searchqu in my xp system

I have a XP system, accidentally my wife installed Ilived. The system doesn´t report any problem, but now I have the annoying searchq motor search. I copy the logs from :
Hijack, OTL and aswMBR and wait for instruccions: thanks in advance……

Hijack: log ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 10:17:28 a.m., on 26/06/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\RTHDCPL.EXE
C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe
C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
C:\Archivos de programa\iTunes\iTunesHelper.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe
C:\Archivos de programa\Linksys\CIT300\cit300.exe
C:\Archivos de programa\Skype\Phone\Skype.exe
C:\Archivos de programa\McAfee Security Scan\2.0.181\SSScheduler.exe
C:\Archivos de programa\Windows Desktop Search\WindowsSearch.exe
C:\xampp\apache\bin\httpd.exe
C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Archivos de programa\Bonjour\mDNSResponder.exe
C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
C:\Archivos de programa\Nero\Nero8\InCD\InCDsrv.exe
C:\Archivos de programa\Java\jre6\bin\jqs.exe
C:\xampp\mysql\bin\mysqld.exe
C:\xampp\apache\bin\httpd.exe
C:\Archivos de programa\Nero\Nero8\Nero BackItUp\NBService.exe
C:\WINDOWS\system32\IoctlSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe
C:\Archivos de programa\Microsoft\Search Enhancement Pack\SeaPort\SeaPort.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLIDSVC.EXE
C:\WINDOWS\system32\SearchIndexer.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLIDSvcM.exe
C:\Archivos de programa\iPod\bin\iPodService.exe
C:\WINDOWS\system32\wbem\wmiapsrv.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
C:\DOCUME~1\Jessica\CONFIG~1\Temp\Adobelm_Cleanup.0001
C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
C:\DOCUME~1\Jessica\CONFIG~1\Temp\Adobelm_Cleanup.0001
C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\WINDOWS\system32\rundll32.exe
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\msiexec.exe
C:\Archivos de programa\hijack\Trend Micro\HiJackThis\HiJackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddr
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://kimill.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddr&s;={s…hTerms}&f;=4
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
R3 - URLSearchHook: ToolbarURLSearchHook Class - {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Archivos de programa\TuTVOnline\tbhelper.dll
F2 - REG:system.ini: UserInit=c:\windows\system32\userinit.exe
O1 - Hosts: 74.208.105.171 gs.apple.com
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - (no file)
O2 - BHO: facemoods Helper - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll
O2 - BHO: Search Helper - {6EBF7485-159F-4bff-A14F-B9E3AAC4465B} - C:\Archivos de programa\Microsoft\Search Enhancement Pack\Search Helper\SEPsearchhelperie.dll
O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\Archivos de programa\Microsoft Office\Office12\GrooveShellExtensions.dll
O2 - BHO: Aplicación auxiliar de inicio de sesión de Windows Live ID - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Archivos de programa\Google\Google Toolbar\GoogleToolbar_32.dll
O2 - BHO: AcroIEToolbarHelper Class - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Archivos de programa\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll
O2 - BHO: Java™ Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Archivos de programa\Java\jre6\bin\jp2ssv.dll
O2 - BHO: Windows Live Toolbar Helper - {E15A8DC0-8516-42A1-81EA-DC94EC1ACF10} - C:\Archivos de programa\Windows Live\Toolbar\wltcore.dll
O2 - BHO: JQSIEStartDetectorImpl - {E7E6F031-17CE-4C07-BC86-EABFE594F69C} - C:\Archivos de programa\Java\jre6\lib\deploy\jqs\ie\jqs_plugin.dll
O2 - BHO: TBSB08293 - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Archivos de programa\TuTVOnline\tbcore3.dll
O3 - Toolbar: &Windows; Live Toolbar - {21FA44EF-376D-4D53-9B0F-8A89D3229068} - C:\Archivos de programa\Windows Live\Toolbar\wltcore.dll
O3 - Toolbar: PDF de Adobe - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll
O3 - Toolbar: FreeRIP.com Toolbar - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Archivos de programa\FreeRIP3\toolband.dll
O3 - Toolbar: TuTVOnline - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll
O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Archivos de programa\Google\Google Toolbar\GoogleToolbar_32.dll
O3 - Toolbar: facemoods Toolbar - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll
O4 - HKLM\..\Run: [IgfxTray] C:\WINDOWS\system32\igfxtray.exe
O4 - HKLM\..\Run: [HotKeysCmds] C:\WINDOWS\system32\hkcmd.exe
O4 - HKLM\..\Run: [Persistence] C:\WINDOWS\system32\igfxpers.exe
O4 - HKLM\..\Run: [RTHDCPL] RTHDCPL.EXE
O4 - HKLM\..\Run: [Alcmtr] ALCMTR.EXE
O4 - HKLM\..\Run: [GrooveMonitor] "C:\Archivos de programa\Microsoft Office\Office12\GrooveMonitor.exe"
O4 - HKLM\..\Run: [egui] "C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe" /hide /waitservice
O4 - HKLM\..\Run: [MSConfig] C:\WINDOWS\PCHealth\HelpCtr\Binaries\MSConfig.exe /auto
O4 - HKLM\..\Run: [facemoods] "C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe" /md I
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\QTTask.exe" -atboottime
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe"
O4 - HKLM\..\Run: [iTunesHelper] "C:\Archivos de programa\iTunes\iTunesHelper.exe"
O4 - HKLM\..\Run: [KernelFaultCheck] %systemroot%\system32\dumprep 0 -k
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [swg] "C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Servicio de red')
O4 - HKUS\S-1-5-20\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'SYSTEM')
O4 - HKUS\S-1-5-18\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.EXE (User 'Default user')
O4 - HKUS\.DEFAULT\..\RunOnce: [_nltide_3] rundll32 advpack.dll,LaunchINFSectionEx nLite.inf,C,,4,N (User 'Default user')
