --a------ C:\CONFIG.SYS
2006-11-30 17:43 0 --a------ C:\AUTOEXEC.BAT
2006-11-30 17:42 11,264 --a------ C:\WINDOWS\system32\atrace.dll
2006-11-30 17:42 <DIR> dr------- C:\WINDOWS\Offline Web Pages
2006-11-30 17:42 <DIR> d--hs---- C:\Documents and Settings\All Users\DRM
2006-11-30 17:42 <DIR> d--h----- C:\Archivos de programa\WindowsUpdate
2006-11-30 17:42 <DIR> d---s---- C:\WINDOWS\Downloaded Program Files
2006-11-30 17:42 <DIR> d-------- C:\WINDOWS\system32\DirectX
2006-11-30 17:42 <DIR> d-------- C:\Archivos de programa\Servicios en l¡nea
2006-11-30 17:41 86,016 --a------ C:\WINDOWS\system32\isign32.dll
2006-11-30 17:41 81,920 --a------ C:\WINDOWS\system32\ils.dll
2006-11-30 17:41 8,192 --a------ C:\WINDOWS\system32\bitsprx2.dll
2006-11-30 17:41 73,728 --a------ C:\WINDOWS\system32\icwdial.dll
2006-11-30 17:41 73,600 --a------ C:\WINDOWS\system32\drivers\sr.sys
2006-11-30 17:41 71,168 --a------ C:\WINDOWS\system32\acctres.dll
2006-11-30 17:41 7,168 --a------ C:\WINDOWS\system32\bitsprx3.dll
2006-11-30 17:41 69,632 --a------ C:\WINDOWS\system32\msconf.dll
2006-11-30 17:41 679,424 --a------ C:\WINDOWS\system32\inetcomm.dll
2006-11-30 17:41 67,584 --a------ C:\WINDOWS\system32\srclient.dll
2006-11-30 17:41 65,536 --a------ C:\WINDOWS\system32\icwphbk.dll
2006-11-30 17:41 6,656 --a------ C:\WINDOWS\system32\wuauserv.dll
2006-11-30 17:41 50,176 --a------ C:\WINDOWS\system32\inetres.dll
2006-11-30 17:41 466,200 --a------ C:\WINDOWS\system32\wuapi.dll
2006-11-30 17:41 45,568 --a------ C:\WINDOWS\system32\safrslv.dll
2006-11-30 17:41 43,520 --a------ C:\WINDOWS\system32\safrcdlg.dll
2006-11-30 17:41 43,520 --a------ C:\WINDOWS\system32\racpldlg.dll
2006-11-30 17:41 41,240 --a------ C:\WINDOWS\system32\wups.dll
2006-11-30 17:41 382,464 --a------ C:\WINDOWS\system32\qmgr.dll
2006-11-30 17:41 34,560 --a------ C:\WINDOWS\system32\mnmdd.dll
2006-11-30 17:41 32,768 --a------ C:\WINDOWS\system32\mnmsrvc.exe
2006-11-30 17:41 32,768 --a------ C:\WINDOWS\system32\isrdbg32.dll
2006-11-30 17:41 29,696 --a------ C:\WINDOWS\system32\safrdm.dll
2006-11-30 17:41 282,624 --a------ C:\WINDOWS\system32\inetcfg.dll
2006-11-30 17:41 28,672 --a------ C:\WINDOWS\system32\nmmkcert.dll
2006-11-30 17:41 279,552 --a------ C:\WINDOWS\system32\mstask.dll
2006-11-30 17:41 252,928 --a------ C:\WINDOWS\system32\msoeacct.dll
2006-11-30 17:41 241,152 --a------ C:\WINDOWS\system32\srrstr.dll
2006-11-30 17:41 23,040 --a------ C:\WINDOWS\system32\fltmc.exe
2006-11-30 17:41 195,352 --a------ C:\WINDOWS\system32\wuaueng1.dll
2006-11-30 17:41 192,000 --a------ C:\WINDOWS\system32\schedsvc.dll
2006-11-30 17:41 18,944 --a------ C:\WINDOWS\system32\qmgrprxy.dll
2006-11-30 17:41 175,384 --a------ C:\WINDOWS\system32\wuauclt1.exe
2006-11-30 17:41 173,536 --a------ C:\WINDOWS\system32\wuweb.dll
2006-11-30 17:41 171,008 --a------ C:\WINDOWS\system32\srsvc.dll
2006-11-30 17:41 16,896 --a------ C:\WINDOWS\system32\fltlib.dll
2006-11-30 17:41 16,384 --a------ C:\WINDOWS\system32\icfgnt5.dll
2006-11-30 17:41 128,896 --a------ C:\WINDOWS\system32\drivers\fltmgr.sys
2006-11-30 17:41 128,280 --a------ C:\WINDOWS\system32\wucltui.dll
2006-11-30 17:41 125,208 --a------ C:\WINDOWS\system32\wuauclt.exe
2006-11-30 17:41 12,288 --a------ C:\WINDOWS\system32\nmevtmsg.dll
2006-11-30 17:41 12,288 --a------ C:\WINDOWS\system32\mstinit.exe
2006-11-30 17:41 105,984 --a------ C:\WINDOWS\system32\msoert2.dll
2006-11-30 17:41 1,343,768 --a------ C:\WINDOWS\system32\wuaueng.dll
2006-11-30 17:41 <DIR> d---s---- C:\WINDOWS\Tasks
2006-11-30 17:41 <DIR> d-------- C:\WINDOWS\system32\Restore
2006-11-30 17:41 <DIR> d-------- C:\WINDOWS\system32\Macromed
2006-11-30 17:41 <DIR> d-------- C:\WINDOWS\srchasst
2006-11-30 17:41 <DIR> d-------- C:\Archivos de programa\Movie Maker
2006-11-30 17:41 <DIR> d-------- C:\Archivos de programa\Archivos comunes\MSSoap
2006-11-30 17:40 97,792 --a------ C:\WINDOWS\system32\comrepl.dll
2006-11-30 17:40 80,896 --a------ C:\WINDOWS\system32\charmap.exe
2006-11-30 17:40 73,216 --a------ C:\WINDOWS\system32\avwav.dll
2006-11-30 17:40 652,800 --a------ C:\WINDOWS\system32\getuname.dll
2006-11-30 17:40 57,344 --a------ C:\WINDOWS\system32\sol.exe
