[Piratacobra]

Greetings:
I got about three weeks ago Avira popping out this softomat Trojan, I also have MBAM installed and updated. I runned it a couple of times but no use, Avira keeps reporting. Also, after 3- 4 hours running, the PC gets SLOW, and after six, i need to restart it because it takes 3-4 minutes to open ANY kind of webpage.

Any help would be appreciated

Here is the OTL Log, thank you.


OTL logfile created on: 04/12/2011 13:13:12 - Run 1
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrador\Escritorio
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

223,48 Mb Total Physical Memory | 50,73 Mb Available Physical Memory | 22,70% Memory free
674,33 Mb Paging File | 269,29 Mb Available in Paging File | 39,93% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 15,00 Gb Total Space | 2,28 Gb Free Space | 15,18% Space Free | Partition Type: NTFS
Drive D: | 4,28 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 59,53 Gb Total Space | 2,17 Gb Free Space | 3,65% Space Free | Partition Type: NTFS

Computer Name: XV-01 | User Name: Administrador | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/12/04 13:06:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
PRC - [2011/11/15 01:39:56 | 001,036,344 | ---- | M] (Google Inc.) -- C:\Archivos de programa\Google\Chrome\Application\chrome.exe
PRC - [2011/09/02 16:03:31 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/06/09 13:06:06 | 000,254,696 | ---- | M] (Sun Microsystems, Inc.) -- C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
PRC - [2011/06/09 06:35:30 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
PRC - [2011/03/21 14:56:16 | 001,230,704 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/08/17 13:38:24 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/01/14 22:11:07 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008/04/14 08:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/12/20 17:12:36 | 000,131,072 | ---- | M] (NVIDIA Corporation) -- C:\Archivos de programa\NVIDIA Corporation\NvMixer\NvMixerTray.exe
PRC - [2002/12/16 16:51:24 | 000,036,864 | ---- | M] (Hewlett-Packard) -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
PRC - [2002/04/17 10:49:16 | 000,077,824 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
PRC - [2002/04/17 10:42:56 | 000,069,632 | ---- | M] (Hewlett-Packard) -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
PRC - [2001/05/06 11:14:22 | 000,020,549 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe


========== Modules (No Company Name) ==========

MOD - [2011/03/21 14:57:34 | 000,096,112 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/03/21 14:56:16 | 001,230,704 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe
MOD - [2010/06/17 15:27:42 | 000,355,688 | ---- | M] () -- C:\Archivos de programa\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2009/04/26 23:15:42 | 000,139,776 | ---- | M] () -- C:\Archivos de programa\WinRAR\RarExt.dll
MOD - [2009/02/27 19:35:50 | 000,311,296 | ---- | M] () -- C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\pdfshell.ESP
MOD - [2008/04/14 08:00:00 | 000,014,336 | ---- | M] () -- C:\WINDOWS\system32\msdmo.dll
MOD - [2006/03/09 15:29:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
MOD - [2003/08/29 05:23:33 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL
MOD - [2002/04/17 10:49:22 | 000,024,576 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnfps.dll
MOD - [2002/04/17 10:49:16 | 000,077,824 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
MOD - [2001/05/06 11:14:24 | 000,765,952 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hotspot\jvm.dll
MOD - [2001/05/06 11:14:22 | 000,086,093 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\java.dll
MOD - [2001/05/06 11:14:22 | 000,053,326 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\zip.dll
MOD - [2001/05/06 11:14:22 | 000,053,319 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\verify.dll
MOD - [2001/05/06 11:14:22 | 000,032,841 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\net.dll
MOD - [2001/05/06 11:14:22 | 000,028,753 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\hpi.dll
MOD - [2001/05/06 11:14:22 | 000,020,549 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011/09/02 16:03:31 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/06/09 06:35:30 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2006/10/26 19:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006/10/26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/11/14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/03/14 12:05:02 | 000,069,632 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


========== Driver Services (SafeList) ==========

DRV - [2011/09/02 16:03:37 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/09/02 16:03:37 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/06/13 12:36:53 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2010/06/17 15:27:42 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/06/17 15:27:32 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/05/24 21:09:10 | 000,073,728 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Archivos de programa\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2008/04/14 08:00:00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/14 08:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/04/14 08:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2005/04/13 12:34:02 | 000,414,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA® nForce™
DRV - [2005/04/13 12:32:42 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA® nForce™
DRV - [2004/05/17 14:00:54 | 000,012,928 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2004/05/17 14:00:52 | 000,033,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2004/03/02 16:37:50 | 000,125,184 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\imagesrv.sys -- (imagesrv)
DRV - [2004/03/02 16:37:48 | 000,005,504 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\imagedrv.sys -- (imagedrv)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo....-8&fr=ytff-&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..keyword.URL: "http://search.yahoo....-8&fr=ytff-&p="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Archivos de programa\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Archivos de programa\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Archivos de programa\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Archivos de programa\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Archivos de programa\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Archivos de programa\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Archivos de programa\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/06/25 01:50:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Archivos de programa\K-Meleon\Plugins [2011/07/31 08:48:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\K-Meleon\Extensions\\Components: C:\Archivos de programa\K-Meleon\Components [2011/07/31 08:49:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2011/06/25 20:47:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins [2011/06/13 09:15:29 | 000,000,000 | ---D | M]

[2010/11/19 20:35:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Extensions
[2011/12/01 17:50:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\mj2vyhmm.default\extensions
[2011/12/01 17:50:24 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\mj2vyhmm.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/14 13:21:12 | 000,000,000 | ---D | M] (No name found) -- C:\Archivos de programa\Mozilla Firefox\extensions
[2010/12/27 19:58:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/07 09:39:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/06/09 06:44:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/14 13:21:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2010/12/27 19:57:46 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\ARCHIVOS DE PROGRAMA\JAVA\JRE6\LIB\DEPLOY\JQS\FF
() (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DATOS DE PROGRAMA\MOZILLA\FIREFOX\PROFILES\MJ2VYHMM.DEFAULT\EXTENSIONS\{A3A5C777-F583-4FEF-9380-AB4ADD1BC2A8}.XPI
[2011/06/25 20:47:53 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Archivos de programa\mozilla firefox\components\browsercomps.dll
[2011/10/03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Archivos de programa\mozilla firefox\plugins\npdeployJava1.dll
[2011/06/13 09:15:20 | 000,002,252 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\bing.xml
[2011/06/13 09:15:20 | 000,003,996 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\drae.xml
[2011/06/13 09:15:20 | 000,001,143 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\eBay-es.xml
[2011/06/13 09:15:20 | 000,001,178 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\wikipedia-es.xml
[2011/06/13 09:15:20 | 000,001,102 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\yahoo-es.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Archivos de programa\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Archivos de programa\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Archivos de programa\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Archivos de programa\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Archivos de programa\Windows Media Player\npdsplay.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Archivos de programa\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Archivos de programa\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Archivos de programa\Windows Media Player\npwmsdrm.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Archivos de programa\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: Google Update (Enabled) = C:\Archivos de programa\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: \u003Cvideo\u003E de HTML5 de DivX Plus Web Player = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
CHR - Extension: Cuevana Stream = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\ooagbcohbmlpkfkdnodbomgphbcecalj\3.0_0\
CHR - Extension: Cuevana Stream = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\ooagbcohbmlpkfkdnodbomgphbcecalj\3.0_0\.svn\props\.svn-work

O1 HOSTS File: ([2008/04/14 08:00:00 | 000,000,792 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Archivos de programa\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Aplicación auxiliar de inicio de sesión) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Archivos de programa\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM)
O4 - HKLM..\Run: [] File not found
O4 - HKLM..\Run: [Adobe ARM] C:\Archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVMixerTray] C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Share-to-Web Namespace Daemon] C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard)
O4 - HKLM..\Run: [StatusClient] C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TomcatStartup] C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe (Hewlett-Packard)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 255
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.44.32.12 200.11.248.12
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B319939-1DF7-4947-A1BA-F374A4D60C8C}: DhcpNameServer = 200.44.32.12 200.11.248.12
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/11/17 09:49:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/04 13:06:04 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
[2011/11/29 10:04:46 | 000,000,000 | ---D | C] -- C:\spoolerlogs
[2011/11/23 18:00:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\vlc
[2011/11/14 13:21:57 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Java
[2011/11/08 12:11:05 | 000,000,000 | ---D | C] -- C:\Archivos de programa\VideoLAN
[2011/09/12 09:05:20 | 000,401,408 | ---- | C] ( ) -- C:\WINDOWS\System32\lexlog.dll
[2011/09/12 09:02:51 | 000,630,784 | ---- | C] ( ) -- C:\WINDOWS\System32\softcoin.dll
[2011/09/12 09:02:46 | 000,425,984 | ---- | C] ( ) -- C:\WINDOWS\System32\gencoin.dll
[2011/02/04 08:13:39 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.sys
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/12/04 13:07:01 | 000,001,116 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/12/04 13:06:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
[2011/12/04 09:42:03 | 000,050,257 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/12/04 09:42:02 | 000,001,098 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae.job
[2011/12/04 09:41:55 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/12/04 09:41:54 | 234,409,984 | -HS- | M] () -- C:\hiberfil.sys
[2011/12/03 19:47:41 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/12/01 19:14:37 | 000,129,457 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\exam 1 Elementary_Students.pdf
[2011/11/28 15:43:11 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Malwarebytes' Anti-Malware.lnk
[2011/11/19 16:15:30 | 000,001,876 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Google Chrome.lnk
[2011/11/11 11:05:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[2011/11/08 12:12:22 | 000,000,768 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\VLC media player.lnk
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/01 19:14:23 | 000,129,457 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\exam 1 Elementary_Students.pdf
[2011/11/09 18:02:14 | 000,001,098 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae.job
[2011/11/08 12:12:21 | 000,000,768 | ---- | C] () -- C:\Documents and Settings\All Users\Escritorio\VLC media player.lnk
[2011/09/25 19:06:02 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011/07/11 02:32:35 | 000,103,831 | ---- | C] () -- C:\WINDOWS\hpoins08.dat
[2011/07/11 01:50:02 | 000,004,445 | ---- | C] () -- C:\WINDOWS\hpomdl08.dat
[2011/07/11 01:44:20 | 000,103,754 | ---- | C] () -- C:\WINDOWS\hpoins08.dat.temp
[2011/07/11 01:44:20 | 000,004,445 | ---- | C] () -- C:\WINDOWS\hpomdl08.dat.temp
[2011/07/11 01:21:41 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2011/06/25 17:50:43 | 000,000,188 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2011/06/09 06:54:03 | 000,017,872 | ---- | C] () -- C:\WINDOWS\hplj1010.ini
[2011/02/04 08:13:39 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\ezpinst.exe
[2011/02/04 08:13:39 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.inf
[2011/02/04 08:13:39 | 000,001,074 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.cat
[2010/12/27 20:36:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/11/30 16:57:00 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/11/30 16:56:59 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/11/30 16:56:55 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/11/30 16:56:55 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/11/30 16:56:54 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/11/19 20:35:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/11/18 11:25:01 | 000,006,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/17 09:52:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/11/17 09:46:27 | 000,021,900 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/11/17 04:10:37 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/11/17 04:09:26 | 000,321,928 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/04/14 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/14 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/14 08:00:00 | 000,506,020 | ---- | C] () -- C:\WINDOWS\System32\perfh00A.dat
[2008/04/14 08:00:00 | 000,442,500 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/14 08:00:00 | 000,317,534 | ---- | C] () -- C:\WINDOWS\System32\perfi00A.dat
[2008/04/14 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/14 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/14 08:00:00 | 000,089,578 | ---- | C] () -- C:\WINDOWS\System32\perfc00A.dat
[2008/04/14 08:00:00 | 000,069,534 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/14 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/14 08:00:00 | 000,036,284 | ---- | C] () -- C:\WINDOWS\System32\perfd00A.dat
[2008/04/14 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/14 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/14 08:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/14 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/14 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007/01/23 08:11:20 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\QFClient2.dll
[2006/03/09 15:29:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/03/09 15:29:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/03/09 15:29:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006/03/09 15:29:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2006/03/09 15:29:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/03/09 15:29:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/03/09 15:29:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006/03/09 15:29:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/03/09 15:29:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006/03/09 15:29:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/03/09 15:29:00 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2003/08/29 05:23:33 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL

========== LOP Check ==========

[2011/06/13 12:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Carpeta de carga de Share-to-Web
[2011/06/25 02:03:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\DDMSettings
[2011/07/31 08:48:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\K-Meleon
[2011/09/08 17:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\ldoce5
[2011/08/09 15:24:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Softland
[2011/09/08 09:57:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\uTorrent
[2011/07/02 20:07:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Vso

========== Purity Check ==========



< End of report >

[Advertisements]

ComboFix
:!: If you have a previous version of Combofix.exe, delete it and download a fresh copy. :!:

:!: It must be saved to your desktop, do not run it :!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Doubleclick on ComboFix to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.

Download TDSSKiller:
http://support.kaspe.../tdsskiller.exe
Save it to your desktop then run it.
Double click on TDSSKiller.exe (Vista or Win 7 must right click and Run As Admin)
If TDSSKiller alerts you that the system needs to reboot, please consent.
When done, a log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.

Download aswMBR.exe ( 511KB ) to your desktop.
Double click the aswMBR.exe to run it
uncheck trace disk IO calls
Click the "Scan" button to start scan
On completion of the scan (Note if the Fix button is enabled (not the FixMBR button) and tell me) click save log, save it to your desktop and post in your next reply

Run OTL, Quickscan and post the log.

Ron

[RKinner]

ComboFix
:!: If you have a previous version of Combofix.exe, delete it and download a fresh copy. :!:

:!: It must be saved to your desktop, do not run it :!:

:!: Disable your Antivirus software when downloading or running Combofix. If it has Script Blocking features, please disable these as well. See: http://www.bleepingc...opic114351.html


Download and Save this file -- to your Desktop -- from either of these two sources:
http://download.blee...Bs/ComboFix.exe
http://subs.geekstogo.com/ComboFix.exe

Doubleclick on ComboFix to start the program.



* :!: Important: Have no other programs running. Your Task Bar should be clear of any program entries including your Browser.


* A window may open with a series of Disclaimers. Accept the Disclaimers to start the fix. Allow it to install the Recovery Console then Continue. When the scan completes Notepad will open with with your results log open. Do a File, Exit and answer 'Yes' to save changes.


A caution - Do not run Combofix more than once. Do not touch your mouse/keyboard until the scan has completed, as this may cause the process to stall or your computer to lock. The scan will temporarily disable your desktop, and if interrupted may leave your desktop disabled. If this occurs, please reboot to restore the desktop. Even when ComboFix appears to be doing nothing, look at your Drive light. If it is flashing, Combofix is still at work.

A file will be created at => C:\Combofix.txt. I'll need to see that in your reply.

Download TDSSKiller:
http://support.kaspe.../tdsskiller.exe
Save it to your desktop then run it.
Double click on TDSSKiller.exe (Vista or Win 7 must right click and Run As Admin)
If TDSSKiller alerts you that the system needs to reboot, please consent.
When done, a log file should be created on your C: drive named "TDSSKiller.txt" please copy and paste the contents in your next reply.

Download aswMBR.exe ( 511KB ) to your desktop.
Double click the aswMBR.exe to run it
uncheck trace disk IO calls
Click the "Scan" button to start scan
On completion of the scan (Note if the Fix button is enabled (not the FixMBR button) and tell me) click save log, save it to your desktop and post in your next reply

Run OTL, Quickscan and post the log.