O4 - Global Startup: CIT300.lnk = C:\Archivos de programa\Linksys\CIT300\cit300.exe
O4 - Global Startup: Inicio rápido de Adobe Acrobat.lnk = ?
O4 - Global Startup: McAfee Security Scan Plus.lnk = ?
O4 - Global Startup: Windows Search.lnk = C:\Archivos de programa\Windows Desktop Search\WindowsSearch.exe
O8 - Extra context menu item: &FreeRIP; Search - res://C:\Archivos de programa\FreeRIP3\toolband.dll/MENUSEARCH.HTM
O8 - Extra context menu item: Convertir a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir destino de vínculo a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir destino de vínculo en archivo PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir selección a archivo PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppend.html
O8 - Extra context menu item: Convertir selección a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECapture.html
O8 - Extra context menu item: Convertir vínculos seleccionados a PDF de Adobe - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
O8 - Extra context menu item: Convertir vínculos seleccionados a PDF existente - res://C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
O8 - Extra context menu item: E&xportar; a Microsoft Excel - res://C:\ARCHIV~1\MICROS~3\Office12\EXCEL.EXE/3000
O8 - Extra context menu item: Google Sidewiki… - res://C:\Archivos de programa\Google\Google Toolbar\Component\GoogleToolbarDynamic_mui_en_89D8574934B26AC4.dll/cmsidewiki.html
O9 - Extra button: Agregar entrada - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra 'Tools' menuitem: &Agregar; entrada en Windows Live Writer - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Archivos de programa\Windows Live\Writer\WriterBrowserExtension.dll
O9 - Extra button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARCHIV~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra 'Tools' menuitem: &Enviar; a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\ARCHIV~1\MICROS~3\Office12\ONBttnIE.dll
O9 - Extra button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra 'Tools' menuitem: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\ARCHIV~1\MICROS~3\Office12\REFIEBAR.DLL
O9 - Extra button: TuTVOnline - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll
O9 - Extra 'Tools' menuitem: TuTVOnline - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
O18 - Protocol: grooveLocalGWS - {88FED34C-F0CA-4636-A375-3CB6248B04CD} - C:\Archivos de programa\Microsoft Office\Office12\GrooveSystemServices.dll
O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll
O18 - Protocol: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\ARCHIV~1\ARCHIV~1\Skype\SKYPE4~1.DLL
O20 - AppInit_DLLs:
O20 - Winlogon Notify: RailNotification - winlogonnotification.dll (file missing)
O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\system32\browseui.dll
O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\system32\browseui.dll
O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: Apache2.2 - Apache Software Foundation - C:\xampp\apache\bin\httpd.exe
O23 - Service: Apple Mobile Device - Apple Inc. - C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
O23 - Service: Servicio Bonjour (Bonjour Service) - Apple Inc. - C:\Archivos de programa\Bonjour\mDNSResponder.exe
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: ESET HTTP Server (EhttpSrv) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe
O23 - Service: ESET Service (ekrn) - ESET - C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: FileZilla Server FTP server (FileZilla Server) - FileZilla Project - c:\xampp\FileZillaFTP\FileZillaServer.exe
O23 - Service: Servicio de actualización de Google (gupdate) (gupdate) - Unknown owner - C:\Archivos de programa\Google\Update\GoogleUpdate.exe
O23 - Service: Google Update Servicio (gupdatem) (gupdatem) - Unknown owner - C:\Archivos de programa\Google\Update\GoogleUpdate.exe
O23 - Service: Google Software Updater (gusvc) - Google - C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\system32\imapi.exe
O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Archivos de programa\Nero\Nero8\InCD\InCDsrv.exe
O23 - Service: Servicio del iPod (iPod Service) - Apple Inc. - C:\Archivos de programa\iPod\bin\iPodService.exe
O23 - Service: Java Quick Starter (JavaQuickStarterService) - Sun Microsystems, Inc. - C:\Archivos de programa\Java\jre6\bin\jqs.exe
O23 - Service: McAfee Security Scan Component Host Service (McComponentHostService) - McAfee, Inc. - C:\Archivos de programa\McAfee Security Scan\2.0.181\McCHSvc.exe
O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\system32\mnmsrvc.exe
O23 - Service: mysql - Unknown owner - C:\xampp\mysql\bin\mysqld.exe
O23 - Service: Nero BackItUp Scheduler 3 - Nero AG - C:\Archivos de programa\Nero\Nero8\Nero BackItUp\NBService.exe
O23 - Service: Nero Registry InCD Service (NeroRegInCDSrv) - Unknown owner - C:\Archivos de programa\Nero\Nero8\InCD\NBHRegInCDSrv.exe (file missing)
O23 - Service: NMIndexingService - Nero AG - C:\Archivos de programa\Archivos comunes\Nero\Lib\NMIndexingService.exe
O23 - Service: PLFlash DeviceIoControl Service - Prolific Technology Inc. - C:\WINDOWS\system32\IoctlSvc.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Pml Driver HPZ12 - HP - C:\WINDOWS\system32\HPZipm12.exe
O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Cyberlink RichVideo Service(CRVS) (RichVideo) - Unknown owner - C:\Archivos de programa\CyberLink\Shared Files\RichVideo.exe
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: wampapache - Apache Software Foundation - c:\wamp\bin\apache\apache2.2.17\bin\httpd.exe
O23 - Service: wampmysqld - Unknown owner - c:\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe
O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\system32\wbem\wmiapsrv.exe
O23 - Service: Servicio de uso compartido de red del Reproductor de Windows Media (WMPNetworkSvc) - Unknown owner - C:\Archivos de programa\Windows Media Player\WMPNetwk.exe