2006-11-30 17:40 55,808 --a------ C:\WINDOWS\system32\freecell.exe
2006-11-30 17:40 54,272 --a------ C:\WINDOWS\system32\stclient.dll
2006-11-30 17:40 539,136 --a------ C:\WINDOWS\system32\spider.exe
2006-11-30 17:40 5,632 --a------ C:\WINDOWS\system32\write.exe
2006-11-30 17:40 5,120 --a------ C:\WINDOWS\system32\dcomcnfg.exe
2006-11-30 17:40 44,544 --a------ C:\WINDOWS\system32\hticons.dll
2006-11-30 17:40 4,608 --a------ C:\WINDOWS\system32\rdpcfgex.dll
2006-11-30 17:40 4,096 --a------ C:\WINDOWS\system32\mtxex.dll
2006-11-30 17:40 353,280 --a------ C:\WINDOWS\system32\hypertrm.dll
2006-11-30 17:40 35,328 --a------ C:\WINDOWS\system32\winchat.exe
2006-11-30 17:40 346,624 --a------ C:\WINDOWS\system32\mspaint.exe
2006-11-30 17:40 33,792 --a------ C:\WINDOWS\system32\regini.exe
2006-11-30 17:40 25,600 --a------ C:\WINDOWS\system32\comaddin.dll
2006-11-30 17:40 25,088 --a------ C:\WINDOWS\system32\mtxlegih.dll
2006-11-30 17:40 232,448 --a------ C:\WINDOWS\system32\avtapi.dll
2006-11-30 17:40 23,040 --a------ C:\WINDOWS\system32\qwinsta.exe
2006-11-30 17:40 22,016 --a------ C:\WINDOWS\system32\msg.exe
2006-11-30 17:40 21,896 --a------ C:\WINDOWS\system32\drivers\tdtcp.sys
2006-11-30 17:40 20,480 --a------ C:\WINDOWS\system32\mtxdm.dll
2006-11-30 17:40 188,416 --a------ C:\WINDOWS\system32\accwiz.exe
2006-11-30 17:40 17,920 --a------ C:\WINDOWS\system32\tsshutdn.exe
2006-11-30 17:40 17,408 --a------ C:\WINDOWS\system32\qappsrv.exe
2006-11-30 17:40 16,896 --a------ C:\WINDOWS\system32\tskill.exe
2006-11-30 17:40 16,384 --a------ C:\WINDOWS\system32\rwinsta.exe
2006-11-30 17:40 16,384 --a------ C:\WINDOWS\system32\avmeter.dll
2006-11-30 17:40 15,872 --a------ C:\WINDOWS\system32\logoff.exe
2006-11-30 17:40 15,872 --a------ C:\WINDOWS\system32\cdmodem.dll
2006-11-30 17:40 15,360 --a------ C:\WINDOWS\system32\tsdiscon.exe
2006-11-30 17:40 15,360 --a------ C:\WINDOWS\system32\tscon.exe
2006-11-30 17:40 15,360 --a------ C:\WINDOWS\system32\shadow.exe
2006-11-30 17:40 147,456 --a------ C:\WINDOWS\system32\comsnap.dll
2006-11-30 17:40 139,264 --a------ C:\WINDOWS\system32\sndvol32.exe
2006-11-30 17:40 132,608 --a------ C:\WINDOWS\system32\sndrec32.exe
2006-11-30 17:40 128,000 --a------ C:\WINDOWS\system32\mshearts.exe
2006-11-30 17:40 124,928 --a------ C:\WINDOWS\system32\mplay32.exe
2006-11-30 17:40 120,320 --a------ C:\WINDOWS\system32\winmine.exe
2006-11-30 17:40 12,040 --a------ C:\WINDOWS\system32\drivers\tdpipe.sys
2006-11-30 17:40 115,200 --a------ C:\WINDOWS\system32\calc.exe
2006-11-30 17:40 104,448 --a------ C:\WINDOWS\system32\clipbrd.exe
2006-11-30 17:40 10,240 --a------ C:\WINDOWS\system32\reset.exe
2006-11-30 17:40 1,161 --a------ C:\WINDOWS\system32\usrlogon.cmd
2006-11-30 17:40 <DIR> d-------- C:\WINDOWS\Registration
2006-11-30 17:40 <DIR> d-------- C:\WINDOWS\Cursores
2006-11-30 17:40 <DIR> d-------- C:\Archivos de programa\Windows NT
2006-11-30 17:40 <DIR> d-------- C:\Archivos de programa\Online Services
2006-11-30 17:40 <DIR> d-------- C:\Archivos de programa\MSN Gaming Zone
2006-11-30 17:40 <DIR> d-------- C:\Archivos de programa\Messenger
2006-11-30 17:39 956,416 --a------ C:\WINDOWS\system32\msdtctm.dll
2006-11-30 17:39 93,696 --a------ C:\WINDOWS\system32\tscfgwmi.dll
2006-11-30 17:39 91,136 --a------ C:\WINDOWS\system32\mtxoci.dll
2006-11-30 17:39 87,176 --a------ C:\WINDOWS\system32\rdpwsx.dll
2006-11-30 17:39 85,504 --a------ C:\WINDOWS\system32\catsrvps.dll
2006-11-30 17:39 67,072 --a------ C:\WINDOWS\system32\rdshost.exe
2006-11-30 17:39 655,360 --a------ C:\WINDOWS\system32\mstscax.dll
2006-11-30 17:39 625,152 --a------ C:\WINDOWS\system32\catsrvut.dll
2006-11-30 17:39 62,464 --a------ C:\WINDOWS\system32\rdpclip.exe
2006-11-30 17:39 61,440 --a------ C:\WINDOWS\system32\remotepg.dll
2006-11-30 17:39 60,416 --a------ C:\WINDOWS\system32\colbact.dll
2006-11-30 17:39 6,144 --a------ C:\WINDOWS\system32\msdtc.exe
2006-11-30 17:39 58,880 --a------ C:\WINDOWS\system32\msdtclog.dll
2006-11-30 17:39 58,880 --a------ C:\WINDOWS\system32\licwmi.dll
2006-11-30 17:39 56,832 --a------ C:\WINDOWS\system32\servdeps.dll
2006-11-30 17:39 540,160 --a------ C:\WINDOWS\system32\comuid.dll
2006-11-30 17:39 498,688 --a------ C:\WINDOWS\system32\clbcatq.dll