Ron

[Piratacobra]

Hi Ron, thank you for replying

Here are the logs:

CF Log

ComboFix 11-12-06.02 - Administrador 08/12/2011 12:30:25.1.1 - x86
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.223.119 [GMT -4:00]
Running from: c:\documents and settings\Administrador\Escritorio\ComboFix.exe
AV: AntiVir Desktop *Disabled/Outdated* {AD166499-45F9-482A-A743-FDD3350758C7}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
e:\docs\Readiris.DUS
.
.
((((((((((((((((((((((((( Files Created from 2011-11-08 to 2011-12-08 )))))))))))))))))))))))))))))))
.
.
2011-11-29 14:04 . 2011-11-29 14:04 -------- d-----w- C:\spoolerlogs
2011-11-23 22:00 . 2011-11-23 22:44 -------- d-----w- c:\documents and settings\Administrador\Datos de programa\vlc
2011-11-14 17:21 . 2011-11-14 17:21 -------- d-----w- c:\archivos de programa\Archivos comunes\Java
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2011-10-03 09:06 . 2010-12-27 23:58 472808 ----a-w- c:\windows\system32\deployJava1.dll
2011-10-03 06:37 . 2010-12-27 23:58 73728 ----a-w- c:\windows\system32\javacpl.cpl
2011-06-26 00:47 . 2011-06-13 13:15 142296 ----a-w- c:\archivos de programa\mozilla firefox\components\browsercomps.dll
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"NVMixerTray"="c:\archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe" [2004-12-20 131072]
"NvCplDaemon"="c:\windows\system32\NvCpl.dll" [2006-03-09 7561216]
"nwiz"="nwiz.exe" [2006-03-09 1519616]
"NvMediaCenter"="c:\windows\system32\NvMcTray.dll" [2006-03-09 86016]
"avgnt"="c:\archivos de programa\Avira\AntiVir Desktop\avgnt.exe" [2010-08-17 281768]
"Adobe Reader Speed Launcher"="c:\archivos de programa\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2010-09-23 35760]
"Adobe ARM"="c:\archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe" [2010-09-21 932288]
"GrooveMonitor"="c:\archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe" [2006-10-27 31016]
"StatusClient"="c:\archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe" [2002-12-16 36864]
"TomcatStartup"="c:\archivos de programa\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe" [2003-03-31 155648]
"Share-to-Web Namespace Daemon"="c:\archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2002-04-17 69632]
"DivXUpdate"="c:\archivos de programa\DivX\DivX Update\DivXUpdate.exe" [2011-03-21 1230704]
"NeroFilterCheck"="c:\windows\system32\NeroCheck.exe" [2001-07-09 155648]
"SunJavaUpdateSched"="c:\archivos de programa\Archivos comunes\Java\Java Update\jusched.exe" [2011-06-09 254696]
.
[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Run]
"CTFMON.EXE"="c:\windows\system32\CTFMON.EXE" [2008-04-14 15360]
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile]
"EnableFirewall"= 0 (0x0)
.
[HKLM\~\services\sharedaccess\parameters\firewallpolicy\standardprofile\AuthorizedApplications\List]
"%windir%\\Network Diagnostic\\xpnetdiag.exe"=
"%windir%\\system32\\sessmgr.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\wlcsdk.exe"=
"c:\\Archivos de programa\\Windows Live\\Messenger\\msnmsgr.exe"=
"c:\\Archivos de programa\\Microsoft Office\\Office12\\GROOVE.EXE"=
"c:\\Archivos de programa\\uTorrent\\uTorrent.exe"=
.
R2 AntiVirSchedulerService;Avira AntiVir Programador;c:\archivos de programa\Avira\AntiVir Desktop\sched.exe [18/11/2010 10:47 136360]
R3 pcouffin;VSO Software pcouffin;c:\windows\system32\drivers\pcouffin.sys [04/02/2011 8:13 47360]
S2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [18/03/2010 13:16 130384]
S2 gupdate;Servicio Google Update (gupdate);c:\archivos de programa\Google\Update\GoogleUpdate.exe [25/06/2011 1:48 135664]
S3 gupdatem;Servicio de Google Update (gupdatem);c:\archivos de programa\Google\Update\GoogleUpdate.exe [25/06/2011 1:48 135664]
S3 MBAMSwissArmy;MBAMSwissArmy;\??\c:\windows\system32\drivers\mbamswissarmy.sys --> c:\windows\system32\drivers\mbamswissarmy.sys [?]
S3 WPFFontCache_v0400;Windows Presentation Foundation Font Cache 4.0.0.0;c:\windows\Microsoft.NET\Framework\v4.0.30319\WPF\WPFFontCache_v0400.exe [18/03/2010 13:16 753504]
.
Contents of the 'Scheduled Tasks' folder
.
2011-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-06-25 05:48]
.
2011-12-08 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\archivos de programa\Google\Update\GoogleUpdate.exe [2011-06-25 05:48]
.
.
------- Supplementary Scan -------
.
uInternet Settings,ProxyOverride = <local>
IE: E&xportar a Microsoft Excel - c:\archiv~1\MICROS~3\Office12\EXCEL.EXE/3000
TCP: DhcpNameServer = 200.44.32.12 200.11.248.12
FF - ProfilePath - c:\documents and settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\mj2vyhmm.default\
FF - prefs.js: browser.search.defaulturl - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - prefs.js: browser.search.selectedEngine - Google
FF - prefs.js: browser.startup.homepage - hxxp://www.yahoo.com/
FF - prefs.js: keyword.URL - hxxp://search.yahoo.com/search?ei=UTF-8&fr=ytff-&p=
FF - user.js: yahoo.homepage.dontask - true
.
.
**************************************************************************
.
catchme 0.3.1398 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2011-12-08 12:37
Windows 5.1.2600 Service Pack 3 NTFS
.
scanning hidden processes ...
.
scanning hidden autostart entries ...
.
scanning hidden files ...
.
scan completed successfully
hidden files: 0
.
**************************************************************************
.
Completion time: 2011-12-08 12:39:25
ComboFix-quarantined-files.txt 2011-12-08 16:39
.
Pre-Run: 2.752.368.640 bytes libres
Post-Run: 5.446.795.264 bytes libres
.
- - End Of File - - 29B629E1BAC57C46A3E46A826FF8DC56