–
End of file - 19069 bytes

OTL ///////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////


OTL logfile created on: 26/06/2011 10:31:30 a.m. - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\Jessica\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000200A | Country: Venezuela | Language: ESV | Date Format: dd/MM/yyyy

1,98 Gb Total Physical Memory | 0,52 Gb Available Physical Memory | 26,25% Memory free
3,83 Gb Paging File | 2,58 Gb Available in Paging File | 67,46% Paging File free
Paging file location(s): C:\pagefile.sys 2048 5160 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 74,52 Gb Total Space | 10,30 Gb Free Space | 13,82% Space Free | Partition Type: NTFS

Computer Name: BARQUISIMETO | User Name: Jessica | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2011/06/26 10:27:59 | 001,904,128 | —- | M] (AVAST Software) – C:\Documents and Settings\Jessica\Mis documentos\Downloads\aswMBR.exe
PRC - [2011/06/26 10:27:20 | 000,579,072 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jessica\Mis documentos\Downloads\OTL.exe
PRC - [2011/06/26 09:14:04 | 000,059,964 | —- | M] (Macrovision Europe Ltd.) – C:\Documents and Settings\Jessica\Configuración local\Temp\Adobelm_Cleanup.0001
PRC - [2011/05/25 14:06:20 | 000,037,664 | —- | M] (Apple Inc.) – C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe
PRC - [2011/05/07 07:27:16 | 001,010,232 | —- | M] (Google Inc.) – C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
PRC - [2010/12/03 13:48:12 | 008,133,120 | —- | M] () – C:\xampp\mysql\bin\mysqld.exe
PRC - [2010/10/29 14:49:28 | 000,249,064 | —- | M] (Sun Microsystems, Inc.) – C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe
PRC - [2010/10/17 20:02:10 | 000,020,549 | —- | M] (Apache Software Foundation) – C:\xampp\apache\bin\httpd.exe
PRC - [2010/05/13 14:24:11 | 000,069,632 | —- | M] (Adobe Systems) – C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
PRC - [2010/03/25 18:42:36 | 000,388,096 | —- | M] (Trend Micro Inc.) – C:\Archivos de programa\hijack\Trend Micro\HiJackThis\HiJackThis.exe
PRC - [2010/01/15 08:19:20 | 000,255,536 | —- | M] (McAfee, Inc.) – C:\Archivos de programa\McAfee Security Scan\2.0.181\SSScheduler.exe
PRC - [2009/11/24 10:02:04 | 001,036,288 | —- | M] (Microsoft Corporation) – C:\WINDOWS\explorer.exe
PRC - [2009/08/18 11:29:22 | 001,529,728 | —- | M] (Microsoft Corporation) – C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLIDSVC.EXE
PRC - [2009/08/18 11:29:22 | 000,183,152 | —- | M] (Microsoft Corporation) – C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLIDSVCM.EXE
PRC - [2009/03/19 11:44:50 | 000,731,840 | —- | M] (ESET) – C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe
PRC - [2009/03/19 11:44:28 | 002,029,640 | —- | M] (ESET) – C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe
PRC - [2008/02/28 14:04:08 | 001,440,552 | —- | M] (Nero AG) – C:\Archivos de programa\Nero\Nero8\InCD\InCDsrv.exe
PRC - [2006/06/01 16:48:28 | 000,764,416 | —- | M] (Linksys) – C:\Archivos de programa\Linksys\CIT300\cit300.exe
PRC - [2004/12/14 04:44:40 | 000,069,632 | —- | M] (Adobe Systems Incorporated) – C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\Acrobat.exe