2006-11-30 17:39 44,544 --a------ C:\WINDOWS\system32\tscupgrd.exe
2006-11-30 17:39 426,496 --a------ C:\WINDOWS\system32\msdtcprx.dll
2006-11-30 17:39 409,088 --a------ C:\WINDOWS\system32\mstsc.exe
2006-11-30 17:39 40,840 --a------ C:\WINDOWS\system32\drivers\termdd.sys
2006-11-30 17:39 39,424 --a------ C:\WINDOWS\system32\cfgbkend.dll
2006-11-30 17:39 296,960 --a------ C:\WINDOWS\system32\termsrv.dll
2006-11-30 17:39 225,792 --a------ C:\WINDOWS\system32\catsrv.dll
2006-11-30 17:39 20,480 --a------ C:\WINDOWS\system32\qprocess.exe
2006-11-30 17:39 196,864 --a------ C:\WINDOWS\system32\drivers\rdpdr.sys
2006-11-30 17:39 19,968 --a------ C:\WINDOWS\system32\rdpsnd.dll
2006-11-30 17:39 188,416 --a------ C:\WINDOWS\system32\cmprops.dll
2006-11-30 17:39 17,920 --a------ C:\WINDOWS\system32\mmfutil.dll
2006-11-30 17:39 161,280 --a------ C:\WINDOWS\system32\msdtcuiu.dll
2006-11-30 17:39 147,968 --a------ C:\WINDOWS\system32\rdchost.dll
2006-11-30 17:39 142,848 --a------ C:\WINDOWS\system32\sessmgr.exe
2006-11-30 17:39 139,528 --a------ C:\WINDOWS\system32\drivers\rdpwd.sys
2006-11-30 17:39 13,824 --a------ C:\WINDOWS\system32\rdsaddin.exe
2006-11-30 17:39 110,080 --a------ C:\WINDOWS\system32\clbcatex.dll
2006-11-30 17:39 11,776 --a------ C:\WINDOWS\system32\xolehlp.dll
2006-11-30 17:39 11,264 --a------ C:\WINDOWS\system32\icaapi.dll
2006-11-30 17:39 1,267,200 --a------ C:\WINDOWS\system32\comsvcs.dll
2006-11-30 17:39 <DIR> d-------- C:\WINDOWS\system32\MsDtc
2006-11-30 17:39 <DIR> d-------- C:\WINDOWS\system32\Com
2006-11-30 17:36 82,944 --a------ C:\WINDOWS\system32\drivers\wdmaud.sys
2006-11-30 17:36 7,552 --a------ C:\WINDOWS\system32\drivers\MSKSSRV.sys
2006-11-30 17:36 60,800 --a------ C:\WINDOWS\system32\drivers\sysaudio.sys
2006-11-30 17:36 60,288 --a------ C:\WINDOWS\system32\drivers\drmk.sys
2006-11-30 17:36 6,400 --a------ C:\WINDOWS\system32\drivers\splitter.sys
2006-11-30 17:36 59,264 --a------ C:\WINDOWS\system32\drivers\USBAUDIO.sys
2006-11-30 17:36 54,272 --a------ C:\WINDOWS\system32\drivers\swmidi.sys
2006-11-30 17:36 52,864 --a------ C:\WINDOWS\system32\drivers\DMusic.sys
2006-11-30 17:36 5,376 --a------ C:\WINDOWS\system32\drivers\MSPCLOCK.sys
2006-11-30 17:36 4,992 --a------ C:\WINDOWS\system32\drivers\MSPQM.sys
2006-11-30 17:36 4,096 --a------ C:\WINDOWS\system32\ksuser.dll
2006-11-30 17:36 3,072 --a------ C:\WINDOWS\system32\drivers\audstub.sys
2006-11-30 17:36 2,944 --a------ C:\WINDOWS\system32\drivers\drmkaud.sys
2006-11-30 17:36 172,416 --a------ C:\WINDOWS\system32\drivers\kmixer.sys
2006-11-30 17:36 145,792 --a------ C:\WINDOWS\system32\drivers\portcls.sys
2006-11-30 17:36 142,464 --a------ C:\WINDOWS\system32\drivers\aec.sys
2006-11-30 17:35 6,400 --a------ C:\WINDOWS\system32\drivers\enum1394.sys
2006-11-30 17:35 58,624 --a------ C:\WINDOWS\system32\drivers\redbook.sys
2006-11-30 17:34 870,784 --a------ C:\WINDOWS\system32\ati3d1ag.dll
2006-11-30 17:34 77,824 --a------ C:\WINDOWS\system32\usbui.dll
2006-11-30 17:34 5,632 --a------ C:\WINDOWS\system32\drivers\intelide.sys
2006-11-30 17:34 42,368 --a------ C:\WINDOWS\system32\drivers\AGP440.SYS
2006-11-30 17:34 294,912 --a------ C:\WINDOWS\system32\ati2cqag.dll
2006-11-30 17:34 260,608 --a------ C:\WINDOWS\system32\ati2dvag.dll
2006-11-30 17:34 2,518,336 --a------ C:\WINDOWS\system32\ati3duag.dll
2006-11-30 17:34 1,777,152 --a------ C:\WINDOWS\system32\drivers\ati2mtag.sys
2006-11-30 17:34 1,092,960 --a------ C:\WINDOWS\system32\ativvaxx.dll
2006-11-30 17:33 9,936 --a------ C:\WINDOWS\system\LZEXPAND.DLL
2006-11-30 17:33 9,056 --a------ C:\WINDOWS\system\VER.DLL
2006-11-30 17:33 85,532 --a------ C:\WINDOWS\system32\dgsetup.dll
2006-11-30 17:33 83,456 --a------ C:\WINDOWS\system\OLECLI.DLL
2006-11-30 17:33 8,704 --a------ C:\WINDOWS\system32\batt.dll
2006-11-30 17:33 8,192 -ra------ C:\WINDOWS\system32\kbdhept.dll
2006-11-30 17:33 70,544 --a------ C:\WINDOWS\system\MMSYSTEM.DLL
2006-11-30 17:33 70,224 --a------ C:\WINDOWS\system\AVICAP.DLL
2006-11-30 17:33 70,144 --a------ C:\WINDOWS\NOTEPAD.EXE