TDSSK log

12:57:33.0843 4308 TDSS rootkit removing tool 2.6.22.0 Dec 7 2011 13:21:06
12:57:34.0781 4308 ============================================================
12:57:34.0781 4308 Current date / time: 2011/12/08 12:57:34.0781
12:57:34.0781 4308 SystemInfo:
12:57:34.0781 4308
12:57:34.0781 4308 OS Version: 5.1.2600 ServicePack: 3.0
12:57:34.0781 4308 Product type: Workstation
12:57:34.0781 4308 ComputerName: XV-01
12:57:34.0781 4308 UserName: Administrador
12:57:34.0781 4308 Windows directory: C:\WINDOWS
12:57:34.0781 4308 System windows directory: C:\WINDOWS
12:57:34.0781 4308 Processor architecture: Intel x86
12:57:34.0781 4308 Number of processors: 1
12:57:34.0781 4308 Page size: 0x1000
12:57:34.0781 4308 Boot type: Normal boot
12:57:34.0781 4308 ============================================================
12:57:35.0859 4308 Initialize success
12:57:39.0671 4428 ============================================================
12:57:39.0671 4428 Scan started
12:57:39.0671 4428 Mode: Manual;
12:57:39.0671 4428 ============================================================
12:57:40.0968 4428 Abiosdsk - ok
12:57:41.0000 4428 abp480n5 - ok
12:57:41.0046 4428 ACPI (cf2a07e1751a2d612d7e13aa431ab057) C:\WINDOWS\system32\DRIVERS\ACPI.sys
12:57:41.0046 4428 ACPI - ok
12:57:41.0078 4428 ACPIEC (1c905333c0b9f3d7c68ddf25e54b00f9) C:\WINDOWS\system32\drivers\ACPIEC.sys
12:57:41.0093 4428 ACPIEC - ok
12:57:41.0109 4428 adpu160m - ok
12:57:41.0156 4428 aec (8bed39e3c35d6a489438b8141717a557) C:\WINDOWS\system32\drivers\aec.sys
12:57:41.0156 4428 aec - ok
12:57:41.0203 4428 AFD (322d0e36693d6e24a2398bee62a268cd) C:\WINDOWS\System32\drivers\afd.sys
12:57:41.0203 4428 AFD - ok
12:57:41.0250 4428 AFS2K (b34b1ab0a7690a0e2301fec6d17b2fc1) C:\WINDOWS\system32\drivers\AFS2K.sys
12:57:41.0250 4428 AFS2K - ok
12:57:41.0265 4428 Aha154x - ok
12:57:41.0296 4428 aic78u2 - ok
12:57:41.0312 4428 aic78xx - ok
12:57:41.0359 4428 AliIde - ok
12:57:41.0390 4428 AmdK7 (fbce64d4a59befd5565845d82e1cfbeb) C:\WINDOWS\system32\DRIVERS\amdk7.sys
12:57:41.0406 4428 AmdK7 - ok
12:57:41.0421 4428 amsint - ok
12:57:41.0484 4428 Arp1394 (b5b8a80875c1dededa8b02765642c32f) C:\WINDOWS\system32\DRIVERS\arp1394.sys
12:57:41.0484 4428 Arp1394 - ok
12:57:41.0515 4428 asc - ok
12:57:41.0546 4428 asc3350p - ok
12:57:41.0562 4428 asc3550 - ok
12:57:41.0640 4428 AsyncMac (b153affac761e7f5fcfa822b9c4e97bc) C:\WINDOWS\system32\DRIVERS\asyncmac.sys
12:57:41.0640 4428 AsyncMac - ok
12:57:41.0671 4428 atapi (9f3a2f5aa6875c72bf062c712cfa2674) C:\WINDOWS\system32\DRIVERS\atapi.sys
12:57:41.0671 4428 atapi - ok
12:57:41.0687 4428 Atdisk - ok
12:57:41.0734 4428 Atmarpc (9916c1225104ba14794209cfa8012159) C:\WINDOWS\system32\DRIVERS\atmarpc.sys
12:57:41.0734 4428 Atmarpc - ok
12:57:41.0843 4428 audstub (d9f724aa26c010a217c97606b160ed68) C:\WINDOWS\system32\DRIVERS\audstub.sys
12:57:41.0843 4428 audstub - ok
12:57:41.0906 4428 avgio (0b497c79824f8e1bf22fa6aacd3de3a0) C:\Archivos de programa\Avira\AntiVir Desktop\avgio.sys
12:57:41.0921 4428 avgio - ok
12:57:41.0968 4428 avgntflt (1e4114685de1ffa9675e09c6a1fb3f4b) C:\WINDOWS\system32\DRIVERS\avgntflt.sys
12:57:41.0968 4428 avgntflt - ok
12:57:42.0000 4428 avipbb (0f78d3dae6dedd99ae54c9491c62adf2) C:\WINDOWS\system32\DRIVERS\avipbb.sys
12:57:42.0000 4428 avipbb - ok
12:57:42.0031 4428 Beep (da1f27d85e0d1525f6621372e7b685e9) C:\WINDOWS\system32\drivers\Beep.sys
12:57:42.0031 4428 Beep - ok
12:57:42.0109 4428 catchme - ok
12:57:42.0140 4428 cbidf2k (90a673fc8e12a79afbed2576f6a7aaf9) C:\WINDOWS\system32\drivers\cbidf2k.sys
12:57:42.0140 4428 cbidf2k - ok
12:57:42.0171 4428 cd20xrnt - ok
12:57:42.0187 4428 Cdaudio (c1b486a7658353d33a10cc15211a873b) C:\WINDOWS\system32\drivers\Cdaudio.sys
12:57:42.0203 4428 Cdaudio - ok
12:57:42.0234 4428 Cdfs (c885b02847f5d2fd45a24e219ed93b32) C:\WINDOWS\system32\drivers\Cdfs.sys
12:57:42.0234 4428 Cdfs - ok
12:57:42.0343 4428 Cdrom (1f4260cc5b42272d71f79e570a27a4fe) C:\WINDOWS\system32\DRIVERS\cdrom.sys
12:57:42.0343 4428 Cdrom - ok
12:57:42.0375 4428 Changer - ok
12:57:42.0421 4428 CmdIde - ok
12:57:42.0484 4428 Cpqarray - ok
12:57:42.0531 4428 dac2w2k - ok
12:57:42.0546 4428 dac960nt - ok
12:57:42.0609 4428 Disk (044452051f3e02e7963599fc8f4f3e25) C:\WINDOWS\system32\DRIVERS\disk.sys
12:57:42.0609 4428 Disk - ok
12:57:42.0671 4428 dmboot (c252a99c0a78b39faa2e2d1d048b1050) C:\WINDOWS\system32\drivers\dmboot.sys
12:57:42.0687 4428 dmboot - ok
12:57:42.0750 4428 dmio (33b4d4039cd2cb25351a7bf13b2988d9) C:\WINDOWS\system32\drivers\dmio.sys
12:57:42.0765 4428 dmio - ok
12:57:42.0781 4428 dmload (e9317282a63ca4d188c0df5e09c6ac5f) C:\WINDOWS\system32\drivers\dmload.sys
12:57:42.0781 4428 dmload - ok
12:57:42.0828 4428 DMusic (8a208dfcf89792a484e76c40e5f50b45) C:\WINDOWS\system32\drivers\DMusic.sys
12:57:42.0843 4428 DMusic - ok
12:57:42.0890 4428 Dot4 (3e4b043f8bc6be1d4820cc6c9c500306) C:\WINDOWS\system32\DRIVERS\Dot4.sys
12:57:42.0890 4428 Dot4 - ok
12:57:42.0921 4428 Dot4Print (77ce63a8a34ae23d9fe4c7896d1debe7) C:\WINDOWS\system32\DRIVERS\Dot4Prt.sys
12:57:42.0921 4428 Dot4Print - ok
12:57:42.0953 4428 dot4usb (a2455d1ecb4c7312e95929997ff20d1b) C:\WINDOWS\system32\DRIVERS\dot4usb.sys
12:57:42.0953 4428 dot4usb - ok
12:57:42.0984 4428 dpti2o - ok
12:57:43.0031 4428 drmkaud (8f5fcff8e8848afac920905fbd9d33c8) C:\WINDOWS\system32\drivers\drmkaud.sys
12:57:43.0031 4428 drmkaud - ok
12:57:43.0109 4428 Fastfat (38d332a6d56af32635675f132548343e) C:\WINDOWS\system32\drivers\Fastfat.sys
12:57:43.0109 4428 Fastfat - ok
12:57:43.0203 4428 Fdc (92cdd60b6730b9f50f6a1a0c1f8cdc81) C:\WINDOWS\system32\drivers\Fdc.sys
12:57:43.0203 4428 Fdc - ok
12:57:43.0250 4428 Fips (e5e61f2c07344e91dbfb7eafde549ab4) C:\WINDOWS\system32\drivers\Fips.sys
12:57:43.0250 4428 Fips - ok
12:57:43.0281 4428 Flpydisk (9d27e7b80bfcdf1cdd9b555862d5e7f0) C:\WINDOWS\system32\drivers\Flpydisk.sys
12:57:43.0281 4428 Flpydisk - ok
12:57:43.0328 4428 FltMgr (b2cf4b0786f8212cb92ed2b50c6db6b0) C:\WINDOWS\system32\DRIVERS\fltMgr.sys
12:57:43.0328 4428 FltMgr - ok
12:57:43.0343 4428 Fs_Rec (3e1e2bd4f39b0e2b7dc4f4d2bcc2779a) C:\WINDOWS\system32\drivers\Fs_Rec.sys
12:57:43.0343 4428 Fs_Rec - ok
12:57:43.0375 4428 Ftdisk (cc5f3af5711a1c7c8fa1d43bb16b401a) C:\WINDOWS\system32\DRIVERS\ftdisk.sys
12:57:43.0375 4428 Ftdisk - ok
12:57:43.0406 4428 Gpc (0a02c63c8b144bd8c86b103dee7c86a2) C:\WINDOWS\system32\DRIVERS\msgpc.sys
12:57:43.0421 4428 Gpc - ok
12:57:43.0515 4428 hpn - ok
12:57:43.0546 4428 HPZid412 (30ca91e657cede2f95359d6ef186f650) C:\WINDOWS\system32\DRIVERS\HPZid412.sys
12:57:43.0546 4428 HPZid412 - ok
12:57:43.0578 4428 HPZipr12 (efd31afa752aa7c7bbb57bcbe2b01c78) C:\WINDOWS\system32\DRIVERS\HPZipr12.sys
12:57:43.0578 4428 HPZipr12 - ok
12:57:43.0625 4428 HPZius12 (7ac43c38ca8fd7ed0b0a4466f753e06e) C:\WINDOWS\system32\DRIVERS\HPZius12.sys
12:57:43.0625 4428 HPZius12 - ok
12:57:43.0656 4428 HTTP (f6aacf5bce2893e0c1754afeb672e5c9) C:\WINDOWS\system32\Drivers\HTTP.sys
12:57:43.0671 4428 HTTP - ok
12:57:43.0703 4428 i2omgmt - ok
12:57:43.0734 4428 i2omp - ok
12:57:43.0781 4428 i8042prt (4a2490a66e8271901e89dd5fb79748ae) C:\WINDOWS\system32\DRIVERS\i8042prt.sys
12:57:43.0781 4428 i8042prt - ok
12:57:43.0843 4428 imagedrv (0a7c49b48c772591a2d362daa00246c8) C:\WINDOWS\system32\Drivers\imagedrv.sys
12:57:43.0843 4428 imagedrv - ok
12:57:43.0906 4428 imagesrv (549ba4f539e7b8d8129500b96dd7b27a) C:\WINDOWS\system32\DRIVERS\imagesrv.sys
12:57:43.0906 4428 imagesrv - ok
12:57:43.0953 4428 Imapi (083a052659f5310dd8b6a6cb05edcf8e) C:\WINDOWS\system32\DRIVERS\imapi.sys
12:57:43.0953 4428 Imapi - ok
12:57:43.0984 4428 ini910u - ok
12:57:44.0031 4428 IntelIde - ok
12:57:44.0078 4428 Ip6Fw (3bb22519a194418d5fec05d800a19ad0) C:\WINDOWS\system32\DRIVERS\Ip6Fw.sys
12:57:44.0078 4428 Ip6Fw - ok
12:57:44.0125 4428 IpFilterDriver (731f22ba402ee4b62748adaf6363c182) C:\WINDOWS\system32\DRIVERS\ipfltdrv.sys
12:57:44.0125 4428 IpFilterDriver - ok
12:57:44.0171 4428 IpInIp (b87ab476dcf76e72010632b5550955f5) C:\WINDOWS\system32\DRIVERS\ipinip.sys
12:57:44.0171 4428 IpInIp - ok
12:57:44.0203 4428 IpNat (cc748ea12c6effde940ee98098bf96bb) C:\WINDOWS\system32\DRIVERS\ipnat.sys
12:57:44.0203 4428 IpNat - ok
12:57:44.0234 4428 IPSec (23c74d75e36e7158768dd63d92789a91) C:\WINDOWS\system32\DRIVERS\ipsec.sys
12:57:44.0234 4428 IPSec - ok
12:57:44.0281 4428 IRENUM (c93c9ff7b04d772627a3646d89f7bf89) C:\WINDOWS\system32\DRIVERS\irenum.sys
12:57:44.0281 4428 IRENUM - ok
12:57:44.0328 4428 isapnp (0f3d281b0410fe5d482aada37d20524b) C:\WINDOWS\system32\DRIVERS\isapnp.sys
12:57:44.0328 4428 isapnp - ok
12:57:44.0375 4428 ISODrive (bf71a06ff065e3fd7e32ea67dca34885) C:\Archivos de programa\UltraISO\drivers\ISODrive.sys
12:57:44.0375 4428 ISODrive - ok
12:57:44.0453 4428 Kbdclass (188ddd286bc0daea6984858c6a4d7bbf) C:\WINDOWS\system32\DRIVERS\kbdclass.sys
12:57:44.0453 4428 Kbdclass - ok
12:57:44.0546 4428 kmixer (692bcf44383d056aed41b045a323d378) C:\WINDOWS\system32\drivers\kmixer.sys
12:57:44.0546 4428 kmixer - ok
12:57:44.0578 4428 KSecDD (1705745d900dabf2d89f90ebaddc7517) C:\WINDOWS\system32\drivers\KSecDD.sys
12:57:44.0578 4428 KSecDD - ok
12:57:44.0609 4428 lbrtfdc - ok
12:57:44.0671 4428 MBAMSwissArmy - ok
12:57:44.0734 4428 mnmdd (4ae068242760a1fb6e1a44bf4e16afa6) C:\WINDOWS\system32\drivers\mnmdd.sys
12:57:44.0734 4428 mnmdd - ok
12:57:44.0781 4428 Modem (9024556e739b8469d2b8f5f0e4c9bc9f) C:\WINDOWS\system32\drivers\Modem.sys
12:57:44.0781 4428 Modem - ok
12:57:44.0828 4428 Mouclass (6fd36b4994a2363659a65c9f970cfdb7) C:\WINDOWS\system32\DRIVERS\mouclass.sys
12:57:44.0828 4428 Mouclass - ok
12:57:44.0859 4428 MountMgr (a80b9a0bad1b73637dbcbba7df72d3fd) C:\WINDOWS\system32\drivers\MountMgr.sys
12:57:44.0859 4428 MountMgr - ok
12:57:44.0875 4428 mraid35x - ok
12:57:44.0921 4428 MRxDAV (11d42bb6206f33fbb3ba0288d3ef81bd) C:\WINDOWS\system32\DRIVERS\mrxdav.sys
12:57:44.0921 4428 MRxDAV - ok
12:57:44.0968 4428 MRxSmb (68755f0ff16070178b54674fe5b847b0) C:\WINDOWS\system32\DRIVERS\mrxsmb.sys
12:57:44.0984 4428 MRxSmb - ok
12:57:45.0031 4428 Msfs (c941ea2454ba8350021d774daf0f1027) C:\WINDOWS\system32\drivers\Msfs.sys
12:57:45.0031 4428 Msfs - ok
12:57:45.0078 4428 MSKSSRV (d1575e71568f4d9e14ca56b7b0453bf1) C:\WINDOWS\system32\drivers\MSKSSRV.sys
12:57:45.0078 4428 MSKSSRV - ok
12:57:45.0125 4428 MSPCLOCK (325bb26842fc7ccc1fcce2c457317f3e) C:\WINDOWS\system32\drivers\MSPCLOCK.sys
12:57:45.0125 4428 MSPCLOCK - ok
12:57:45.0156 4428 MSPQM (bad59648ba099da4a17680b39730cb3d) C:\WINDOWS\system32\drivers\MSPQM.sys
12:57:45.0156 4428 MSPQM - ok
12:57:45.0187 4428 mssmbios (af5f4f3f14a8ea2c26de30f7a1e17136) C:\WINDOWS\system32\DRIVERS\mssmbios.sys
12:57:45.0187 4428 mssmbios - ok
12:57:45.0234 4428 Mup (2f625d11385b1a94360bfc70aaefdee1) C:\WINDOWS\system32\drivers\Mup.sys
12:57:45.0234 4428 Mup - ok
12:57:45.0281 4428 NDIS (1df7f42665c94b825322fae71721130d) C:\WINDOWS\system32\drivers\NDIS.sys
12:57:45.0296 4428 NDIS - ok
12:57:45.0375 4428 NdisTapi (1ab3d00c991ab086e69db84b6c0ed78f) C:\WINDOWS\system32\DRIVERS\ndistapi.sys
12:57:45.0375 4428 NdisTapi - ok
12:57:45.0406 4428 Ndisuio (f927a4434c5028758a842943ef1a3849) C:\WINDOWS\system32\DRIVERS\ndisuio.sys
12:57:45.0406 4428 Ndisuio - ok
12:57:45.0437 4428 NdisWan (edc1531a49c80614b2cfda43ca8659ab) C:\WINDOWS\system32\DRIVERS\ndiswan.sys
12:57:45.0453 4428 NdisWan - ok
12:57:45.0468 4428 NDProxy (6215023940cfd3702b46abc304e1d45a) C:\WINDOWS\system32\drivers\NDProxy.sys
12:57:45.0484 4428 NDProxy - ok
12:57:45.0515 4428 NetBIOS (5d81cf9a2f1a3a756b66cf684911cdf0) C:\WINDOWS\system32\DRIVERS\netbios.sys
12:57:45.0515 4428 NetBIOS - ok
12:57:45.0546 4428 NetBT (74b2b2f5bea5e9a3dc021d685551bd3d) C:\WINDOWS\system32\DRIVERS\netbt.sys
12:57:45.0546 4428 NetBT - ok
12:57:45.0671 4428 NIC1394 (e9e47cfb2d461fa0fc75b7a74c6383ea) C:\WINDOWS\system32\DRIVERS\nic1394.sys
12:57:45.0671 4428 NIC1394 - ok
12:57:45.0703 4428 Npfs (3182d64ae053d6fb034f44b6def8034a) C:\WINDOWS\system32\drivers\Npfs.sys
12:57:45.0703 4428 Npfs - ok
12:57:45.0750 4428 Ntfs (78a08dd6a8d65e697c18e1db01c5cdca) C:\WINDOWS\system32\drivers\Ntfs.sys
12:57:45.0765 4428 Ntfs - ok
12:57:45.0828 4428 Null (73c1e1f395918bc2c6dd67af7591a3ad) C:\WINDOWS\system32\drivers\Null.sys
12:57:45.0828 4428 Null - ok
12:57:45.0984 4428 nv (29b9163a6d9c486dcaefed190130acb0) C:\WINDOWS\system32\DRIVERS\nv4_mini.sys
12:57:46.0078 4428 nv - ok
12:57:46.0187 4428 nvax (fb8595ef3ceb81f0da3f6f211b2df932) C:\WINDOWS\system32\drivers\nvax.sys
12:57:46.0187 4428 nvax - ok
12:57:46.0218 4428 NVENETFD (23297b3c2ff3510e2e760714fc6f094e) C:\WINDOWS\system32\DRIVERS\NVENETFD.sys
12:57:46.0218 4428 NVENETFD - ok
12:57:46.0250 4428 nvnetbus (bcc3722a2db99ad6f367344997c26654) C:\WINDOWS\system32\DRIVERS\nvnetbus.sys
12:57:46.0250 4428 nvnetbus - ok
12:57:46.0296 4428 nvnforce (d2315cd3053fc3b4250dc2dbd0ac49e4) C:\WINDOWS\system32\drivers\nvapu.sys
12:57:46.0312 4428 nvnforce - ok
12:57:46.0375 4428 NwlnkFlt (b305f3fad35083837ef46a0bbce2fc57) C:\WINDOWS\system32\DRIVERS\nwlnkflt.sys
12:57:46.0375 4428 NwlnkFlt - ok
12:57:46.0421 4428 NwlnkFwd (c99b3415198d1aab7227f2c88fd664b9) C:\WINDOWS\system32\DRIVERS\nwlnkfwd.sys
12:57:46.0421 4428 NwlnkFwd - ok
12:57:46.0453 4428 NwlnkIpx (8b8b1be2dba4025da6786c645f77f123) C:\WINDOWS\system32\DRIVERS\nwlnkipx.sys
12:57:46.0468 4428 NwlnkIpx - ok
12:57:46.0484 4428 NwlnkNb (56d34a67c05e94e16377c60609741ff8) C:\WINDOWS\system32\DRIVERS\nwlnknb.sys
12:57:46.0484 4428 NwlnkNb - ok
12:57:46.0500 4428 NwlnkSpx (c0bb7d1615e1acbdc99757f6ceaf8cf0) C:\WINDOWS\system32\DRIVERS\nwlnkspx.sys
12:57:46.0500 4428 NwlnkSpx - ok
12:57:46.0562 4428 ohci1394 (ca33832df41afb202ee7aeb05145922f) C:\WINDOWS\system32\DRIVERS\ohci1394.sys
12:57:46.0562 4428 ohci1394 - ok
12:57:46.0609 4428 Parport (e7855cbd8bd1fda085a3f92cff7906e2) C:\WINDOWS\system32\drivers\Parport.sys
12:57:46.0609 4428 Parport - ok
12:57:46.0718 4428 PartMgr (beb3ba25197665d82ec7065b724171c6) C:\WINDOWS\system32\drivers\PartMgr.sys
12:57:46.0718 4428 PartMgr - ok
12:57:46.0765 4428 ParVdm (fad44d704ecd7d39ad01415b8bb34204) C:\WINDOWS\system32\drivers\ParVdm.sys
12:57:46.0765 4428 ParVdm - ok
12:57:46.0796 4428 PCI (f11bc84ae6c7b003b5e0c8eeb4a1f444) C:\WINDOWS\system32\DRIVERS\pci.sys
12:57:46.0796 4428 PCI - ok
12:57:46.0812 4428 PCIDump - ok
12:57:46.0859 4428 PCIIde (33d63f0a9021acb4d75d83b646b93a30) C:\WINDOWS\system32\DRIVERS\pciide.sys
12:57:46.0859 4428 PCIIde - ok
12:57:46.0875 4428 Pcmcia (f50c27cca56dc97b3a45e7f0059bd2ba) C:\WINDOWS\system32\drivers\Pcmcia.sys
12:57:46.0875 4428 Pcmcia - ok
12:57:46.0921 4428 pcouffin (5b6c11de7e839c05248ced8825470fef) C:\WINDOWS\system32\Drivers\pcouffin.sys
12:57:46.0921 4428 pcouffin - ok
12:57:46.0937 4428 PDCOMP - ok
12:57:46.0968 4428 PDFRAME - ok
12:57:46.0984 4428 PDRELI - ok
12:57:47.0015 4428 PDRFRAME - ok
12:57:47.0046 4428 perc2 - ok
12:57:47.0078 4428 perc2hib - ok
12:57:47.0171 4428 PptpMiniport (efeec01b1d3cf84f16ddd24d9d9d8f99) C:\WINDOWS\system32\DRIVERS\raspptp.sys
12:57:47.0171 4428 PptpMiniport - ok
12:57:47.0203 4428 PSched (09298ec810b07e5d582cb3a3f9255424) C:\WINDOWS\system32\DRIVERS\psched.sys
12:57:47.0218 4428 PSched - ok
12:57:47.0250 4428 Ptilink (80d317bd1c3dbc5d4fe7b1678c60cadd) C:\WINDOWS\system32\DRIVERS\ptilink.sys
12:57:47.0250 4428 Ptilink - ok
12:57:47.0296 4428 PxHelp20 (e42e3433dbb4cffe8fdd91eab29aea8e) C:\WINDOWS\system32\Drivers\PxHelp20.sys
12:57:47.0312 4428 PxHelp20 - ok
12:57:47.0343 4428 ql1080 - ok
12:57:47.0359 4428 Ql10wnt - ok
12:57:47.0390 4428 ql12160 - ok
12:57:47.0406 4428 ql1240 - ok
12:57:47.0437 4428 ql1280 - ok
12:57:47.0468 4428 RasAcd (fe0d99d6f31e4fad8159f690d68ded9c) C:\WINDOWS\system32\DRIVERS\rasacd.sys
12:57:47.0468 4428 RasAcd - ok
12:57:47.0500 4428 Rasl2tp (11b4a627bc9614b885c4969bfa5ff8a6) C:\WINDOWS\system32\DRIVERS\rasl2tp.sys
12:57:47.0500 4428 Rasl2tp - ok
12:57:47.0546 4428 RasPppoe (5bc962f2654137c9909c3d4603587dee) C:\WINDOWS\system32\DRIVERS\raspppoe.sys
12:57:47.0546 4428 RasPppoe - ok
12:57:47.0578 4428 Raspti (fdbb1d60066fcfbb7452fd8f9829b242) C:\WINDOWS\system32\DRIVERS\raspti.sys
12:57:47.0593 4428 Raspti - ok
12:57:47.0625 4428 Rdbss (7ad224ad1a1437fe28d89cf22b17780a) C:\WINDOWS\system32\DRIVERS\rdbss.sys
12:57:47.0640 4428 Rdbss - ok
12:57:47.0656 4428 RDPCDD (4912d5b403614ce99c28420f75353332) C:\WINDOWS\system32\DRIVERS\RDPCDD.sys
12:57:47.0656 4428 RDPCDD - ok
12:57:47.0718 4428 rdpdr (15cabd0f7c00c47c70124907916af3f1) C:\WINDOWS\system32\DRIVERS\rdpdr.sys
12:57:47.0718 4428 rdpdr - ok
12:57:47.0781 4428 RDPWD (6728e45b66f93c08f11de2e316fc70dd) C:\WINDOWS\system32\drivers\RDPWD.sys
12:57:47.0781 4428 RDPWD - ok
12:57:47.0859 4428 redbook (20950948970a0ea329b4254052bcf093) C:\WINDOWS\system32\DRIVERS\redbook.sys
12:57:47.0859 4428 redbook - ok
12:57:47.0984 4428 Secdrv (90a3935d05b494a5a39d37e71f09a677) C:\WINDOWS\system32\DRIVERS\secdrv.sys
12:57:47.0984 4428 Secdrv - ok
12:57:48.0062 4428 Serial (f41b42b92ae9c1191858c3f80cc24a9c) C:\WINDOWS\system32\drivers\Serial.sys
12:57:48.0062 4428 Serial - ok
12:57:48.0109 4428 Sfloppy (8e6b8c671615d126fdc553d1e2de5562) C:\WINDOWS\system32\drivers\Sfloppy.sys
12:57:48.0109 4428 Sfloppy - ok
12:57:48.0156 4428 Simbad - ok
12:57:48.0203 4428 Sparrow - ok
12:57:48.0234 4428 splitter (ab8b92451ecb048a4d1de7c3ffcb4a9f) C:\WINDOWS\system32\drivers\splitter.sys
12:57:48.0234 4428 splitter - ok
12:57:48.0296 4428 sr (ccb3065c3ee63a4515fe84af9e78d1dd) C:\WINDOWS\system32\DRIVERS\sr.sys
12:57:48.0296 4428 sr - ok
12:57:48.0328 4428 Srv (5252605079810904e31c332e241cd59b) C:\WINDOWS\system32\DRIVERS\srv.sys
12:57:48.0343 4428 Srv - ok
12:57:48.0406 4428 ssmdrv (a36ee93698802cd899f98bfd553d8185) C:\WINDOWS\system32\DRIVERS\ssmdrv.sys
12:57:48.0406 4428 ssmdrv - ok
12:57:48.0437 4428 swenum (3941d127aef12e93addf6fe6ee027e0f) C:\WINDOWS\system32\DRIVERS\swenum.sys
12:57:48.0437 4428 swenum - ok
12:57:48.0468 4428 swmidi (8ce882bcc6cf8a62f2b2323d95cb3d01) C:\WINDOWS\system32\drivers\swmidi.sys
12:57:48.0468 4428 swmidi - ok
12:57:48.0500 4428 symc810 - ok
12:57:48.0531 4428 symc8xx - ok
12:57:48.0562 4428 sym_hi - ok
12:57:48.0578 4428 sym_u3 - ok
12:57:48.0625 4428 sysaudio (8b83f3ed0f1688b4958f77cd6d2bf290) C:\WINDOWS\system32\drivers\sysaudio.sys
12:57:48.0640 4428 sysaudio - ok
12:57:48.0718 4428 Tcpip (93ea8d04ec73a85db02eb8805988f733) C:\WINDOWS\system32\DRIVERS\tcpip.sys
12:57:48.0734 4428 Tcpip - ok
12:57:48.0812 4428 TDPIPE (6471a66807f5e104e4885f5b67349397) C:\WINDOWS\system32\drivers\TDPIPE.sys
12:57:48.0812 4428 TDPIPE - ok
12:57:48.0859 4428 TDTCP (c56b6d0402371cf3700eb322ef3aaf61) C:\WINDOWS\system32\drivers\TDTCP.sys
12:57:48.0859 4428 TDTCP - ok
12:57:48.0906 4428 TermDD (88155247177638048422893737429d9e) C:\WINDOWS\system32\DRIVERS\termdd.sys
12:57:48.0906 4428 TermDD - ok
12:57:48.0984 4428 TosIde - ok
12:57:49.0046 4428 Udfs (5787b80c2e3c5e2f56c2a233d91fa2c9) C:\WINDOWS\system32\drivers\Udfs.sys
12:57:49.0046 4428 Udfs - ok
12:57:49.0078 4428 ultra - ok
12:57:49.0109 4428 Update (402ddc88356b1bac0ee3dd1580c76a31) C:\WINDOWS\system32\DRIVERS\update.sys
12:57:49.0125 4428 Update - ok
12:57:49.0203 4428 usbccgp (173f317ce0db8e21322e71b7e60a27e8) C:\WINDOWS\system32\DRIVERS\usbccgp.sys
12:57:49.0203 4428 usbccgp - ok
12:57:49.0250 4428 usbehci (65dcf09d0e37d4c6b11b5b0b76d470a7) C:\WINDOWS\system32\DRIVERS\usbehci.sys
12:57:49.0250 4428 usbehci - ok
12:57:49.0296 4428 usbhub (1ab3cdde553b6e064d2e754efe20285c) C:\WINDOWS\system32\DRIVERS\usbhub.sys
12:57:49.0296 4428 usbhub - ok
12:57:49.0328 4428 usbohci (0daecce65366ea32b162f85f07c6753b) C:\WINDOWS\system32\DRIVERS\usbohci.sys
12:57:49.0328 4428 usbohci - ok
12:57:49.0359 4428 usbprint (a717c8721046828520c9edf31288fc00) C:\WINDOWS\system32\DRIVERS\usbprint.sys
12:57:49.0359 4428 usbprint - ok
12:57:49.0453 4428 usbscan (a0b8cf9deb1184fbdd20784a58fa75d4) C:\WINDOWS\system32\DRIVERS\usbscan.sys
12:57:49.0453 4428 usbscan - ok
12:57:49.0500 4428 USBSTOR (a32426d9b14a089eaa1d922e0c5801a9) C:\WINDOWS\system32\DRIVERS\USBSTOR.SYS
12:57:49.0500 4428 USBSTOR - ok
12:57:49.0562 4428 VgaSave (0d3a8fafceacd8b7625cd549757a7df1) C:\WINDOWS\System32\drivers\vga.sys
12:57:49.0562 4428 VgaSave - ok
12:57:49.0593 4428 ViaIde - ok
12:57:49.0625 4428 VolSnap (c41ffdc191e6c832e2e53c967eae0a16) C:\WINDOWS\system32\drivers\VolSnap.sys
12:57:49.0625 4428 VolSnap - ok
12:57:49.0671 4428 Wanarp (e20b95baedb550f32dd489265c1da1f6) C:\WINDOWS\system32\DRIVERS\wanarp.sys
12:57:49.0687 4428 Wanarp - ok
12:57:49.0703 4428 WDICA - ok
12:57:49.0750 4428 wdmaud (6768acf64b18196494413695f0c3a00f) C:\WINDOWS\system32\drivers\wdmaud.sys
12:57:49.0750 4428 wdmaud - ok
12:57:49.0968 4428 MBR (0x1B8) (792f61657fece3d17a9122b4ee282847) \Device\Harddisk0\DR0
12:57:50.0062 4428 \Device\Harddisk0\DR0 - ok
12:57:50.0078 4428 Boot (0x1200) (4486196e5b1ef5f9b9310a53c30020cd) \Device\Harddisk0\DR0\Partition0
12:57:50.0078 4428 \Device\Harddisk0\DR0\Partition0 - ok
12:57:50.0109 4428 Boot (0x1200) (1cc168748652123571e4a9d9104e472a) \Device\Harddisk0\DR0\Partition1
12:57:50.0109 4428 \Device\Harddisk0\DR0\Partition1 - ok
12:57:50.0109 4428 ============================================================
12:57:50.0109 4428 Scan finished
12:57:50.0109 4428 ============================================================
12:57:50.0140 4420 Detected object count: 0
12:57:50.0140 4420 Actual detected object count: 0
12:58:47.0234 4288 Deinitialize success