PRC - [2004/09/29 12:14:36 | 000,069,632 | —- | M] (HP) – C:\WINDOWS\system32\HPZipm12.exe


========== Modules (SafeList) ==========

MOD - [2011/06/26 10:27:20 | 000,579,072 | —- | M] (OldTimer Tools) – C:\Documents and Settings\Jessica\Mis documentos\Downloads\OTL.exe
MOD - [2010/08/23 11:42:00 | 001,054,208 | —- | M] (Microsoft Corporation) – C:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.2600.6028_x-ww_61e65202\comctl32.dll


========== Win32 Services (SafeList) ==========

SRV - File not found [Auto | Stopped] – – (NeroRegInCDSrv)
SRV - File not found [Disabled | Stopped] – – (HidServ)
SRV - [2011/05/25 14:06:20 | 000,037,664 | —- | M] (Apple Inc.) [Auto | Running] – C:\Archivos de programa\Archivos comunes\Apple\Mobile Device Support\AppleMobileDeviceService.exe – (Apple Mobile Device)
SRV - [2010/12/31 08:39:54 | 008,133,120 | —- | M] () [On_Demand | Stopped] – c:\wamp\bin\mysql\mysql5.5.8\bin\mysqld.exe – (wampmysqld)
SRV - [2010/12/31 08:39:42 | 000,020,549 | —- | M] (Apache Software Foundation) [On_Demand | Stopped] – c:\wamp\bin\apache\apache2.2.17\bin\httpd.exe – (wampapache)
SRV - [2010/12/03 13:48:12 | 008,133,120 | —- | M] () [Auto | Running] – C:\xampp\mysql\bin\mysqld.exe – (mysql)
SRV - [2010/10/17 20:02:10 | 000,020,549 | —- | M] (Apache Software Foundation) [Auto | Running] – C:\xampp\apache\bin\httpd.exe – (Apache2.2)
SRV - [2010/10/17 15:08:42 | 000,742,912 | —- | M] (FileZilla Project) [On_Demand | Stopped] – c:\xampp\FileZillaFTP\FileZillaServer.exe – (FileZilla Server)
SRV - [2010/05/13 14:24:11 | 000,069,632 | —- | M] (Adobe Systems) [On_Demand | Running] – C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe – (Adobe LM Service)
SRV - [2010/01/15 08:19:20 | 000,227,232 | —- | M] (McAfee, Inc.) [On_Demand | Stopped] – C:\Archivos de programa\McAfee Security Scan\2.0.181\McCHSvc.exe – (McComponentHostService)
SRV - [2009/08/18 11:29:22 | 001,529,728 | —- | M] (Microsoft Corporation) [Auto | Running] – C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WLIDSVC.EXE – (wlidsvc)
SRV - [2009/03/19 11:48:08 | 000,020,680 | —- | M] (ESET) [On_Demand | Stopped] – C:\Archivos de programa\ESET\ESET NOD32 Antivirus\EHttpSrv.exe – (EhttpSrv)
SRV - [2009/03/19 11:44:50 | 000,731,840 | —- | M] (ESET) [Auto | Running] – C:\Archivos de programa\ESET\ESET NOD32 Antivirus\ekrn.exe – (ekrn)
SRV - [2008/11/04 01:06:28 | 000,441,712 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\ODSERV.EXE – (odserv)
SRV - [2008/02/28 18:07:48 | 000,529,704 | —- | M] (Nero AG) [On_Demand | Stopped] – C:\Archivos de programa\Archivos comunes\Nero\Lib\NMIndexingService.exe – (NMIndexingService)
SRV - [2008/02/28 14:04:08 | 001,440,552 | —- | M] (Nero AG) [Auto | Running] – C:\Archivos de programa\Nero\Nero8\InCD\InCDsrv.exe – (InCDsrv)
SRV - [2006/10/26 14:03:08 | 000,145,184 | —- | M] (Microsoft Corporation) [On_Demand | Stopped] – C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE – (ose)
SRV - [2006/10/26 13:40:34 | 000,335,872 | —- | M] (Microsoft Corporation) [Auto | Stopped] – C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\mdm.exe – (MDM)
SRV - [2004/09/29 12:14:36 | 000,069,632 | —- | M] (HP) [Auto | Running] – C:\WINDOWS\system32\HPZipm12.exe – (Pml Driver HPZ12)