2006-11-30 17:33 7,168 -ra------ C:\WINDOWS\system32\kbdcz.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdycl.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdsl1.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdsl.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdpl.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdhu.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdhela3.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdcz2.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdcz1.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\kbdcr.dll
2006-11-30 17:33 6,656 -ra------ C:\WINDOWS\system32\KBDAL.DLL
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdtuq.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdtuf.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdlv1.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdlv.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdhela2.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdgkl.dll
2006-11-30 17:33 6,144 -ra------ C:\WINDOWS\system32\kbdest.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdro.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdpl1.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdmon.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdlt1.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdlt.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdkyr.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdhu1.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe319.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe220.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdhe.dll
2006-11-30 17:33 5,632 -ra------ C:\WINDOWS\system32\kbdazel.dll
2006-11-30 17:33 5,120 --a------ C:\WINDOWS\system\SHELL.DLL
2006-11-30 17:33 33,856 --a------ C:\WINDOWS\system\COMMDLG.DLL
2006-11-30 17:33 24,661 --a------ C:\WINDOWS\system32\spxcoins.dll
2006-11-30 17:33 24,064 --a------ C:\WINDOWS\system\OLESVR.DLL
2006-11-30 17:33 19,200 --a------ C:\WINDOWS\system\TAPI.DLL
2006-11-30 17:33 176,157 --a------ C:\WINDOWS\system32\dgrpsetu.dll
2006-11-30 17:33 15,872 --a------ C:\WINDOWS\TASKMAN.EXE
2006-11-30 17:33 13,312 --a------ C:\WINDOWS\system32\irclass.dll
2006-11-30 17:33 127,104 --a------ C:\WINDOWS\system\MSVIDEO.DLL
2006-11-30 17:33 11,264 --a------ C:\WINDOWS\system32\drivers\irenum.sys
2006-11-30 17:33 109,568 --a------ C:\WINDOWS\system\AVIFILE.DLL
2006-11-30 17:33 103,936 --a------ C:\WINDOWS\system32\EqnClass.Dll
2006-11-30 17:33 <DIR> dr------- C:\Archivos de programa
2006-11-30 17:33 <DIR> d--hs---- C:\WINDOWS\Installer
2006-11-30 17:33 <DIR> d-------- C:\Archivos de programa\Archivos comunes\SpeechEngines
2006-11-30 17:33 <DIR> d-------- C:\Archivos de programa\Archivos comunes\ODBC
2006-11-30 17:32 76,288 --a------ C:\WINDOWS\system32\storprop.dll
2006-11-30 17:32 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Configuraci¢n local
2006-11-30 17:32 <DIR> dr------- C:\Documents and Settings\All Users\Men£ Inicio
2006-11-30 17:32 <DIR> dr------- C:\Documents and Settings\All Users\Documentos
2006-11-30 17:32 <DIR> dr------- C:\DOCUME~1\DEFAUL~1\Men£ Inicio
2006-11-30 17:32 <DIR> d--h----- C:\Documents and Settings\All Users\Plantillas
2006-11-30 17:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Reciente
2006-11-30 17:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Plantillas
2006-11-30 17:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Impresoras
2006-11-30 17:32 <DIR> d--h----- C:\DOCUME~1\DEFAUL~1\Entorno de red
2006-11-30 17:32 <DIR> d-------- C:\Documents and Settings\All Users\Favoritos
2006-11-30 17:32 <DIR> d-------- C:\Documents and Settings\All Users\Escritorio
2006-11-30 17:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Mis documentos
2006-11-30 17:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Favoritos
2006-11-30 17:32 <DIR> d-------- C:\DOCUME~1\DEFAUL~1\Escritorio
2006-11-30 17:31 <DIR> dr-h----- C:\Documents and Settings\All Users\Datos de programa
2006-11-30 17:31 <DIR> dr-h----- C:\DOCUME~1\DEFAUL~1\Datos de programa
2006-11-30 17:31 <DIR> d-------- C:\WINDOWS\system32\CatRoot2
2006-11-30 17:31 <DIR> d-------- C:\WINDOWS\system32\CatRoot
2006-11-30 17:30 <DIR> d--hs---- C:\System Volume Information
2006-11-30 17:30 <DIR> d-------- C:\Documents and Settings