aswMBR Log


aswMBR version 0.9.8.986 Copyright© 2011 AVAST Software
Run date: 2011-12-08 13:00:11
-----------------------------
13:00:11.921 OS Version: Windows 5.1.2600 Service Pack 3
13:00:11.921 Number of processors: 1 586 0x801
13:00:11.921 ComputerName: XV-01 UserName:
13:00:12.078 Initialize success
13:05:35.937 AVAST engine defs: 11120800
13:10:57.000 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP2T0L0-5
13:10:57.000 Disk 0 Vendor: WDC_WD800JD-00JNA0 05.01C05 Size: 76319MB BusType: 3
13:10:59.031 Disk 0 MBR read successfully
13:10:59.031 Disk 0 MBR scan
13:10:59.484 Disk 0 Windows XP default MBR code
13:10:59.500 Disk 0 scanning sectors +156296385
13:11:00.171 Disk 0 scanning C:\WINDOWS\system32\drivers
13:11:11.250 Service scanning
13:11:13.031 Modules scanning
13:11:16.984 AVAST engine scan C:\WINDOWS
13:11:20.578 AVAST engine scan C:\WINDOWS\system32
13:13:04.750 AVAST engine scan C:\WINDOWS\system32\drivers
13:13:14.093 AVAST engine scan C:\Documents and Settings\Administrador
13:14:19.953 AVAST engine scan C:\Documents and Settings\All Users
13:14:34.859 Scan finished successfully
13:50:53.843 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Administrador\Escritorio\MBR.dat"
13:50:53.843 The log file has been saved successfully to "C:\Documents and Settings\Administrador\Escritorio\aswMBRlog.txt"


OTL LOg

OTL logfile created on: 08/12/2011 13:51:53 - Run 2
OTL by OldTimer - Version 3.2.31.0 Folder = C:\Documents and Settings\Administrador\Escritorio
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

223,48 Mb Total Physical Memory | 87,60 Mb Available Physical Memory | 39,20% Memory free
624,33 Mb Paging File | 309,03 Mb Available in Paging File | 49,50% Paging File free
Paging file location(s): C:\pagefile.sys 336 672 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 15,00 Gb Total Space | 5,00 Gb Free Space | 33,35% Space Free | Partition Type: NTFS
Drive D: | 4,28 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: CDFS
Drive E: | 59,53 Gb Total Space | 2,86 Gb Free Space | 4,80% Space Free | Partition Type: NTFS

Computer Name: XV-01 | User Name: Administrador | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Quick Scan
Company Name Whitelist: On | Skip Microsoft Files: On | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/12/04 13:06:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
PRC - [2011/09/02 16:03:31 | 000,269,480 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
PRC - [2011/06/09 13:06:06 | 000,254,696 | ---- | M] (Sun Microsystems, Inc.) -- C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
PRC - [2011/06/09 06:35:30 | 000,136,360 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
PRC - [2011/03/21 14:56:16 | 001,230,704 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe
PRC - [2010/08/17 13:38:24 | 000,281,768 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe
PRC - [2010/01/14 22:11:07 | 000,076,968 | ---- | M] (Avira GmbH) -- C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe
PRC - [2008/04/14 08:00:00 | 001,036,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
PRC - [2004/12/20 17:12:36 | 000,131,072 | ---- | M] (NVIDIA Corporation) -- C:\Archivos de programa\NVIDIA Corporation\NvMixer\NvMixerTray.exe
PRC - [2002/12/16 16:51:24 | 000,036,864 | ---- | M] (Hewlett-Packard) -- C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
PRC - [2002/04/17 10:49:16 | 000,077,824 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
PRC - [2002/04/17 10:42:56 | 000,069,632 | ---- | M] (Hewlett-Packard) -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe


========== Modules (No Company Name) ==========

MOD - [2011/03/21 14:57:34 | 000,096,112 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdateCheck.dll
MOD - [2011/03/21 14:56:16 | 001,230,704 | ---- | M] () -- C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe
MOD - [2010/06/17 15:27:42 | 000,355,688 | ---- | M] () -- C:\Archivos de programa\Avira\AntiVir Desktop\sqlite3.dll
MOD - [2009/04/26 23:15:42 | 000,139,776 | ---- | M] () -- C:\Archivos de programa\WinRAR\RarExt.dll
MOD - [2009/02/27 19:35:50 | 000,311,296 | ---- | M] () -- C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\pdfshell.ESP
MOD - [2006/03/09 15:29:00 | 000,466,944 | ---- | M] () -- C:\WINDOWS\system32\nvshell.dll
MOD - [2003/08/29 05:23:33 | 000,094,274 | ---- | M] () -- C:\WINDOWS\system32\HPBHEALR.DLL
MOD - [2002/04/17 10:49:22 | 000,024,576 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnfps.dll
MOD - [2002/04/17 10:49:16 | 000,077,824 | ---- | M] () -- C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe


========== Win32 Services (SafeList) ==========

SRV - File not found [Disabled | Stopped] -- -- (HidServ)
SRV - [2011/09/02 16:03:31 | 000,269,480 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe -- (AntiVirService)
SRV - [2011/06/09 06:35:30 | 000,136,360 | ---- | M] (Avira GmbH) [Auto | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe -- (AntiVirSchedulerService)
SRV - [2006/10/26 19:49:34 | 000,441,136 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\ODSERV.EXE -- (odserv)
SRV - [2006/10/26 14:03:08 | 000,145,184 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE -- (ose)
SRV - [2005/11/14 01:06:04 | 000,069,632 | ---- | M] (Macrovision Corporation) [On_Demand | Stopped] -- C:\Archivos de programa\Archivos comunes\InstallShield\Driver\1150\Intel 32\IDriverT.exe -- (IDriverT)
SRV - [2005/03/14 12:05:02 | 000,069,632 | ---- | M] (HP) [On_Demand | Stopped] -- C:\WINDOWS\system32\HPZipm12.exe -- (Pml Driver HPZ12)


========== Driver Services (SafeList) ==========

DRV - [2011/09/02 16:03:37 | 000,138,192 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\avipbb.sys -- (avipbb)
DRV - [2011/09/02 16:03:37 | 000,066,616 | ---- | M] (Avira GmbH) [File_System | Auto | Running] -- C:\WINDOWS\system32\drivers\avgntflt.sys -- (avgntflt)
DRV - [2011/06/13 12:36:53 | 000,082,380 | ---- | M] (Oak Technology Inc.) [Kernel | System | Running] -- C:\WINDOWS\System32\drivers\AFS2K.SYS -- (AFS2K)
DRV - [2010/06/17 15:27:42 | 000,028,520 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\WINDOWS\system32\drivers\ssmdrv.sys -- (ssmdrv)
DRV - [2010/06/17 15:27:32 | 000,011,608 | ---- | M] (Avira GmbH) [Kernel | System | Running] -- C:\Archivos de programa\Avira\AntiVir Desktop\avgio.sys -- (avgio)
DRV - [2008/05/24 21:09:10 | 000,073,728 | ---- | M] (EZB Systems, Inc.) [File_System | System | Running] -- C:\Archivos de programa\UltraISO\drivers\ISODrive.sys -- (ISODrive)
DRV - [2008/04/14 08:00:00 | 000,088,320 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkipx.sys -- (NwlnkIpx)
DRV - [2008/04/14 08:00:00 | 000,063,232 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnknb.sys -- (NwlnkNb)
DRV - [2008/04/14 08:00:00 | 000,055,936 | ---- | M] (Microsoft Corporation) [Kernel | Auto | Running] -- C:\WINDOWS\system32\drivers\nwlnkspx.sys -- (NwlnkSpx)
DRV - [2005/04/13 12:34:02 | 000,414,464 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvapu.sys -- (nvnforce) Service for NVIDIA® nForce™
DRV - [2005/04/13 12:32:42 | 000,053,376 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvax.sys -- (nvax) Service for NVIDIA® nForce™
DRV - [2004/05/17 14:00:54 | 000,012,928 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\nvnetbus.sys -- (nvnetbus)
DRV - [2004/05/17 14:00:52 | 000,033,280 | ---- | M] (NVIDIA Corporation) [Kernel | On_Demand | Running] -- C:\WINDOWS\system32\drivers\NVENETFD.sys -- (NVENETFD)
DRV - [2004/03/02 16:37:50 | 000,125,184 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\system32\DRIVERS\imagesrv.sys -- (imagesrv)
DRV - [2004/03/02 16:37:48 | 000,005,504 | ---- | M] (Ahead Software AG) [Kernel | Boot | Running] -- C:\WINDOWS\System32\Drivers\imagedrv.sys -- (imagedrv)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>