========== Driver Services (SafeList) ==========

DRV - [2010/07/30 18:59:43 | 000,035,363 | —- | M] () [Kernel | Auto | Running] – C:\WINDOWS\system32\windrvNT.sys – (windrvNT)
DRV - [2010/04/28 07:44:02 | 000,054,760 | —- | M] (Microsoft Corporation) [Kernel | Auto | Running] – C:\WINDOWS\system32\drivers\fssfltr_tdi.sys – (fssfltr)
DRV - [2009/11/24 10:04:24 | 000,009,472 | —- | M] (Microsoft Corporation) [Kernel | System | Stopped] – C:\WINDOWS\System32\drivers\dumpdrv.sys – (DumpDrv)
DRV - [2009/03/19 11:45:38 | 000,093,848 | —- | M] (ESET) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\epfwtdir.sys – (epfwtdir)
DRV - [2009/03/19 11:44:34 | 000,107,256 | —- | M] (ESET) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\ehdrv.sys – (ehdrv)
DRV - [2009/03/19 11:41:38 | 000,113,960 | —- | M] (ESET) [File_System | Auto | Running] – C:\WINDOWS\system32\drivers\eamon.sys – (eamon)
DRV - [2008/04/17 10:03:26 | 004,707,328 | —- | M] (Realtek Semiconductor Corp.) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\RtkHDAud.sys – (IntcAzAudAddService) Service for Realtek HD Audio (WDM)
DRV - [2008/02/28 14:03:58 | 000,040,360 | —- | M] (Nero AG) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\InCDRm.sys – (incdrm)
DRV - [2008/02/28 14:03:58 | 000,038,952 | —- | M] (Nero AG) [Kernel | System | Running] – C:\WINDOWS\system32\drivers\InCDPass.sys – (InCDPass)
DRV - [2008/02/28 14:03:48 | 000,128,424 | —- | M] (Nero AG) [File_System | Disabled | Running] – C:\WINDOWS\system32\drivers\InCDfs.sys – (InCDfs)
DRV - [2007/07/09 10:10:20 | 000,044,416 | —- | M] (Intel Corporation) [Kernel | On_Demand | Running] – C:\WINDOWS\system32\drivers\HECI.sys – (HECI) Intel®
DRV - [2006/11/02 16:51:58 | 000,013,560 | —- | M] (Cyberlink Corp.) [Kernel | Auto | Running] – C:\Archivos de programa\CyberLink\PowerDVD\000.fcl – ({95808DC4-FA4A-4c74-92FE-5B863F82066B})
DRV - [2006/01/12 19:46:28 | 000,252,928 | —- | M] (Ralink Technology, Corp.) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\drivers\rt73.sys – (RT73)
DRV - [2003/09/25 22:15:32 | 000,015,872 | —- | M] (Printing Communications Assoc., Inc. (PCAUSA)) [Kernel | On_Demand | Stopped] – C:\WINDOWS\system32\GTNDIS5.sys – (GTNDIS5)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://kimill.com
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search,SearchAssistant = http://start.facemoods.com/?a=ddr&s;={s…hTerms}&f;=4