(((((((((((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))))


2006-12-27 22:31 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\openoffice.org2
2006-12-27 03:54 -------- d---s---- C:\Documents and Settings\Marco Antonio\Datos de programa\microsoft
2006-12-26 06:02 7378 --a------ C:\Documents and Settings\Marco Antonio\Datos de programa\nmm-metadata.db
2006-12-26 05:58 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\pc suite
2006-12-26 05:58 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\nokia multimedia player
2006-12-26 05:57 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\nokia
2006-12-24 21:49 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\mozilla
2006-12-14 20:28 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\teamspeak2
2006-12-12 19:49 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\adobe
2006-12-11 05:05 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\help
2006-12-10 06:21 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\sun
2006-12-07 06:29 2374472 --a------ C:\WINDOWS\system32\wmvcore.dll
2006-12-02 00:48 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\ahead
2006-12-01 15:45 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\datalayer
2006-12-01 05:14 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\adobeum
2006-11-30 19:52 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\macromedia
2006-11-30 19:51 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\logitech
2006-11-30 19:48 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\ati
2006-11-30 17:48 -------- d-------- C:\Documents and Settings\Marco Antonio\Datos de programa\identities
2006-11-30 17:42 -------- d-------- C:\Archivos de programa\servicios en l¡nea
2006-11-30 17:32 62 --ahs---- C:\Documents and Settings\Marco Antonio\Datos de programa\desktop.ini
2006-11-07 21:03 6049280 --------- C:\WINDOWS\system32\ieframe.dll
2006-11-07 21:03 50688 --------- C:\WINDOWS\system32\msfeedsbs.dll
2006-11-07 21:03 458752 --------- C:\WINDOWS\system32\msfeeds.dll
2006-11-07 21:03 413696 --a------ C:\WINDOWS\system32\vbscript.dll
2006-11-07 21:03 231424 --a------ C:\WINDOWS\system32\webcheck.dll
2006-11-07 21:03 180736 --------- C:\WINDOWS\system32\ieui.dll
2006-11-07 21:03 156160 --a------ C:\WINDOWS\system32\msls31.dll
2006-11-07 03:27 382976 --a------ C:\WINDOWS\system32\iedkcs32.dll
2006-11-07 03:27 229376 --a------ C:\WINDOWS\system32\ieaksie.dll
2006-11-07 03:26 71680 --a------ C:\WINDOWS\system32\admparse.dll
2006-11-07 03:26 55296 --a------ C:\WINDOWS\system32\iesetup.dll
2006-11-07 03:26 54784 --a------ C:\WINDOWS\system32\ie4uinit.exe
2006-11-07 03:26 43008 --a------ C:\WINDOWS\system32\iernonce.dll
2006-11-07 03:26 152064 --a------ C:\WINDOWS\system32\ieakeng.dll
2006-11-07 03:26 13312 --a------ C:\WINDOWS\system32\ieudinit.exe
2006-11-07 03:26 123904 --a------ C:\WINDOWS\system32\advpack.dll
2006-11-07 03:25 161792 --a------ C:\WINDOWS\system32\ieakui.dll
2006-11-04 14:14 1245696 --a------ C:\WINDOWS\system32\msxml4.dll
2006-10-20 02:38 716288 --a------ C:\WINDOWS\system32\sxs.dll
2006-10-17 12:06 78336 --a------ C:\WINDOWS\system32\ieencode.dll
2006-10-17 12:05 40960 --a------ C:\WINDOWS\system32\licmgr10.dll
2006-10-17 12:05 206336 --------- C:\WINDOWS\system32\winfxdocobj.exe
2006-10-17 12:05 105984 --a------ C:\WINDOWS\system32\url.dll
2006-10-17 12:04 101376 --a------ C:\WINDOWS\system32\occache.dll
2006-10-17 12:03 17408 --a------ C:\WINDOWS\system32\corpol.dll
2006-10-17 11:58 61952 --------- C:\WINDOWS\system32\icardie.dll
2006-10-17 11:58 12288 --------- C:\WINDOWS\system32\msfeedssync.exe
2006-10-17 11:57 36352 --a------ C:\WINDOWS\system32\imgutil.dll
2006-10-17 11:57 266752 --------- C:\WINDOWS\system32\iertutil.dll
2006-10-17 11:56 45568 --a------ C:\WINDOWS\system32\mshta.exe
2006-10-17 11:28 48128 --a------ C:\WINDOWS\system32\mshtmler.dll
2006-10-17 11:27 380928 --------- C:\WINDOWS\system32\ieapfltr.dll
2006-10-13 13:36 65536 --a------ C:\WINDOWS\system32\nwwks.dll
2006-10-13 13:36 64000 --a------ C:\WINDOWS\system32\nwapi32.dll
2006-10-13 13:36 144384 --a------ C:\WINDOWS\system32\nwprovau.dll
2006-10-12 02:47 307200 --a------ C:\WINDOWS\system32\atiiiexx.dll
2006-10-12 02:38 90112 --a------ C:\WINDOWS\system32\ati2evxx.dll
2006-10-12 02:38 41984 --a------ C:\WINDOWS\system32\ati2edxx.dll
2006-10-12 02:38 26112 --a------ C:\WINDOWS\system32\ati2mdxx.exe
2006-10-12 02:38 118784 --a------ C:\WINDOWS\system32\atipdlxx.dll
2006-10-12 02:38 106496 --a------ C:\WINDOWS\system32\oemdspif.dll
2006-10-12 02:37 430080 --a------ C:\WINDOWS\system32\ati2evxx.exe
2006-10-12 02:36 53248 --a------ C:\WINDOWS\system32\atiddc.dll
2006-10-12 02:22 6684672 --a------ C:\WINDOWS\system32\atioglx1.dll
2006-10-12 02:22 303104 --a------ C:\WINDOWS\system32\atidemgr.dll
2006-10-12 02:20 5148672 --a------ C:\WINDOWS\system32\atioglxx.dll
2006-10-12 02:15 221184 --a------ C:\WINDOWS\system32\atikvmag.dll
2006-10-12 02:14 17408 --a------ C:\WINDOWS\system32\atitvo32.dll