========== FireFox ==========

FF - prefs.js..browser.search.defaultenginename: "Yahoo"
FF - prefs.js..browser.search.defaulturl: "http://search.yahoo....-8&fr=ytff-&p="
FF - prefs.js..browser.search.param.yahoo-fr: "moz2-ytff-"
FF - prefs.js..browser.search.param.yahoo-fr-cjkt: "moz2-ytff-"
FF - prefs.js..browser.search.selectedEngine: "Google"
FF - prefs.js..browser.startup.homepage: "http://www.yahoo.com/"
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}:6.0.22
FF - prefs.js..extensions.enabledItems: [email protected]:1.0
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}:6.0.23
FF - prefs.js..extensions.enabledItems: {CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}:6.0.26
FF - prefs.js..keyword.URL: "http://search.yahoo....-8&fr=ytff-&p="


FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@adobe.com/ShockwavePlayer: C:\WINDOWS\system32\Adobe\Director\np32dsw.dll (Adobe Systems, Inc.)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX Browser Plugin,version=1.0.0: C:\Archivos de programa\DivX\DivX Plus Web Player\npdivx32.dll (DivX, LLC)
FF - HKLM\Software\MozillaPlugins\@divx.com/DivX VOD Helper,version=1.0.0: C:\Archivos de programa\DivX\DivX OVS Helper\npovshelper.dll (DivX, LLC.)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Archivos de programa\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Archivos de programa\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Archivos de programa\Google\Update\1.3.21.79\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=1.1.11: C:\Archivos de programa\VideoLAN\VLC\npvlc.dll (the VideoLAN Team)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\extensions\\{23fcfd51-4958-4f00-80a3-ae97e717ed8b}: C:\Archivos de programa\DivX\DivX Plus Web Player\firefox\DivXHTML5 [2011/06/25 01:50:51 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\K-Meleon\Extensions\\Plugins: C:\Archivos de programa\K-Meleon\Plugins [2011/07/31 08:48:11 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\K-Meleon\Extensions\\Components: C:\Archivos de programa\K-Meleon\Components [2011/07/31 08:49:20 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2011/06/25 20:47:57 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 5.0\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins [2011/06/13 09:15:29 | 000,000,000 | ---D | M]

[2010/11/19 20:35:43 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Extensions
[2011/12/08 07:18:24 | 000,000,000 | ---D | M] (No name found) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\mj2vyhmm.default\extensions
[2011/12/08 07:18:24 | 000,000,000 | ---D | M] (Yahoo! Toolbar) -- C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\mj2vyhmm.default\extensions\{635abd67-4fe9-1b23-4f01-e679fa7484c1}
[2011/11/14 13:21:12 | 000,000,000 | ---D | M] (No name found) -- C:\Archivos de programa\Mozilla Firefox\extensions
[2010/12/27 19:58:08 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0022-ABCDEFFEDCBA}
[2011/01/07 09:39:30 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0023-ABCDEFFEDCBA}
[2011/06/09 06:44:06 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0026-ABCDEFFEDCBA}
[2011/11/14 13:21:14 | 000,000,000 | ---D | M] (Java Console) -- C:\Archivos de programa\Mozilla Firefox\extensions\{CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA}
[2010/12/27 19:57:46 | 000,000,000 | ---D | M] (Java Quick Starter) -- C:\ARCHIVOS DE PROGRAMA\JAVA\JRE6\LIB\DEPLOY\JQS\FF
() (No name found) -- C:\DOCUMENTS AND SETTINGS\ADMINISTRADOR\DATOS DE PROGRAMA\MOZILLA\FIREFOX\PROFILES\MJ2VYHMM.DEFAULT\EXTENSIONS\{A3A5C777-F583-4FEF-9380-AB4ADD1BC2A8}.XPI
[2011/06/25 20:47:53 | 000,142,296 | ---- | M] (Mozilla Foundation) -- C:\Archivos de programa\mozilla firefox\components\browsercomps.dll
[2011/10/03 05:06:04 | 000,476,904 | ---- | M] (Sun Microsystems, Inc.) -- C:\Archivos de programa\mozilla firefox\plugins\npdeployJava1.dll
[2011/06/13 09:15:20 | 000,002,252 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\bing.xml
[2011/06/13 09:15:20 | 000,003,996 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\drae.xml
[2011/06/13 09:15:20 | 000,001,143 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\eBay-es.xml
[2011/06/13 09:15:20 | 000,001,178 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\wikipedia-es.xml
[2011/06/13 09:15:20 | 000,001,102 | ---- | M] () -- C:\Archivos de programa\mozilla firefox\searchplugins\yahoo-es.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Shockwave Flash (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\WINDOWS\system32\Macromed\Flash\NPSWF32.dll
CHR - plugin: Java Deployment Toolkit 6.0.260.3 (Enabled) = C:\Archivos de programa\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U26 (Enabled) = C:\Archivos de programa\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Adobe Acrobat (Disabled) = C:\Archivos de programa\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Shockwave for Director (Enabled) = C:\WINDOWS\system32\Adobe\Director\np32dsw.dll
CHR - plugin: DivX Web Player (Enabled) = C:\Archivos de programa\DivX\DivX Plus Web Player\npdivx32.dll
CHR - plugin: Windows Media Player Plug-in Dynamic Link Library (Enabled) = C:\Archivos de programa\Windows Media Player\npdsplay.dll
CHR - plugin: 2007 Microsoft Office system (Enabled) = C:\Archivos de programa\Mozilla Firefox\plugins\NPOFF12.DLL
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Archivos de programa\Google\Chrome\Application\15.0.874.121\pdf.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Archivos de programa\Windows Media Player\npdrmv2.dll
CHR - plugin: Microsoft\u00AE DRM (Enabled) = C:\Archivos de programa\Windows Media Player\npwmsdrm.dll
CHR - plugin: DivX VOD Helper Plug-in (Enabled) = C:\Archivos de programa\DivX\DivX OVS Helper\npovshelper.dll
CHR - plugin: Google Update (Enabled) = C:\Archivos de programa\Google\Update\1.3.21.69\npGoogleUpdate3.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: \u003Cvideo\u003E de HTML5 de DivX Plus Web Player = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\nneajnkjbffgblleaoojgaacokifdkhm\2.1.2.126_0\
CHR - Extension: Cuevana Stream = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\ooagbcohbmlpkfkdnodbomgphbcecalj\3.0_0\
CHR - Extension: Cuevana Stream = C:\Documents and Settings\Administrador\Configuración local\Datos de programa\Google\Chrome\User Data\Default\Extensions\ooagbcohbmlpkfkdnodbomgphbcecalj\3.0_0\.svn\props\.svn-work

O1 HOSTS File: ([2011/12/08 12:37:06 | 000,000,027 | ---- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O2 - BHO: (Adobe PDF Link Helper) - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Archivos de programa\Archivos comunes\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll (Adobe Systems Incorporated)
O2 - BHO: (DivX Plus Web Player HTML5 <video>) - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Archivos de programa\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll (DivX, LLC)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (Windows Live Aplicación auxiliar de inicio de sesión) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (QUICKfind BHO Object) - {C08DF07A-3E49-4E25-9AB0-D3882835F153} - C:\Archivos de programa\IDM\QUICKfind\PlugIns\IEHelp.dll (IDM)
O4 - HKLM..\Run: [Adobe ARM] C:\Archivos de programa\Archivos comunes\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems Incorporated)
O4 - HKLM..\Run: [avgnt] C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [DivXUpdate] C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe ()
O4 - HKLM..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe (Ahead Software Gmbh)
O4 - HKLM..\Run: [NvCplDaemon] C:\WINDOWS\System32\NvCpl.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NvMediaCenter] C:\WINDOWS\System32\NvMcTray.dll (NVIDIA Corporation)
O4 - HKLM..\Run: [NVMixerTray] C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe (NVIDIA Corporation)
O4 - HKLM..\Run: [nwiz] C:\WINDOWS\System32\nwiz.exe ()
O4 - HKLM..\Run: [Share-to-Web Namespace Daemon] C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe (Hewlett-Packard)
O4 - HKLM..\Run: [StatusClient] C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe (Hewlett-Packard)
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKLM..\Run: [TomcatStartup] C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\hpbpsttp.exe (Hewlett-Packard)
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 323
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveAutoRun = 67108863
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\WINDOWS\system32\nwprovau.dll (Microsoft Corporation)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/...indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 200.44.32.12 200.11.248.12
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{4B319939-1DF7-4947-A1BA-F374A4D60C8C}: DhcpNameServer = 200.44.32.12 200.11.248.12
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) -C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) -C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/11/17 09:49:48 | 000,000,000 | ---- | M] () - C:\AUTOEXEC.BAT -- [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37 - HKLM\...com [@ = ComFile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/12/08 10:21:16 | 000,000,000 | RHSD | C] -- C:\cmdcons
[2011/12/08 10:13:08 | 000,518,144 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWREG.exe
[2011/12/08 10:13:08 | 000,406,528 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWSC.exe
[2011/12/08 10:13:08 | 000,212,480 | ---- | C] (SteelWerX) -- C:\WINDOWS\SWXCACLS.exe
[2011/12/08 10:13:08 | 000,060,416 | ---- | C] (NirSoft) -- C:\WINDOWS\NIRCMD.exe
[2011/12/08 10:12:57 | 000,000,000 | ---D | C] -- C:\WINDOWS\ERDNT
[2011/12/08 10:12:51 | 000,000,000 | ---D | C] -- C:\Qoobox
[2011/12/08 10:12:40 | 000,000,000 | R--D | C] -- C:\Documents and Settings\Administrador\Menú Inicio\Programas\Herramientas administrativas
[2011/12/08 10:09:49 | 001,916,416 | ---- | C] (AVAST Software) -- C:\Documents and Settings\Administrador\Escritorio\aswMBR.exe
[2011/12/08 10:09:33 | 001,577,776 | ---- | C] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Administrador\Escritorio\tdsskiller.exe
[2011/12/08 10:07:56 | 004,331,784 | R--- | C] (Swearware) -- C:\Documents and Settings\Administrador\Escritorio\ComboFix.exe
[2011/12/08 07:53:33 | 000,000,000 | RH-D | C] -- C:\Documents and Settings\Administrador\Recent
[2011/12/04 13:06:04 | 000,584,192 | ---- | C] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
[2011/11/29 10:04:46 | 000,000,000 | ---D | C] -- C:\spoolerlogs
[2011/11/23 18:00:07 | 000,000,000 | ---D | C] -- C:\Documents and Settings\Administrador\Datos de programa\vlc
[2011/11/14 13:21:57 | 000,000,000 | ---D | C] -- C:\Archivos de programa\Archivos comunes\Java
[2011/09/12 09:05:20 | 000,401,408 | ---- | C] ( ) -- C:\WINDOWS\System32\lexlog.dll
[2011/09/12 09:02:51 | 000,630,784 | ---- | C] ( ) -- C:\WINDOWS\System32\softcoin.dll
[2011/09/12 09:02:46 | 000,425,984 | ---- | C] ( ) -- C:\WINDOWS\System32\gencoin.dll
[2011/02/04 08:13:39 | 000,047,360 | ---- | C] (VSO Software) -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.sys
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/12/08 13:50:53 | 000,000,512 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\MBR.dat
[2011/12/08 13:07:00 | 000,001,116 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/12/08 12:37:06 | 000,000,027 | ---- | M] () -- C:\WINDOWS\System32\drivers\etc\hosts
[2011/12/08 12:13:41 | 000,050,257 | ---- | M] () -- C:\WINDOWS\System32\nvapps.xml
[2011/12/08 12:13:39 | 000,001,098 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae.job
[2011/12/08 12:13:32 | 000,002,048 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2011/12/08 12:13:31 | 234,409,984 | -HS- | M] () -- C:\hiberfil.sys
[2011/12/08 10:21:22 | 000,000,327 | RHS- | M] () -- C:\boot.ini
[2011/12/08 10:09:57 | 001,916,416 | ---- | M] (AVAST Software) -- C:\Documents and Settings\Administrador\Escritorio\aswMBR.exe
[2011/12/08 10:09:39 | 001,577,776 | ---- | M] (Kaspersky Lab ZAO) -- C:\Documents and Settings\Administrador\Escritorio\tdsskiller.exe
[2011/12/08 10:08:19 | 004,331,784 | R--- | M] (Swearware) -- C:\Documents and Settings\Administrador\Escritorio\ComboFix.exe
[2011/12/08 08:44:15 | 000,000,069 | ---- | M] () -- C:\WINDOWS\NeroDigital.ini
[2011/12/04 13:06:10 | 000,584,192 | ---- | M] (OldTimer Tools) -- C:\Documents and Settings\Administrador\Escritorio\OTL.exe
[2011/12/01 19:14:37 | 000,129,457 | ---- | M] () -- C:\Documents and Settings\Administrador\Escritorio\exam 1 Elementary_Students.pdf
[2011/11/28 15:43:11 | 000,000,833 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Malwarebytes' Anti-Malware.lnk
[2011/11/19 16:15:30 | 000,001,876 | ---- | M] () -- C:\Documents and Settings\All Users\Escritorio\Google Chrome.lnk
[2011/11/11 11:05:03 | 000,002,206 | ---- | M] () -- C:\WINDOWS\System32\wpa.dbl
[3 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/12/08 13:50:53 | 000,000,512 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\MBR.dat
[2011/12/08 10:21:22 | 000,000,211 | ---- | C] () -- C:\Boot.bak
[2011/12/08 10:21:18 | 000,260,272 | RHS- | C] () -- C:\cmldr
[2011/12/08 10:13:08 | 000,256,000 | ---- | C] () -- C:\WINDOWS\PEV.exe
[2011/12/08 10:13:08 | 000,208,896 | ---- | C] () -- C:\WINDOWS\MBR.exe
[2011/12/08 10:13:08 | 000,098,816 | ---- | C] () -- C:\WINDOWS\sed.exe
[2011/12/08 10:13:08 | 000,080,412 | ---- | C] () -- C:\WINDOWS\grep.exe
[2011/12/08 10:13:08 | 000,068,096 | ---- | C] () -- C:\WINDOWS\zip.exe
[2011/12/01 19:14:23 | 000,129,457 | ---- | C] () -- C:\Documents and Settings\Administrador\Escritorio\exam 1 Elementary_Students.pdf
[2011/11/09 18:02:14 | 000,001,098 | ---- | C] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae.job
[2011/09/25 19:06:02 | 000,000,069 | ---- | C] () -- C:\WINDOWS\NeroDigital.ini
[2011/07/11 02:32:35 | 000,103,831 | ---- | C] () -- C:\WINDOWS\hpoins08.dat
[2011/07/11 01:50:02 | 000,004,445 | ---- | C] () -- C:\WINDOWS\hpomdl08.dat
[2011/07/11 01:44:20 | 000,103,754 | ---- | C] () -- C:\WINDOWS\hpoins08.dat.temp
[2011/07/11 01:44:20 | 000,004,445 | ---- | C] () -- C:\WINDOWS\hpomdl08.dat.temp
[2011/07/11 01:21:41 | 000,077,824 | ---- | C] () -- C:\WINDOWS\System32\hpzids01.dll
[2011/06/25 17:50:43 | 000,000,188 | ---- | C] () -- C:\WINDOWS\Readiris.ini
[2011/06/09 06:54:03 | 000,017,872 | ---- | C] () -- C:\WINDOWS\hplj1010.ini
[2011/02/04 08:13:39 | 000,087,608 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\ezpinst.exe
[2011/02/04 08:13:39 | 000,001,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.inf
[2011/02/04 08:13:39 | 000,001,074 | ---- | C] () -- C:\Documents and Settings\Administrador\Datos de programa\pcouffin.cat
[2010/12/27 20:36:44 | 000,000,664 | ---- | C] () -- C:\WINDOWS\System32\d3d9caps.dat
[2010/11/30 16:57:00 | 000,165,376 | ---- | C] () -- C:\WINDOWS\System32\unrar.dll
[2010/11/30 16:56:59 | 000,000,038 | ---- | C] () -- C:\WINDOWS\avisplitter.ini
[2010/11/30 16:56:55 | 000,790,528 | ---- | C] () -- C:\WINDOWS\System32\xvidcore.dll
[2010/11/30 16:56:55 | 000,134,144 | ---- | C] () -- C:\WINDOWS\System32\xvidvfw.dll
[2010/11/30 16:56:54 | 000,108,032 | ---- | C] () -- C:\WINDOWS\System32\ff_vfw.dll
[2010/11/19 20:35:34 | 000,000,000 | ---- | C] () -- C:\WINDOWS\nsreg.dat
[2010/11/18 11:25:01 | 000,006,144 | ---- | C] () -- C:\Documents and Settings\Administrador\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/11/17 09:52:52 | 000,002,048 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2010/11/17 09:46:27 | 000,021,900 | ---- | C] () -- C:\WINDOWS\System32\emptyregdb.dat
[2010/11/17 04:10:37 | 000,004,205 | ---- | C] () -- C:\WINDOWS\ODBCINST.INI
[2010/11/17 04:09:26 | 000,321,928 | ---- | C] () -- C:\WINDOWS\System32\FNTCACHE.DAT
[2008/04/14 08:00:00 | 013,107,200 | ---- | C] () -- C:\WINDOWS\System32\oembios.bin
[2008/04/14 08:00:00 | 000,673,088 | ---- | C] () -- C:\WINDOWS\System32\mlang.dat
[2008/04/14 08:00:00 | 000,506,020 | ---- | C] () -- C:\WINDOWS\System32\perfh00A.dat
[2008/04/14 08:00:00 | 000,442,500 | ---- | C] () -- C:\WINDOWS\System32\perfh009.dat
[2008/04/14 08:00:00 | 000,317,534 | ---- | C] () -- C:\WINDOWS\System32\perfi00A.dat
[2008/04/14 08:00:00 | 000,272,128 | ---- | C] () -- C:\WINDOWS\System32\perfi009.dat
[2008/04/14 08:00:00 | 000,218,003 | ---- | C] () -- C:\WINDOWS\System32\dssec.dat
[2008/04/14 08:00:00 | 000,089,578 | ---- | C] () -- C:\WINDOWS\System32\perfc00A.dat
[2008/04/14 08:00:00 | 000,069,534 | ---- | C] () -- C:\WINDOWS\System32\perfc009.dat
[2008/04/14 08:00:00 | 000,046,258 | ---- | C] () -- C:\WINDOWS\System32\mib.bin
[2008/04/14 08:00:00 | 000,036,284 | ---- | C] () -- C:\WINDOWS\System32\perfd00A.dat
[2008/04/14 08:00:00 | 000,028,626 | ---- | C] () -- C:\WINDOWS\System32\perfd009.dat
[2008/04/14 08:00:00 | 000,004,569 | ---- | C] () -- C:\WINDOWS\System32\secupd.dat
[2008/04/14 08:00:00 | 000,004,463 | ---- | C] () -- C:\WINDOWS\System32\oembios.dat
[2008/04/14 08:00:00 | 000,001,804 | ---- | C] () -- C:\WINDOWS\System32\Dcache.bin
[2008/04/14 08:00:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\System32\noise.dat
[2007/01/23 08:11:20 | 000,141,312 | ---- | C] () -- C:\WINDOWS\System32\QFClient2.dll
[2006/03/09 15:29:00 | 001,662,976 | ---- | C] () -- C:\WINDOWS\System32\nvwdmcpl.dll
[2006/03/09 15:29:00 | 001,519,616 | ---- | C] () -- C:\WINDOWS\System32\nwiz.exe
[2006/03/09 15:29:00 | 001,466,368 | ---- | C] () -- C:\WINDOWS\System32\nview.dll
[2006/03/09 15:29:00 | 001,339,392 | ---- | C] () -- C:\WINDOWS\System32\nvdspsch.exe
[2006/03/09 15:29:00 | 001,019,904 | ---- | C] () -- C:\WINDOWS\System32\nvwimg.dll
[2006/03/09 15:29:00 | 000,573,440 | ---- | C] () -- C:\WINDOWS\System32\nvhwvid.dll
[2006/03/09 15:29:00 | 000,466,944 | ---- | C] () -- C:\WINDOWS\System32\nvshell.dll
[2006/03/09 15:29:00 | 000,442,368 | ---- | C] () -- C:\WINDOWS\System32\nvappbar.exe
[2006/03/09 15:29:00 | 000,425,984 | ---- | C] () -- C:\WINDOWS\System32\keystone.exe
[2006/03/09 15:29:00 | 000,286,720 | ---- | C] () -- C:\WINDOWS\System32\nvnt4cpl.dll
[2006/03/09 15:29:00 | 000,098,304 | ---- | C] () -- C:\WINDOWS\System32\nvapi.dll
[2003/08/29 05:23:33 | 000,094,274 | ---- | C] () -- C:\WINDOWS\System32\HPBHEALR.DLL