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://start.facemoods.com/?a=ddr
IE - HKCU\..\URLSearchHook: {CA3EB689-8F09-4026-AA10-B9534C691CE0} - C:\Archivos de programa\TuTVOnline\tbhelper.dll ()
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = *.local

FF - HKLM\software\mozilla\Thunderbird\Extensions\\[removed]: C:\Archivos de programa\ESET\ESET NOD32 Antivirus\Mozilla Thunderbird [2010/05/11 19:45:50 | 000,000,000 | —D | M]

[2010/05/12 11:54:50 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jessica\Datos de programa\Mozilla\Extensions
[2010/05/12 11:54:50 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Jessica\Datos de programa\Mozilla\Extensions\[removed]
[2010/12/13 08:06:54 | 000,002,035 | —- | M] () – C:\Archivos de programa\Mozilla Firefox\searchplugins\fcmdSrchddr.xml

O1 HOSTS File: ([2011/06/21 08:24:49 | 000,000,928 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: 127.0.0.1 localhost 127.0.0.1 localhost
O1 - Hosts: 74.208.105.171 gs.apple.com
O2 - BHO: (AcroIEHlprObj Class) - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll (Adobe Systems Incorporated)
O2 - BHO: (no name) - {5C255C8A-E604-49b4-9D64-90988571CECB} - No CLSID value found.
O2 - BHO: (CescrtHlpr Object) - {64182481-4F71-486b-A045-B233BD0DA8FC} - C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\bh\facemoods.dll (facemoods.com BHO)
O2 - BHO: (Aplicación auxiliar de inicio de sesión de Windows Live ID) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corporation)
O2 - BHO: (AcroIEToolbarHelper Class) - {AE7CD045-E861-484f-8273-0445EE161910} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O2 - BHO: (Skype add-on for Internet Explorer) - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O2 - BHO: (Google Toolbar Notifier BHO) - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Archivos de programa\Google\GoogleToolbarNotifier\5.6.5805.1910\swg.dll (Google Inc.)
O2 - BHO: (TBSB08293 Class) - {FCBCCB87-9224-4B8D-B117-F56D924BEB18} - C:\Archivos de programa\TuTVOnline\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (FreeRIP.com Toolbar) - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Archivos de programa\FreeRIP3\toolband.dll ()
O3 - HKLM\..\Toolbar: (PDF de Adobe) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKLM\..\Toolbar: (TuTVOnline) - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll ()
O3 - HKLM\..\Toolbar: (facemoods Toolbar) - {DB4E9724-F518-4dfd-9C7C-78B52103CAB9} - C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\facemoodsTlbr.dll (facemoods.com)
O3 - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKCU\..\Toolbar\WebBrowser: (FreeRIP.com Toolbar) - {081230F8-EA50-42A9-983C-D22ABC2EED3B} - C:\Archivos de programa\FreeRIP3\toolband.dll ()
O3 - HKCU\..\Toolbar\WebBrowser: (PDF de Adobe) - {47833539-D0C5-4125-9FA8-0819E2EAAC93} - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O3 - HKCU\..\Toolbar\WebBrowser: (TuTVOnline) - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll ()
O4 - HKLM..\Run: [Alcmtr] C:\WINDOWS\ALCMTR.EXE (Realtek Semiconductor Corp.)
O4 - HKLM..\Run: [egui] C:\Archivos de programa\ESET\ESET NOD32 Antivirus\egui.exe (ESET)
O4 - HKLM..\Run: [facemoods] C:\Archivos de programa\facemoods.com\facemoods\1.4.17.3\facemoodssrv.exe (facemoods.com)
O4 - HKLM..\Run: [KernelFaultCheck] File not found
O4 - HKLM..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Archivos comunes\Java\Java Update\jusched.exe (Sun Microsystems, Inc.)
O4 - HKCU..\Run: [Google Update] File not found
O4 - Startup: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\CIT300.lnk = C:\Archivos de programa\Linksys\CIT300\cit300.exe (Linksys)
O4 - Startup: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Acrobat.lnk = C:\WINDOWS\Installer\{AC76BA86-1034-4700-7760-000000000002}\SC_Acrobat.exe ()
O4 - Startup: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\McAfee Security Scan Plus.lnk = C:\Archivos de programa\McAfee Security Scan\2.0.181\SSScheduler.exe (McAfee, Inc.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: HonorAutoRunSetting = 1
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 145
O8 - Extra context menu item: &FreeRIP; Search - C:\Archivos de programa\FreeRIP3\toolband.dll ()