(((((((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))

*Note* empty entries & legit default entries are not shown

[HKEY_CURRENT_USER\software\microsoft\windows\currentversion\run]
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.exe"
"LogitechSoftwareUpdate"="\"C:\\Archivos de programa\\Logitech\\Video\\ManifestEngine.exe\" boot"
"Steam"="\"C:\\Archivos de programa\\Logitech\\Video\\ManifestEngine.exe\" boot"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run]
"SetCacheMode"="Rundll32.exe ptipbmf.dll,SetWriteCacheMode"
"avast!"="C:\\ARCHIV~1\\ALWILS~1\\Avast4\\ashDisp.exe"
"SoundMAXPnP"="C:\\Archivos de programa\\Analog Devices\\SoundMAX\\SMax4PNP.exe"
"ATICCC"="\"C:\\Archivos de programa\\ATI Technologies\\ATI.ACE\\CLIStart.exe\""
"Logitech Hardware Abstraction Layer"="KHALMNPR.EXE"
"LVCOMSX"="C:\\WINDOWS\\system32\\LVCOMSX.EXE"
"LogitechVideoRepair"="C:\\Archivos de programa\\Logitech\\Video\\ISStart.exe "
"LogitechVideoTray"="C:\\Archivos de programa\\Logitech\\Video\\LogiTray.exe"
"HP Component Manager"="\"C:\\Archivos de programa\\HP\\hpcoretech\\hpcmpmgr.exe\""
"NeroFilterCheck"="C:\\WINDOWS\\system32\\NeroCheck.exe"
"SoundMAX"="\"C:\\Archivos de programa\\Analog Devices\\SoundMAX\\Smax4.exe\" /tray"
"QuickTime Task"="\"C:\\Archivos de programa\\QuickTime\\qttask.exe\" -atboottime"
"PinnacleDriverCheck"="C:\\WINDOWS\\system32\\\\PSDrvCheck.exe"
"BluetoothAuthenticationAgent"="rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent"
"PCSuiteTrayApplication"="C:\\Archivos de programa\\Nokia\\Nokia PC Suite 6\\LaunchApplication.exe -startup"
"!AVG Anti-Spyware"="\"C:\\Archivos de programa\\Grisoft\\AVG Anti-Spyware 7.5\\avgas.exe\" /minimized"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\run-]
"SunJavaUpdateSched"="\"C:\\Archivos de programa\\Java\\jre1.5.0_09\\bin\\jusched.exe\""
"QuickTime Task"="\"C:\\Archivos de programa\\QuickTime\\qttask.exe\" -atboottime"

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg]
"key"="SOFTWARE\\Microsoft\\Windows\\CurrentVersion\\Run"
"item"="rundll32"
"hkey"="HKLM"
"command"="rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent"
"inimapping"="0"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shellexecutehooks]
"{57B86673-276A-48B2-BAE7-C6DBB3020EB8}"="AVG Anti-Spyware 7.5"

[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\shellserviceobjectdelayload]
"UPnPMonitor"="{e57ce738-33e8-4c51-8354-bb4de9d215d1}"

[HKEY_USERS\.default\software\microsoft\windows\currentversion\run]
"PcSync"="C:\\Archivos de programa\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

[HKEY_USERS\s-1-5-18\software\microsoft\windows\currentversion\run]
"PcSync"="C:\\Archivos de programa\\Nokia\\Nokia PC Suite 6\\PcSync2.exe /NoDialog"

[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\securityproviders]
"SecurityProviders"="msapsspc.dll, schannel.dll, digest.dll, msnsspc.dll"


[HKEY_LOCAL_MACHINE\software\Microsoft\Windows NT\CurrentVersion\Svchost]
HTTPFilter REG_MULTI_SZ HTTPFilter\0\0
LocalService REG_MULTI_SZ Alerter\0WebClient\0LmHosts\0RemoteRegistry\0upnphost\0SSDPSRV\0\0
NetworkService REG_MULTI_SZ DnsCache\0\0
DcomLaunch REG_MULTI_SZ DcomLaunch\0TermService\0\0
rpcss REG_MULTI_SZ RpcSs\0\0
imgsvc REG_MULTI_SZ StiSvc\0\0
termsvcs REG_MULTI_SZ TermService\0\0
bthsvcs REG_MULTI_SZ BthServ\0\0
Usnsvc REG_MULTI_SZ usnsvc\0\0

*newlycreated* - HKEY_LOCAL_MACHINE\system\currentcontrolset\enum\root\LEGACY_LBEEPKE

Completion time: 06-12-28 2:42:09.29
--------------------------

AVG SCAN:

---------------------------------------------------------
AVG Anti-Spyware - Informe del análisis
---------------------------------------------------------

+ Creado en: 9:25:30 28/12/2006

+ Resultado del análisis:



C:\Archivos de programa\MindSoft\MindSoft Utilities XP 9\io.exe -> Backdoor.VB.alb : No se realizó ninguna acción.