========== LOP Check ==========

[2011/06/13 12:36:23 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Carpeta de carga de Share-to-Web
[2011/06/25 02:03:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\DDMSettings
[2011/07/31 08:48:57 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\K-Meleon
[2011/09/08 17:35:30 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\ldoce5
[2011/08/09 15:24:40 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Softland
[2011/09/08 09:57:46 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\uTorrent
[2011/07/02 20:07:27 | 000,000,000 | ---D | M] -- C:\Documents and Settings\Administrador\Datos de programa\Vso

========== Purity Check ==========



< End of report >

[RKinner]

Did you not get an Extras Log? Please post it.

1. Double-click My Computer, and then right-click the hard disk that you want to check. C:
2. Click Properties, and then click Tools.
3. Under Error-checking, click Check Now. A dialog box that shows the Check disk options is displayed,
4. Check both boxes and then click Start.
You will receive the following message:
The disk check could not be performed because the disk check utility needs exclusive access to some Windows files on the disk. These files can be accessed by restarting Windows. Do you want to schedule the disk check to occur the next time you restart the computer?
Click Yes to schedule the disk check, but don't restart yet.

Start, Run, eventvwr.msc, OK to bring up the Event Viewer. Right click on System and Clear All Events, No (we don't want to save the old log), OK. Repeat for Application. Reboot. The disk check will run and will probably take an hour or more to finish.

Start, Run, sfc /scannow, OK

SPACE after sfc. This will check your critical system files. If it asks for a CD and you don't have one or it doesn't like your CD just tell it to SKIP.

Start, Run, sigverif, OK

Press Start. This will check your drivers. If you just get a few when it finishes tell me what they are. If you get a lot just look for those with newish dates (since about the time the problem started.)


1. Please download the Event Viewer Tool by Vino Rosso
http://images.malwar...om/vino/VEW.exe
and save it to your Desktop:
2. Double-click VEW.exe
3. Under 'Select log to query', select:

* System
4. Under 'Select type to list', select:
* Error
* Warning


Then use the 'Number of events' as follows:


1. Click the radio button for 'Number of events'
Type 20 in the 1 to 20 box
Then click the Run button.
Notepad will open with the output log.


Please post the Output log in your next reply then repeat but select Application.


Get the free version of Speccy:

http://www.filehippo...download_speccy (Look in the upper right for the Download
Latest Version button) Download, Save and Install it. Run Speccy. When it finishes (the little icon in the bottom left will stop moving), File, Save as Text File, (to your desktop) note the name it gives. OK. Open the file in notepad and delete the line that gives the serial number of your Operating System. (It will be near the top about 10 lines down.) Attach the file to your next post.

Get Process Explorer

http://live.sysinter...com/procexp.exe

Save it to your desktop then run it (Vista or Win7 - right click and Run As Administrator). Click once or twice on the CPU column header to sort things by CPU usage with the big hitters at the top. File, Save As, Save. Open the file Procexp.txt on your desktop and copy and paste the text to a reply.

Ron

[Piratacobra]

Hi Ron.

Made everything as told, there was nothing strange in the drivers list, nothing recently added

Vino´s Event Viewer doesn´t run because it says "VEW is not coded for your language(Spanish)"
Speccy doesn´t finishes the system analisys because Nvidia drivers are disabled. Do I reinstall the drivers and try again to run it?

here is the Process Expl Log

I have to say that the PC is running smoother now, however I know there is still some work to do....





Process PID CPU Private Bytes Working Set Description Company Name
System Idle Process 0 96.88 0 K 16 K
procexp.exe 1168 1.56 9.104 K 14.308 K Sysinternals Process Explorer Sysinternals - www.sysinternals.com
chrome.exe 2624 1.56 73.548 K 10.464 K Google Chrome Google Inc.
Interrupts n/a < 0.01 0 K 0 K Hardware Interrupts and DPCs
wuauclt.exe 1904 6.356 K 464 K Actualizaciones automáticas Microsoft Corporation
wscntfy.exe 3216 452 K 48 K Windows Security Center Notification App Microsoft Corporation
wmiprvse.exe 2960 5.076 K 2.900 K WMI Microsoft Corporation
wmiprvse.exe 1396 1.660 K 880 K WMI Microsoft Corporation
winlogon.exe 692 6.044 K 644 K Aplicación de inicio de sesión de Windows NT Microsoft Corporation
System 4 0 K 36 K
svchost.exe 916 3.068 K 1.172 K Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 972 1.916 K 1.472 K Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1064 15.632 K 7.736 K Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1148 1.284 K 712 K Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1240 1.580 K 84 K Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1804 2.300 K 56 K Generic Host Process for Win32 Services Microsoft Corporation
StatusClient.exe 304 824 K 1.608 K Hewlett-Packard T-TR Status Client Hewlett-Packard
spoolsv.exe 1640 3.856 K 684 K Spooler SubSystem App Microsoft Corporation
smss.exe 584 232 K 44 K Administrador de sesión de Windows NT Microsoft Corporation
services.exe 736 3.428 K 1.628 K Aplicación de servicios y controlador Microsoft Corporation
sched.exe 1688 4.484 K 48 K Antivirus Scheduler Avira GmbH
NvMixerTray.exe 188 2.100 K 52 K NVIDIA nForce Mixer Tray Application NVIDIA Corporation
lsass.exe 748 3.668 K 1.052 K LSA Shell (Export Version) Microsoft Corporation
jusched.exe 412 656 K 48 K Java™ Update Scheduler Sun Microsystems, Inc.
jqs.exe 1292 5.872 K 1.204 K Java™ Quick Starter Service Sun Microsystems, Inc.
javaw.exe 1208 18.000 K 3.092 K
hpgs2wnf.exe 488 836 K 56 K hpgs2wnf Module
hpgs2wnd.exe 380 828 K 56 K hpgs2wnd Hewlett-Packard
GrooveMonitor.exe 288 1.184 K 500 K GrooveMonitor Utility Microsoft Corporation
GoogleUpdate.exe 1300 3.364 K 76 K Google Installer Google Inc.
explorer.exe 1604 13.720 K 12.580 K Explorador de Windows Microsoft Corporation
DivXUpdate.exe 388 2.028 K 204 K DivX Update
csrss.exe 668 1.600 K 1.204 K Client Server Runtime Process Microsoft Corporation
chrome.exe 2664 42.096 K 9.956 K Google Chrome Google Inc.
chrome.exe 3276 27.592 K 2.332 K Google Chrome Google Inc.
chrome.exe 3804 9.732 K 5.432 K Google Chrome Google Inc.
avshadow.exe 1176 592 K 52 K AntiVir shadow copy service Avira GmbH
avguard.exe 1040 109.600 K 1.832 K Antivirus On-Access Service Avira GmbH
avgnt.exe 208 5.212 K 1.384 K Antivirus System Tray Tool Avira GmbH
alg.exe 3848 1.052 K 204 K Application Layer Gateway Service Microsoft Corporation

[RKinner]

Why are the Nvidia drivers disabled?

If speccy isn't happy, uninstall it and try speedfan

http://www.almico.com/sfdownload.php

Download, save and Install it (Win 7 or Vista right click and Run As Admin.) then run it.

It should tell you your temps. If they seem hot (Over 50 for a laptop, over 40 for a desktop):

If a desktop: Turn it off but leave it plugged up to the wall outlet. Open the case and vacuum out all of the dust. A soft brush is helpful. Pay special attention to the heatsink over the CPU. You may need to remove the fan (usually four screws) and set it aside without disconnecting it. (Put the fan back when done.) With the case still open, turn on the PC. The fan for the CPU should start quickly and run strongly and quietly. If not then time for a new one.

If it's a laptop:

Vacuum around the vents. Make sure the laptop is on a hard service and the vents are not blocked. Place a book under the back edge to tilt the laptop but make sure it doesn't block the vents. Consider investing in a laptop cooler tray. Check Automatic Fan Speed box in Speedfan. What it does on a laptop if it works is turn the fan on full which seems to help.

[Piratacobra]

Hi Ron:

Reinstalled the Video Drivers and runned Speccy. here is the log:

Sumario
Sistema operativo
MS Windows XP Professional 32-bit SP3
CPU
AMD Sempron
Thoroughbred 0.13um Tecnología
RAM
256 MB único-Canal DDR @ 165MHz (2-3-3-7)
Placa base
MICRO-STAR INTERNATIONAL CO., LTD MS-7051 (Socket A) 32 °C
Gráfica
Monitor predeterminado (1024x768@60Hz)
32MBNVIDIA GeForce4 MX Integrated GPU (MSI)
Discos duros
78GB Western Digital WDC WD800JD-00JNA0 (SATA) 39 °C
Unidades ópticas
SONY DVD RW DW-Q120A
NERO IMAGEDRIVE2 SCSI CdRom Device
Audio
NVIDIA® nForce™ Audio
Sistema operativo
MS Windows XP Professional 32-bit SP3
Fecha de instalación: 17 November 2010, 09:52
Número de serie:
Centro de seguridad de Windows
Cortafuegos Desactivar
Windows Update
Autoactualizar Desactivar
Antivirus
Antivirus Activar
Nombre de la compañía Avira GmbH
Nombre del monitor AntiVir Desktop
Versión del producto 10.0.1.59
Variables de entorno
USERPROFILE C:\Documents and Settings\Administrador
SystemRoot C:\WINDOWS
Variables de usuario
TEMP C:\Documents and Settings\Administrador\Configuración local\Temp
TMP C:\Documents and Settings\Administrador\Configuración local\Temp
Variables de la máquina
ComSpec C:\WINDOWS\system32\cmd.exe
Path C:\WINDOWS\system32
C:\WINDOWS
C:\WINDOWS\System32\Wbem
windir C:\WINDOWS
FP_NO_HOST_CHECK NO
OS Windows_NT
PROCESSOR_ARCHITECTURE x86
PROCESSOR_LEVEL 6
PROCESSOR_IDENTIFIER x86 Family 6 Model 8 Stepping 1, AuthenticAMD
PROCESSOR_REVISION 0801
NUMBER_OF_PROCESSORS 1
PATHEXT .COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH
TEMP C:\WINDOWS\TEMP
TMP C:\WINDOWS\TEMP
Perfil de energía
Plan de energía activo Escritorio u oficina
Hibernación Activar
Apagar Activar
Suspender Activar
Apagar monitor después: (con CA) Nunca
Apagar el disco duro después: (con CA) Nunca
Suspender después: (con CA) Nunca
Salvapantallas Activar
Tiempo de actividad
Sesión actual
Tiempo actual 12/12/2011 0:48:20
Tiempo de actividad actual 11271 sec (0 d, 03 h, 07 m, 51 s)
Tiempo del último arranque 11/12/2011 21:40:29
Zona horaria
Zona horaria GMT -4 horas
Idioma Spanish
País España
Moneda €
Formato de fecha dd/MM/yyyy
Formato de hora H:mm:ss
Programador
GoogleUpdateTaskMachineUA 11/12/2011 22:07;Cada 1 Horas a partir de las 14:07 durante 24 Horas Diariamente, comenzando el 06/08/2011
GoogleUpdateTaskMachineCore1cc9f2b3d03c3ae 12/12/2011 18:07;Ejecutar al inicio de sesión del usuario
Lista de procesos
alg.exe
ID del proceso 3640
Usuario SERVICIO LOCAL
Dominio NT AUTHORITY
Ruta C:\WINDOWS\System32\alg.exe
Memoria en uso 68 KB
Máxima memoria en uso 3.33 MB
avgnt.exe
ID del proceso 264
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe
Memoria en uso 1.38 MB
Máxima memoria en uso 130 MB
avguard.exe
ID del proceso 1108
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
Memoria en uso 12 MB
Máxima memoria en uso 116 MB
avshadow.exe
ID del proceso 1280
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe
Memoria en uso 20 KB
Máxima memoria en uso 2.61 MB
csrss.exe
ID del proceso 684
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta \??\C:\WINDOWS\system32\csrss.exe
Memoria en uso 948 KB
Máxima memoria en uso 5.44 MB
ctfmon.exe
ID del proceso 620
Usuario Administrador
Dominio XV-01
Ruta C:\WINDOWS\system32\ctfmon.exe
Memoria en uso 276 KB
Máxima memoria en uso 3.00 MB
divxupdate.exe
ID del proceso 488
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\DivX\DivX Update\DivXUpdate.exe
Memoria en uso 192 KB
Máxima memoria en uso 7.13 MB
explorer.exe
ID del proceso 1616
Usuario Administrador
Dominio XV-01
Ruta C:\WINDOWS\Explorer.EXE
Memoria en uso 2.58 MB
Máxima memoria en uso 17 MB
googleupdate.exe
ID del proceso 1312
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\Archivos de programa\Google\Update\GoogleUpdate.exe
Memoria en uso 80 KB
Máxima memoria en uso 4.02 MB
groovemonitor.exe
ID del proceso 396
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe
Memoria en uso 76 KB
Máxima memoria en uso 4.43 MB
hpgs2wnd.exe
ID del proceso 468
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe
Memoria en uso 68 KB
Máxima memoria en uso 3.30 MB
hpgs2wnf.exe
ID del proceso 648
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe
Memoria en uso 28 KB
Máxima memoria en uso 3.21 MB
javaw.exe
ID del proceso 1308
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe
Memoria en uso 1.23 MB
Máxima memoria en uso 18 MB
jqs.exe
ID del proceso 1424
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\Archivos de programa\Java\jre6\bin\jqs.exe
Memoria en uso 1.18 MB
Máxima memoria en uso 15 MB
jusched.exe
ID del proceso 536
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
Memoria en uso 40 KB
Máxima memoria en uso 2.26 MB
lsass.exe
ID del proceso 764
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\lsass.exe
Memoria en uso 1.40 MB
Máxima memoria en uso 5.51 MB
nvmixertray.exe
ID del proceso 232
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\NVIDIA Corporation\NvMixer\NVMixerTray.exe
Memoria en uso 48 KB
Máxima memoria en uso 3.63 MB
nvsvc32.exe
ID del proceso 1832
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\nvsvc32.exe
Memoria en uso 32 KB
Máxima memoria en uso 3.80 MB
rundll32.exe
ID del proceso 580
Usuario Administrador
Dominio XV-01
Ruta C:\WINDOWS\system32\RUNDLL32.EXE
Memoria en uso 44 KB
Máxima memoria en uso 5.63 MB
sched.exe
ID del proceso 1700
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
Memoria en uso 72 KB
Máxima memoria en uso 4.68 MB
services.exe
ID del proceso 752
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\services.exe
Memoria en uso 1.32 MB
Máxima memoria en uso 3.20 MB
smss.exe
ID del proceso 600
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta \SystemRoot\System32\smss.exe
Memoria en uso 36 KB
Máxima memoria en uso 480 KB
speccy.exe
ID del proceso 2848
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Speccy\Speccy.exe
Memoria en uso 21 MB
Máxima memoria en uso 22 MB
spoolsv.exe
ID del proceso 1652
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\spoolsv.exe
Memoria en uso 548 KB
Máxima memoria en uso 5.62 MB
statusclient.exe
ID del proceso 432
Usuario Administrador
Dominio XV-01
Ruta C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe
Memoria en uso 1.59 MB
Máxima memoria en uso 2.98 MB
svchost.exe
ID del proceso 932
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\svchost.exe
Memoria en uso 1.59 MB
Máxima memoria en uso 3.33 MB
svchost.exe
ID del proceso 988
Usuario Servicio de red
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\svchost.exe
Memoria en uso 1.36 MB
Máxima memoria en uso 4.18 MB
svchost.exe
ID del proceso 1084
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\System32\svchost.exe
Memoria en uso 7.86 MB
Máxima memoria en uso 15 MB
svchost.exe
ID del proceso 1148
Usuario Servicio de red
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\svchost.exe
Memoria en uso 688 KB
Máxima memoria en uso 3.32 MB
svchost.exe
ID del proceso 1260
Usuario SERVICIO LOCAL
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\svchost.exe
Memoria en uso 84 KB
Máxima memoria en uso 3.38 MB
svchost.exe
ID del proceso 1900
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\svchost.exe
Memoria en uso 60 KB
Máxima memoria en uso 3.93 MB
system
ID del proceso 4
Memoria en uso 28 KB
Máxima memoria en uso 4.02 MB
system idle process
ID del proceso 0
winlogon.exe
ID del proceso 708
Usuario SYSTEM
Dominio NT AUTHORITY
Ruta \??\C:\WINDOWS\system32\winlogon.exe
Memoria en uso 488 KB
Máxima memoria en uso 12 MB
wmiprvse.exe
ID del proceso 3840
Usuario Servicio de red
Dominio NT AUTHORITY
Ruta C:\WINDOWS\system32\wbem\wmiprvse.exe
Memoria en uso 6.39 MB
Máxima memoria en uso 6.39 MB
wscntfy.exe
ID del proceso 3872
Usuario Administrador
Dominio XV-01
Ruta C:\WINDOWS\system32\wscntfy.exe
Memoria en uso 20 KB
Máxima memoria en uso 1.95 MB
Hotfixes
Carpetas del sistema
Path for burning CD C:\Documents and Settings\Administrador\Configuración local\Application Data\Microsoft\CD Burning
Application Data C:\Documents and Settings\All Users\Datos de programa
Public Desktop C:\Documents and Settings\All Users\Escritorio
Documents C:\Documents and Settings\All Users\Documentos
Global Favorites C:\Documents and Settings\All Users\Favoritos
Music C:\Documents and Settings\All Users\Documentos\Mi música
Pictures C:\Documents and Settings\All Users\Documentos\Mis imágenes
Start Menu Programs C:\Documents and Settings\All Users\Menú Inicio\Programas
Start Menu C:\Documents and Settings\All Users\Menú Inicio
Startup C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio
Templates C:\Documents and Settings\All Users\Plantillas
Videos C:\Documents and Settings\All Users\Documentos\Mis vídeos
Cookies C:\Documents and Settings\Administrador\Cookies
Desktop C:\Documents and Settings\Administrador\Escritorio
Physical Desktop C:\Documents and Settings\Administrador\Escritorio
User Favorites C:\Documents and Settings\Administrador\Favoritos
Fonts C:\WINDOWS\Fonts
Internet History C:\Documents and Settings\Administrador\Configuración local\Historial
Temporary Internet Files C:\Documents and Settings\Administrador\Configuración local\Archivos temporales de Internet
Local Application Data C:\Documents and Settings\Administrador\Configuración local\Datos de programa
Windows directory C:\WINDOWS
Windows/System C:\WINDOWS\system32
Program Files C:\Archivos de programa
Device Tree
Monoprocesador ACPI de PC
Sistema Microsoft compatible con ACPI
AMD Sempron™ 2500+
Recursos de la placa base
Recursos de la placa base
Botón de energía ACPI
Tarjeta de sistema
Botón de característica fija ACPI
Bus PCI
Puente PCI de CPU host estándar
Controlador PCI de RAM estándar
Controlador PCI de RAM estándar
Controlador PCI de RAM estándar
Controlador PCI de RAM estándar
Controlador PCI de RAM estándar
Controladora de bus SM
Recursos de la placa base
Controladora de interrupciones programable
Controladora de acceso directo a memoria
Cronómetro del sistema
Sistema CMOS/reloj en tiempo real
Altavoz del sistema
Procesador de datos numéricos
Mouse compatible PS/2
Teclado estándar de 101/102 teclas o Microsoft Natural PS/2 Keyboard
Puente PCI ISA estándar
Puerto de datos de lectura ISAPNP
Controladora de host USB OpenHCD estándar
Concentrador raíz USB
Controladora de host USB OpenHCD estándar
Concentrador raíz USB
Controlador de host de PCI a USB mejorado
Concentrador raíz USB
NVIDIA Network Bus Enumerator
NVIDIA nForce Networking Controller
NVIDIA® nForce™ Audio Codec Interface
NVIDIA® nForce™ Audio
Puente PCI estándar de PCI a PCI
Controladora de host VIA OHCI compatible con IEEE 1394
Adaptador de red 1394
Controladora estándar PCI IDE de doble canal
Canal IDE principal
Canal IDE secundario
SONY DVD RW DW-Q120A
Controladora estándar PCI IDE de doble canal
Canal IDE secundario
Canal IDE principal
WDC WD800JD-00JNA0
Puente PCI estándar de PCI a PCI
NVIDIA GeForce4 MX Integrated GPU
Monitor predeterminado
Servicios
Ejecutándose Administrador de cuentas de seguridad
Ejecutándose Administrador de discos lógicos
Ejecutándose Adquisición de imágenes de Windows (WIA)
Ejecutándose Almacenamiento protegido
Ejecutándose Audio de Windows
Ejecutándose Automatic Updates
Ejecutándose Avira AntiVir Guard
Ejecutándose Avira AntiVir Programador
Ejecutándose Ayuda de NetBIOS sobre TCP/IP
Ejecutándose Ayuda y soporte técnico
Ejecutándose Centro de seguridad
Ejecutándose Cliente de seguimiento de vinculos distribuidos
Ejecutándose Cliente DHCP
Ejecutándose Cliente DNS
Ejecutándose Cliente Web
Ejecutándose Cola de impresión
Ejecutándose Compatibilidad de cambio rápido de usuario
Ejecutándose Conexiones de red
Ejecutándose Configuración inalámbrica rápida
Ejecutándose CryptSvc
Ejecutándose Detección de hardware shell
Ejecutándose Estación de trabajo
Ejecutándose Examinador de equipos
Ejecutándose Firewall de Windows/Conexión compartida a Internet (ICS)
Ejecutándose Horario de Windows
Ejecutándose Iniciador de procesos de servidor DCOM
Ejecutándose Instrumental de administración de Windows
Ejecutándose Java Quick Starter
Ejecutándose Llamada a procedimiento remoto (RPC)
Ejecutándose NLA (Network Location Awareness)
Ejecutándose Notificación de sucesos del sistema
Ejecutándose NVIDIA Display Driver Service
Ejecutándose Plug and Play
Ejecutándose Programador de tareas
Ejecutándose Registro de sucesos
Ejecutándose Registro remoto
Ejecutándose Secondary Logon
Ejecutándose Servicio de descubrimientos SSDP
Ejecutándose Servicio de informe de errores
Ejecutándose Servicio de puerta de enlace de capa de aplicación
Ejecutándose Servicio de restauración de sistema
Ejecutándose Servicio de transferencia inteligente en segundo plano
Ejecutándose Servicios de Terminal Server
Ejecutándose Servicios IPSEC
Ejecutándose Servidor
Ejecutándose Sistema de sucesos COM+
Ejecutándose Temas
Parado Acceso a dispositivo de interfaz humana
Parado Adaptador de rendimiento de WMI
Parado Administración de aplicaciones
Parado Administrador de conexión automática de acceso remoto
Parado Administrador de conexión de acceso remoto
Parado Administrador de sesión de Ayuda de escritorio remoto
Parado Agente de Protección de acceso a redes
Parado Aplicación del sistema COM+
Parado Configuración automática de redes cableadas
Parado Coordinador de transacciones distribuidas de Microsoft
Parado DDE de red
Parado DSDM de DDE de red
Parado Enrutamiento y acceso remoto
Parado Escritorio remoto compartido de NetMeeting
Parado Extensiones de controlador de Instrumental de administración de Windows
Parado Host de dispositivo Plug and Play universal
Parado HTTP SSL
Parado Inicio de sesión en red
Parado InstallDriver Table Manager
Parado Instantáneas de volumen
Parado Localizador de llamadas a procedimiento remoto (RPC)
Parado Medios de almacenamiento extraíbles
Parado Mensajero
Parado Microsoft .NET Framework NGEN v4.0.30319_X86
Parado Microsoft Office Diagnostics Service
Parado Microsoft Office Groove Audit Service
Parado MS Software Shadow Copy Provider
Parado Net.Tcp Port Sharing Service
Parado Office Source Engine
Parado Pml Driver HPZ12
Parado Portafolios
Parado Proveedor de compatibilidad con seguridad LM de Windows NT
Parado QoS RSVP
Parado Registros y alertas de rendimiento
Parado Servicio COM de grabación de CD de IMAPI
Parado Servicio de administración de certificados y claves de mantenimiento
Parado Servicio de alerta
Parado Servicio de aprovisionamiento de red
Parado Servicio de estado de ASP.NET
Parado Servicio de Google Update (gupdatem)
Parado Servicio de Index Server
Parado Servicio de protocolo de autenticación extensible
Parado Servicio del administrador de discos lógicos
Parado Servicio del número de serie de medio portátil
Parado Servicio Google Update (gupdate)
Parado Sistema de alimentación ininterrumpida
Parado Tarjeta inteligente
Parado Telefonía
Parado Telnet
Parado Windows Installer
Parado Windows Presentation Foundation Font Cache 4.0.0.0
CPU
AMD Sempron
Núcleos 1
Hilos 1
Nombre AMD Sempron
Nombre en clave Thoroughbred
Paquete Socket A (462)
Tecnología 0.13um
Especificación AMD Sempron™ 2500+
Familia 6
Extensión familia 7
Modelo 8
Extensión modelo 8
Versión 1
Revisión B0
Instrucciones MMX (+), 3DNow! (+), SSE
Virtualización No soportado
Hyperthreading "Multi-hilo" Not supported
Velocidad del ventilador 3534 RPM
Velocidad del Bus 166.0 MHz
Velocidad nominal del Bus 332.0 MHz