O8 - Extra context menu item: Convertir a PDF de Adobe - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir a PDF existente - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir destino de vínculo a PDF existente - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir destino de vínculo en archivo PDF de Adobe - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir selección a archivo PDF existente - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir selección a PDF de Adobe - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir vínculos seleccionados a PDF de Adobe - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O8 - Extra context menu item: Convertir vínculos seleccionados a PDF existente - C:\Archivos de programa\Adobe\Acrobat 7.0\Acrobat\AcroIEFavClient.dll (Adobe Systems Incorporated)
O9 - Extra Button: Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra 'Tools' menuitem : Skype add-on for Internet Explorer - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O9 - Extra Button: TuTVOnline - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll ()
O9 - Extra 'Tools' menuitem : TuTVOnline - {C86FF9FA-AEED-451B-A9CC-39A53173AE2E} - C:\Archivos de programa\TuTVOnline\tbcore3.dll ()
O10 - NameSpace_Catalog5\Catalog_Entries\000000000004 [] - C:\Archivos de programa\Bonjour\mdnsNSP.dll (Apple Inc.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-0016-0000-0024-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_24)
O16 - DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} http://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab (Reg Error: Key error.)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 10.1.193.12 10.1.193.13
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL (Microsoft Corporation)
O18 - Protocol\Handler\ms-help {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Help\hxds.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Archivos de programa\Archivos comunes\Skype\Skype4COM.dll (Skype Technologies)
O18 - Protocol\Handler\skype-ie-addon-data {91774881-D725-4E58-B298-07617B9B86A8} - C:\Archivos de programa\Skype\Toolbars\Internet Explorer\skypeieplugin.dll (Skype Technologies S.A.)
O18 - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - Winlogon\Notify\RailNotification: DllName - Reg Error: Invalid data type. - Reg Error: Invalid data type. File not found
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O24 - Desktop WallPaper:
O24 - Desktop BackupWallPaper: C:\Documents and Settings\Jessica\Configuración local\Datos de programa\Microsoft\Wallpaper1.bmp
O28 - HKLM ShellExecuteHooks: {56F9679E-7826-4C84-81F3-532071A8BCC5} - C:\Archivos de programa\Windows Desktop Search\MSNLNamespaceMgr.dll (Microsoft Corporation)
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2010/05/11 16:44:20 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/06/26 10:16:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Menú Inicio\Programas\HiJackThis
[2011/06/26 10:16:40 | 000,000,000 | —D | C] – C:\Archivos de programa\hijack
[2011/06/26 09:03:09 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\boost_interprocess
[2011/06/25 12:25:26 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Configuración local\Datos de programa\PackageAware
[2011/06/21 08:27:35 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Datos de programa\Apple Computer
[2011/06/21 08:21:13 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\iTunes
[2011/06/21 08:20:01 | 000,000,000 | —D | C] – C:\Archivos de programa\iPod
[2011/06/21 08:19:58 | 000,000,000 | —D | C] – C:\Archivos de programa\iTunes
[2011/06/21 08:14:39 | 000,000,000 | —D | C] – C:\Archivos de programa\Bonjour
[2011/06/15 23:26:43 | 000,000,000 | —D | C] – C:\fcc05db23192bab834fa39ddc9
[2011/06/15 19:46:45 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Escritorio\Carpeta sandalias
[2011/06/09 13:14:23 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\WampServer
[2011/06/09 13:13:16 | 000,000,000 | —D | C] – C:\wamp
[2011/06/09 09:37:20 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Escritorio\Carteras
[2011/06/07 12:08:00 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Menú Inicio\Programas\Apache Friends
[2011/06/07 12:04:16 | 000,000,000 | —D | C] – C:\xampp
[2011/06/03 22:22:52 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\SSScanAppDataDir
[2011/06/03 22:22:33 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\MSScanAppDataDir
[2011/06/03 22:16:31 | 000,000,000 | —D | C] – C:\Documents and Settings\Jessica\Escritorio\revista
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/06/26 10:34:00 | 000,000,492 | -H– | M] () – C:\WINDOWS\tasks\User_Feed_Synchronization-{55A902BF-C597-4DBB-8537-A2D5A29593AC}.job