::Fin del informe

IT BELONGS to MINDSOFT UTILITIES, NO ACTION REQUIRED

--------------------------

Panda Scan:

Panda has NOT found any virus on my system.

AVAST Scan

No viruses (except C:\Archivos de programa\MindSoft\MindSoft Utilities XP 9\io.exe -> Backdoor.VB.alb, that belongs to mindsoft, checked on forums and it's ok)

--------------------------
HIJACKTHIS ON NORMAL MODE:

Logfile of HijackThis v1.99.1
Scan saved at 14:37:15, on 28/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.5730.0011)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe
C:\WINDOWS\system32\LVCOMSX.EXE
C:\Archivos de programa\Logitech\Video\LogiTray.exe
C:\Archivos de programa\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\rundll32.exe
C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\avgas.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Logitech\SetPoint\SetPoint.exe
C:\Archivos de programa\Logitech\Video\FxSvr2.exe
C:\Archivos de programa\Archivos comunes\Logitech\KhalShared\KHALMNPR.EXE
C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe
C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe
C:\Archivos de programa\Outlook Express\msimn.exe
C:\Archivos de programa\Internet Explorer\iexplore.exe
C:\Documents and Settings\Marco Antonio\Escritorio\HijackThis.exe

R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O2 - BHO: Windows Live Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O4 - HKLM\..\Run: [SetCacheMode] Rundll32.exe ptipbmf.dll,SetWriteCacheMode
O4 - HKLM\..\Run: [avast!] C:\ARCHIV~1\ALWILS~1\Avast4\ashDisp.exe
O4 - HKLM\..\Run: [SoundMAXPnP] C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe
O4 - HKLM\..\Run: [ATICCC] "C:\Archivos de programa\ATI Technologies\ATI.ACE\CLIStart.exe"
O4 - HKLM\..\Run: [Logitech Hardware Abstraction Layer] KHALMNPR.EXE
O4 - HKLM\..\Run: [LVCOMSX] C:\WINDOWS\system32\LVCOMSX.EXE
O4 - HKLM\..\Run: [LogitechVideoRepair] C:\Archivos de programa\Logitech\Video\ISStart.exe
O4 - HKLM\..\Run: [LogitechVideoTray] C:\Archivos de programa\Logitech\Video\LogiTray.exe
O4 - HKLM\..\Run: [HP Component Manager] "C:\Archivos de programa\HP\hpcoretech\hpcmpmgr.exe"
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [SoundMAX] "C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe" /tray
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\system32\\PSDrvCheck.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe bthprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [PCSuiteTrayApplication] C:\Archivos de programa\Nokia\Nokia PC Suite 6\LaunchApplication.exe -startup
O4 - HKLM\..\Run: [!AVG Anti-Spyware] "C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\avgas.exe" /minimized
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [LogitechSoftwareUpdate] "C:\Archivos de programa\Logitech\Video\ManifestEngine.exe" boot
O4 - HKCU\..\Run: [Steam] "C:\Archivos de programa\Logitech\Video\ManifestEngine.exe" boot
O4 - Global Startup: Logitech SetPoint.lnk = ?
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.5.0_09\bin\ssv.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe (file missing)
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O11 - Options group: [INTERNATIONAL] International*
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{277EC9A9-97BF-4F92-A83C-371944D8A716}: NameServer = 62.37.228.22,62.42.230.135
O17 - HKLM\System\CS1\Services\Tcpip\..\{0E402D87-3206-437D-891D-270B99F8A3E7}: NameServer = 62.42.230.24,62.42.230.136
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: avast! iAVS4 Control Service (aswUpdSv) - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\aswUpdSv.exe
O23 - Service: Ati HotKey Poller - ATI Technologies Inc. - C:\WINDOWS\system32\Ati2evxx.exe
O23 - Service: ATI Smart - Unknown owner - C:\WINDOWS\system32\ati2sgag.exe
O23 - Service: avast! Antivirus - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashServ.exe
O23 - Service: avast! Mail Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashMaiSv.exe" /service (file missing)
O23 - Service: avast! Web Scanner - Unknown owner - C:\Archivos de programa\Alwil Software\Avast4\ashWebSv.exe" /service (file missing)
O23 - Service: AVG Anti-Spyware Guard - Anti-Malware Development a.s. - C:\Archivos de programa\Grisoft\AVG Anti-Spyware 7.5\guard.exe
O23 - Service: ServiceLayer - Nokia. - C:\Archivos de programa\PC Connectivity Solution\ServiceLayer.exe
O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe


-------------------------

I have to say that now my computer has AGAIN the Administrator User Account at the windows start, it was lost in the same time that my computer started to fail with IE7 and on the shut down excess time (10min)

Actually it shut down normally and IE7 has AGAIN the normal settings and after 5 hours test connecting and disconnecting the router there was no problems and no lost connections.

At this point I can say that this post is solved!!! If you have any comment I will be here.

Thanks again my friend, best regards from Barcelona!!!
 

·
Registered
Joined
·
2,335 Posts
Your logs are now clean. Please complete the next "housekeeping" steps and read through the information below.


----------------------------------------

Windows XP - Reset Hidden Files


  • Click Start.
  • Open My Computer.
  • Select the Tools menu and click Folder Options.
  • Select the View tab.
  • Deselect the Show hidden files and folders option.
  • Select the Hide file extensions for known types option.
  • Select the Hide protected operating system files option.
  • Click Yes to confirm.
  • Click OK.