Valor de velocidad del Bus 166 MHz
Caches
Tamaño de la cache de datos L1 64 KBytes
Tamaño de la cache de instrucciones L1 64 KBytes
Tamaño de la cache unificada L2 256 KBytes
Núcleo 0
Velocidad del núcleo 1743.0 MHz
Multiplicador x 10.5
Velocidad del Bus 166.0 MHz
Velocidad nominal del Bus 332.0 MHz
Hilo 1
ID del APIC 0
RAM
Ranuras de memoria
Total de ranuras de memoria 3
Ranuras de memoria usadas 1
Ranuras de memoria libres 2
Memoria
Tipo DDR
Tamaño 256 MBytes
Canales # único
Frecuencia DRAM 166.0 MHz
CAS# Latencia (CL) 2 relojes
RAS# a CAS# Retraso (tRCD) 3 relojes
RAS# Precarga (tRP) 3 relojes
Ciclo de tiempo (tRAS) 7 relojes
Memoria física
Memoria en uso 91 %
Física total 223 MB
Física disponible 18 MB
Virtual total 546 MB
Virtual disponible 80 MB
SPD
Cantidad de módulos SPD 1
Ranura #1
Tipo DDR
Tamaño 256 MBytes
Fabricante
Ancho de banda máximo PC2700 (166 MHz)
Número de referencia RM56D361TA-27BC
Número de serie FFFFFFFF
Semana/año 07 / 05
Extensión SPD EPP
JEDEC #1
Frecuencia 166.7 MHz
CAS# Latencia 2.5
RAS# a CAS# 4
RAS# Precarga 4
tRAS 8
Voltaje 2.500 V
Placa base
Fabricante MICRO-STAR INTERNATIONAL CO., LTD
Modelo MS-7051 (Socket A)
Proveedor del chipset NVIDIA
Modelo del chipset nForce2 IGP
Revisión del chipset A2
Proveedor del southbridge NVIDIA
Modelo del southbridge nForce2 MCP
Revisión del southbridge A3
Temperatura del Sistema 32 °C
BIOS
Marca Phoenix Technologies, LTD
Versión 6.00 PG
Fecha 08/30/2004
Voltage
CPU VCore 1.612 V
MEMORY CONTROLLER 3.280 V
+3.3V 3.120 V
+5V 4.907 V
+12V 2.310 V
Datos PCI
Ranura PCI
Tipo de ranuras PCI
Ranuras en uso Disponible
Ancho del Bus 32 bit
Nombre de la ranura PCI0
Número de ranuras 0
Ranura PCI
Tipo de ranuras PCI
Ranuras en uso Disponible
Ancho del Bus 32 bit
Nombre de la ranura PCI1
Número de ranuras 1
Ranura PCI
Tipo de ranuras PCI
Ranuras en uso Disponible
Ancho del Bus 32 bit
Nombre de la ranura PCI2
Número de ranuras 2
Ranura PCI
Tipo de ranuras PCI
Ranuras en uso Disponible
Ancho del Bus 32 bit
Nombre de la ranura PCI3
Número de ranuras 3
Ranura PCI
Tipo de ranuras PCI
Ranuras en uso Disponible
Ancho del Bus 32 bit
Nombre de la ranura PCI4
Número de ranuras 4
Ranura DESCONOCIDO
Tipo de ranuras DESCONOCIDO
Ranuras en uso En uso
Ancho del Bus 32 bit
Nombre de la ranura AGP
Número de ranuras 5
Gráfica
Pantalla
Nombre Monitor predeterminado en NVIDIA GeForce4 MX Integrated GPU
Resolución actual 1024x768 pixeles
Resolución de trabajo 1024x734 pixeles
Estado activado, primario
Ancho del monitor 1024
Alto del monitor 768
Bpp del monitor 32 bits por pixel
Frecuencia del monitor 60 Hz
Dispositivo \\.\DISPLAY1\Monitor0
NVIDIA GeForce4 MX Integrated GPU
GPU Crush17
ID del dispositivo 10DE-01F0
Revisión A4
Subproveedor MSI (1462)
Nivel de rendimiento actual Level 1
Tecnología 151 nm
Transistores 29 M
Soporte DerectX 7.0
Soporte OpenGL 1.2
Reloj de la GPU 225 MHz
Reloj de la memoria 334 MHz
Controlador nv4_disp.dll
Versión del controlador 6.14.10.8421
Versión de la BIOS 4.1F.20.02.02
ROPs 2
Sombreados Vértice 0/Pixel 0
Tipo de memoria System
Memoria 32 MB
Fillrate de pixel 0.5 GPixels/s
Fillrate de textura 0.9 GTexels/s
Nivel del rendimiento: 1
Level 1
OpenGL
Version 1.5.5
Vendor NVIDIA Corporation
Renderer GeForce4 MX Integrated GPU/PCI/SSE/3DNOW!
GLU Version 1.2.2.0 Microsoft Corporation
Values
GL_MAX_LIGHTS 8
GL_MAX_TEXTURE_SIZE 2048
GL_MAX_TEXTURE_STACK_DEPTH 10
GL Extensions
GL_ARB_imaging
GL_ARB_multitexture
GL_ARB_pixel_buffer_object
GL_ARB_point_parameters
GL_ARB_point_sprite
GL_ARB_shader_objects
GL_ARB_shading_language_100
GL_ARB_texture_compression
GL_ARB_texture_cube_map
GL_ARB_texture_env_add
GL_ARB_texture_env_combine
GL_ARB_texture_env_dot3
GL_ARB_texture_mirrored_repeat
GL_ARB_texture_rectangle
GL_ARB_transpose_matrix
GL_ARB_vertex_buffer_object
GL_ARB_vertex_program
GL_ARB_vertex_shader
GL_ARB_window_pos
GL_S3_s3tc
GL_EXT_texture_env_add
GL_EXT_abgr
GL_EXT_bgra
GL_EXT_blend_color
GL_EXT_blend_minmax
GL_EXT_blend_subtract
GL_EXT_clip_volume_hint
GL_EXT_compiled_vertex_array
GL_EXT_Cg_shader
GL_EXT_draw_range_elements
GL_EXT_fog_coord
GL_EXT_multi_draw_arrays
GL_EXT_packed_pixels
GL_EXT_paletted_texture
GL_EXT_pixel_buffer_object
GL_EXT_point_parameters
GL_EXT_rescale_normal
GL_EXT_secondary_color
GL_EXT_separate_specular_color
GL_EXT_shared_texture_palette
GL_EXT_stencil_wrap
GL_EXT_texture_compression_s3tc
GL_EXT_texture_cube_map
GL_EXT_texture_edge_clamp
GL_EXT_texture_env_combine
GL_EXT_texture_env_dot3
GL_EXT_texture_filter_anisotropic
GL_EXT_texture_lod
GL_EXT_texture_lod_bias
GL_EXT_texture_object
GL_EXT_vertex_array
GL_IBM_rasterpos_clip
GL_IBM_texture_mirrored_repeat
GL_KTX_buffer_region
GL_NV_blend_square
GL_NV_fence
GL_NV_fog_distance
GL_NV_light_max_exponent
GL_NV_packed_depth_stencil
GL_NV_pixel_data_range
GL_NV_point_sprite
GL_NV_register_combiners
GL_NV_texgen_reflection
GL_NV_texture_env_combine4
GL_NV_texture_rectangle
GL_NV_vertex_array_range
GL_NV_vertex_array_range2
GL_NV_vertex_program
GL_NV_vertex_program1_1
GL_SGIS_generate_mipmap
GL_SGIS_multitexture
GL_SGIS_texture_lod
GL_SUN_slice_accum
GL_WIN_swap_hint
WGL_EXT_swap_control
GLU Extensions
GL_EXT_bgra
Discos duros
WDC WD800JD-00JNA0
Fabricante Western Digital
Heads 16
Cylinders 16383
Tipo de SATA SATA-II 3.0Gb/s
Tipo de dispositivo Fijado
Estándar ATA ATA/ATAPI-6
Tamaño LBA LBA 28 bit
Cantidad de encendidos 2270 horas
Tiempo de encendido 875.9 days
Características S.M.A.R.T., AAM
Modo de trasferencia SATA I
Interfaz SATA
Capacidad 78GB
Tamaño real 80.026.361.856 bytes
RAID Type None
S.M.A.R.T
01 Frecuencia de errores de lectura 200 (200peor) Datos 0000000001
03 Tiempo de giro 183 (165) Datos 0000000718
04 Contador de inicios/paradas 098 (098) Datos 0000000B4A
05 Contador de sectores reasignados 195 (195) Datos 0000000026
07 Frecuencia de errores de búsqueda 200 (200) Datos 0000000000
09 Nº de horas en funcionamiento (POH) 072 (072) Datos 000000521E
0A Contador de reintentos de giro 100 (100) Datos 0000000000
0B Reintentos de recalibrado 100 (100) Datos 0000000000
0C Contador de ciclos de encendido del dispositivo 098 (098) Datos 00000008DE
C2 Temperatura 105 (090) Datos 0000000026
C4 Contador de eventos de reasignado 196 (196) Datos 0000000004
C5 Contador de sectores pendientes 200 (200) Datos 0000000000
C6 Contador de sectores incorregibles 200 (200) Datos 0000000000
C7 Contador de errores CRC en UltraDMA 200 (200) Datos 0000000000
C8 Nº de errores de escritura/Nº de errores en Multi-Zona 200 (200) Datos 0000000000
Temperatura 39 °C
Rango de temperatura bien (menos de 50 °C)
Estado Bueno
Partición 0
ID de la partición Disk #0, Partition #0
Letra del disco C:
Sistema de ficheros NTFS
Número de serie del volumen 1C2D3EC8
Tamaño 15.0GB
Espacio usado 10.1GB (68%)
Espacio libre 4.92GB (32%)
Partición 1
ID de la partición Disk #0, Partition #1
Letra del disco E:
Sistema de ficheros NTFS
Número de serie del volumen F463DBEE
Tamaño 60GB
Espacio usado 58GB (98%)
Espacio libre 1.54GB (2%)
Unidades ópticas
SONY DVD RW DW-Q120A
Tipo de soporte CD-ROM
Nombre SONY DVD RW DW-Q120A
Disponibilidad Funcionando/Plena potencia
Capacidades Acceso aleatorio, Soporte de medios extraíbles
Código de error del administrador de configuración El dispositivo está funcionando correctamente
Configuración de usuario del administrador de configuración FALSO
Unidad D:
Integridad de la unidad VERDADERO
Medio cargado VERDADERO
Bus SCSI 0
Unidad lógica SCSI 0
Puerto SCSI 3
ID destino SCSI 0
Tamaño 590 MB
Estado OK
Velocidad de transferencia 9 KB/S
Nombre del volumen GRTMPVOL_ES
Número de serie del volumen 981253B9
NERO IMAGEDRIVE2 SCSI CdRom Device
Tipo de soporte CD-ROM
Nombre NERO IMAGEDRIVE2 SCSI CdRom Device
Disponibilidad Funcionando/Plena potencia
Capacidades Acceso aleatorio, Soporte de medios extraíbles
Código de error del administrador de configuración El dispositivo está funcionando correctamente
Configuración de usuario del administrador de configuración FALSO
Unidad F:
Medio cargado FALSO
Bus SCSI 0
Unidad lógica SCSI 0
Puerto SCSI 4
ID destino SCSI 0
Estado OK
Audio
Tarjeta de sonido
NVIDIA® nForce™ Audio
Dispositivo de reproducción
NVIDIA® nForce™ Audio
Dispositivo grabador
NVIDIA® nForce™ Audio
Periféricos
Teclado estándar de 101/102 teclas o Microsoft Natural PS/2 Keyboard
Tipo de dispositivo Teclado
Nombre del dispositivo Teclado estándar de 101/102 teclas o Microsoft Natural PS/2 Keyboard
Localización conectado al puerto de teclado
Controlador
Fecha 7-1-2001
Versión 5.1.2600.5512
Archivo C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Archivo C:\WINDOWS\system32\DRIVERS\kbdclass.sys
Mouse compatible PS/2
Tipo de dispositivo Ratón
Nombre del dispositivo Mouse compatible PS/2
Localización conectado al puerto de mouse PS/2
Controlador
Fecha 7-1-2001
Versión 5.1.2600.0
Archivo C:\WINDOWS\system32\DRIVERS\i8042prt.sys
Archivo C:\WINDOWS\system32\DRIVERS\mouclass.sys
Impresoras
doPDF v7 (Impresora por defecto)
Puerto de impresora DOP7:
Procesador de impresión WinPrint
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 300 dpi Color
Estado Desconocido
Driver
Nombre del driver doPDF 7 Printer Driver (v5.00)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\dopdfpr7.dll
HP Deskjet 1000 J110 series
Puerto de impresora USB001
Procesador de impresión WinPrint
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 300 * 300 dpi Color
Estado Desconocido
Driver
Nombre del driver HP Deskjet 1000 J110 series (v6.00)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRV.DLL
hp LaserJet 1010 Series Driver
Puerto de impresora DOT4_001
Procesador de impresión IMFPrint
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 600 dpi
Estado Desconocido
Driver
Nombre del driver hp LaserJet 1010 (v5.312)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\IMFNT5.DLL
HP Officejet 4300 series
Puerto de impresora USB002
Procesador de impresión hpzpp43a
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 600 * 600 dpi Color
Estado Desconocido
Driver
Nombre del driver HP Officejet 4300 series (v6.00)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRV.DLL
Lexmark Universal
Puerto de impresora USB003
Procesador de impresión LMUD064C
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 600 * 600 dpi Color
Estado Desconocido
Driver
Nombre del driver Lexmark Universal (v6.00)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\UNIDRV.DLL
Lexmark Universal PS3
Puerto de impresora LPT1:
Procesador de impresión LMUD054C
Disponibilidad Siempre
Prioridad 1
Doble Ninguno
Calidad de impresión 600 * 600 dpi Color
Estado Desconocido
Driver
Nombre del driver Lexmark Universal PS3 (v6.00)
Ruta del driver C:\WINDOWS\System32\spool\DRIVERS\W32X86\3\PSCRIPT5.DLL
Red
Usted está conectado a Internet
Conexión directa NVIDIA nForce Networking Controller - Minipuerto del administrador de paquetes
Dirección IP 190.77.32.26
Máscara de subred 255.255.224.0
Servidor de puerta de enlace 190.77.32.1
Servidor DNS preferido 200.44.32.12
Servidor DNS alternativo 200.11.248.12
DHCP Activar
Servidor DHCP 200.109.126.42
Dirección IP externa 190.77.32.26
Tipo de adaptador Ethernet
NetBIOS sobre TCP/IP Activar
Tipo de nodo NetBios Tipo de nodo desconocido
Velocidad de enlace 526 kbps
Nombre del PC
Nombre de NetBIOS XV-01
Nombre del DNS xv-01
Nombre de dominio XV-01
Escritorio remoto
Console
Estado Activo
Dominio XV-01
Información de WinInet
Conexión LAN
El sistema local tiene una conexión válida a Internet, pero puede estar o no, conectado actualmente
El sistema local utiliza una red de área local para conectarse a Internet
El sistema local utiliza RAS para conectarse a Internet
Información del Wi-Fi
Wi-Fi no habilitado
Información de WinHTTP
Sesión WinHTTP-Tipo proxy Sin proxy
Sesión proxy
Saltar la sesión proxy
Reintentos de conexión 5
Tiempo de espera de conexión 60000
Versión de HTTP HTTP 1.1
Máximas conexiones por servidor 1.0 INFINITO
Máximas conexiones por servidores INFINITO
Máximo de redirecciones automáticas HTTP 10
Máximo de estados HTTP a la vez 10
Tiempo de espera de envío 30000
Auto detectar IEProxy No
Auto configuración de IEProxy
IEProxy
Saltar IEProxy
Configuración del tipo de acceso del proxy por defecto Sin proxy
Configuración por defecto del proxy
Configuración por defecto para saltar el proxy
Lista de adaptadores
NVIDIA nForce Networking Controller - Minipuerto del administrador de paquetes
Dirección IP 190.77.32.26
Máscara de subred 255.255.224.0
Servidor de puerta de enlace 190.77.32.1
Recursos compartidos de red
transfer E:\Docs\transfer
Documentos c C:\DOCUMENTS AND SETTINGS\ALL USERS\DOCUMENTOS
Conexiones TCP actuales
C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Apache Tomcat 4.0\webapps\Toolbox\StatusClient\StatusClient.exe (432)
Local 127.0.0.1:1030 ESTABLISHED Remota 127.0.0.1:5226 (Analizando... )
C:\Archivos de programa\Hewlett-Packard\Toolbox2.0\Javasoft\JRE\1.3.1\bin\javaw.exe (1308)
Local 0.0.0.0:5225 LISTEN
Local 0.0.0.0:5226 LISTEN
Local 0.0.0.0:8008 LISTEN
Local 127.0.0.1:8005 LISTEN
Local 127.0.0.1:5226 ESTABLISHED Remota 127.0.0.1:1030 (Analizando... )
C:\Archivos de programa\Java\jre6\bin\jqs.exe (1424)
Local 127.0.0.1:5152 LISTEN
C:\WINDOWS\System32\alg.exe (3640)
Local 127.0.0.1:1037 LISTEN
System Process
Local 190.77.32.26:1188 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1195 TIME-WAIT Remota 74.125.226.113:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1196 TIME-WAIT Remota 74.125.226.113:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1197 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1198 TIME-WAIT Remota 74.125.226.113:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1199 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1200 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1201 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1202 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1203 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1204 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1172 TIME-WAIT Remota 74.125.91.139:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1182 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1183 TIME-WAIT Remota 72.14.204.105:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1184 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1185 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1186 TIME-WAIT Remota 74.125.226.113:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1187 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1205 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1189 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1190 TIME-WAIT Remota 74.125.226.114:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1191 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1192 TIME-WAIT Remota 74.125.226.243:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1193 TIME-WAIT Remota 74.125.226.240:80 (Analizando... ) (HTTP)
Local 190.77.32.26:1194 TIME-WAIT Remota 72.14.204.105:80 (Analizando... ) (HTTP)
System Process
Local 0.0.0.0:445 (Windows shares) LISTEN
Local 190.77.32.26:139 (NetBIOS session service) LISTEN
svchost.exe (988)
Local 0.0.0.0:135 (DCE) LISTEN

[RKinner]

Your temps look good right now. If it starts to slow down run speccy again and also process explorer and post both logs.