----------------------------------------

Clean-out and Reset System Restore

This will clean out any junk or malicious files left behind in System Restore

  • To turn off System Restore click Start > Right Click My Computer > Properties.
  • Click the System Restore tab and Check
  • "Turn off System Restore" or "Turn off System Restore on all drives" Click Apply.
  • When turning off System Restore, the existing restore points will be deleted. Click Yes to do this then Click OK.

  • Turn on System Restore by Clicking Start. Right-click My Computer, and then click Properties.
  • Click the System Restore tab. Uncheck "Turn off System Restore" or "Turn off System Restore on all drives."
  • Click Apply, and then OK.

This will create a new Restore Point.

----------------------------------------

RE-ENABLE ANTI-SPYWARE APPLICATIONS

If you were instructed to dis-able Anti-spyware applications during this fix, you may re-enable them

----------------------------------------

Please read through the following information to help protect your computer in the future.


KEEP YOUR OPERATING SYSTEM UPDATED

Please ensure that you have already patched your system against the recent WMF exploit. Go to this page to get the KB912919 patch

MICROSOFT UPDATES

It is very important that you get all of the critical updates for your Operating System and Internet Explorer. Keeping your OS and browser
up to date will help make you less susceptible to attacks by Trojans and viruses. Please go to Microsoft
and download all the critical updates to help prevent possible re-infection.


ENABLE WINDOWS AUTO UPDATE

Go to Start>Run - type wuaucpl.cpl
tick on the checkbox - "Keep my computer up to date"
Under settings, choose "Automatically download the updates, and install them on the schedule that I specify".
Click on "OK".


ENABLE WINDOWS AUTO UPDATE

From within Internet Explorer click on the Tools menu and then click on Internet Options.
  • Select the Security tab
    • Click once on the Internet icon so it becomes highlighted.
    • Select Custom Level .
      • Change 'Download signed ActiveX controls' to Prompt
      • Change 'Download unsigned ActiveX controls' to Disable
      • Change 'Initialize and script ActiveX controls not marked as safe' to Disable
      • Change 'Installation of desktop items' to Prompt
      • Change 'Launching programs and files in an IFRAME' to Prompt
      • Change 'Navigate sub-frames across different domains' to Prompt
      • When all these changes have been made, click on the OK button.
    • If it prompts you as to whether or not you want to save the settings, press the Yes button.
  • Select OK to exit the Internet Properties page.



TOOLS TO HELP KEEP YOUR SYSTEM CLEAN

Now that you are clean, to help protect your computer in the future I recommend that you get the following free programs:

SpywareBlaster to help prevent spyware from installing in the first place.
  • Install & update SpywareBlaster with the latest definitions.
  • After you have updated, click the button - enable protection for all unprotected items


SpywareGuard to catch and block spyware before it can execute.


SPYBOT - SEARCH & DESTROY Download and install Spybot - Search & Destroy with its
TeaTimer option.
This will provide realtime spyware & hijacker protection on your computer alongside your virus protection. You should also scan your computer with
the program on a regular basis just as you would an antivirus software. A tutorial on installing & using this product can be found here


AD-AWARE Download and install Ad-Aware. You should use this program to scan
your computer on a regular basis just as you would an antivirus software in conjunction with Spybot. A tutorial on installing & using this product
can be found here


IE-SPYAD IE/Spyad places more than 4000 dubious websites and domains in the IE Restricted list. This severely impair attempts to infect your system. It basically prevents any downloads (Cookies etc) from the sites listed, although you will still be able to connect to the sites.
  • Download IE-SpyAD - Extract the contents to a new folder
  • From within the folder, double-click install.bat
  • Select Option #2 - Install the new IE-SPYAD list.
  • Then return to the main menu.
  • Select option #4 - Add the old porn sites domain

A tutorial for IE-SPYAD can be found here


MVPS HOST FILE The MVPS Hosts file replaces your current HOSTS file
with one that will restrict known ad sites form serving you unsolicited advertisements. Basically, this prevents your computer from connecting to
those sites by redirecting them to 127.0.0.1 which is the IP of your local computer.

  • Download Host.zip to your desktop.
  • From your Desktop right-click (hosts.zip) and select:
    Extract All from the menu.
  • Click Next, click Next, select the option:
    "Show Extracted files"
  • Click Finish

This will open the newly created hosts folder on your Desktop.

Double-click on the included mvps.bat file, this will rename the existing HOSTS file to HOSTS.MVP, then it will copy the included updated
HOSTS file to the correct location on your machine.


MCAFEE SITE ADVISOR SITE ADVISOR is a free IE plug-in (also suport for Firefox browser)
which is used in conjunction with the Google search engine. It advises which web sites are considered safe and which sites could pose a problem.
It also shows what problems were encountered with each site, such as malicious downloads, spam, and related links.


ANTI-VIRUS AND FIREWALL PROGRAMS


ANTIVIRUS SOFTWARE It is very important that you have anti-virus software running on your machine.
This alone can save you a lot of trouble with malware in the future.
See this link for a listing of some online antivirus scanners: Anti-Spyware Tutorial

Here are some very good free Antivirus products which are available:




If you do not have a firewall, here are 4 free ones available for personal use:

Understanding and Using Firewalls



INFORMATIONAL READING


In light of your recent troubles, I'm sure you'll like to avoid any future infections. Please take a look at these well written articles:




Please respond one more time and let me know you received this post so it can be marked resolved



If you feel that we have helped you, please help us keep this site free for all. Please visit our DONATION PAGE.
 
1 - 4 of 4 Posts
Status
Not open for further replies.
Top