[2011/06/26 10:30:00 | 000,001,136 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1935655697-1715567821-1417001333-1004UA.job
[2011/06/26 10:16:59 | 000,002,581 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\HiJackThis.lnk
[2011/06/26 09:50:13 | 000,001,040 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2011/06/26 09:03:08 | 000,002,363 | —- | M] () – C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Acrobat.lnk
[2011/06/26 09:03:05 | 000,001,036 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2011/06/26 09:03:03 | 000,002,262 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/06/26 09:03:01 | 2121,588,736 | -HS- | M] () – C:\hiberfil.sys
[2011/06/26 09:03:01 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/06/25 17:30:00 | 000,001,084 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1935655697-1715567821-1417001333-1004Core.job
[2011/06/25 08:06:13 | 000,105,984 | —- | M] () – C:\Documents and Settings\Jessica\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2011/06/24 18:43:10 | 000,000,069 | —- | M] () – C:\WINDOWS\NeroDigital.ini
[2011/06/21 08:24:49 | 000,000,928 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts
[2011/06/21 08:21:13 | 000,001,583 | —- | M] () – C:\Documents and Settings\All Users\Escritorio\iTunes.lnk
[2011/06/21 08:00:04 | 000,000,928 | —- | M] () – C:\WINDOWS\System32\drivers\etc\hosts.umbrella
[2011/06/20 08:18:01 | 000,000,298 | —- | M] () – C:\WINDOWS\tasks\AppleSoftwareUpdate.job
[2011/06/16 09:05:13 | 000,022,493 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\roland.pdf
[2011/06/15 23:26:35 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/06/15 23:24:41 | 000,532,314 | —- | M] () – C:\WINDOWS\System32\perfh00A.dat
[2011/06/15 23:24:41 | 000,444,038 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/06/15 23:24:41 | 000,101,640 | —- | M] () – C:\WINDOWS\System32\perfc00A.dat
[2011/06/15 23:24:41 | 000,072,296 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/06/12 21:41:25 | 000,029,639 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\abril.pdf
[2011/06/11 14:40:24 | 000,002,307 | —- | M] () – C:\Documents and Settings\All Users\Escritorio\Skype.lnk
[2011/06/09 18:55:28 | 000,000,511 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\WampServer.lnk
[2011/06/09 17:42:44 | 000,302,902 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\enf23-eng.pdf
[2011/06/09 17:34:15 | 000,316,302 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\enf23-fra.pdf
[2011/06/08 11:30:53 | 000,015,064 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\cond 04 y 05.pdf
[2011/06/08 07:50:36 | 000,010,548 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\folleto.aspx
[2011/06/07 12:08:00 | 000,000,528 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\XAMPP Control Panel.lnk
[2011/06/03 17:41:52 | 000,030,784 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\Estado de cuenta II.pdf
[2011/06/03 17:40:42 | 000,028,856 | —- | M] () – C:\Documents and Settings\Jessica\Escritorio\Estado de cuenta I.pdf
[2011/05/30 17:41:34 | 005,967,360 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshtml.dll
[5 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[2 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/06/26 10:16:40 | 000,002,581 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\HiJackThis.lnk
[2011/06/21 08:21:13 | 000,001,583 | —- | C] () – C:\Documents and Settings\All Users\Escritorio\iTunes.lnk
[2011/06/16 09:05:13 | 000,022,493 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\roland.pdf
[2011/06/12 21:41:25 | 000,029,639 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\abril.pdf
[2011/06/09 17:42:46 | 000,302,902 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\enf23-eng.pdf
[2011/06/09 17:34:15 | 000,316,302 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\enf23-fra.pdf
[2011/06/09 13:14:23 | 000,000,511 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\WampServer.lnk
[2011/06/08 11:30:53 | 000,015,064 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\cond 04 y 05.pdf
[2011/06/08 07:50:50 | 000,010,548 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\folleto.aspx
[2011/06/07 12:08:00 | 000,000,528 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\XAMPP Control Panel.lnk
[2011/06/03 17:41:52 | 000,030,784 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\Estado de cuenta II.pdf
[2011/06/03 17:40:42 | 000,028,856 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\Estado de cuenta I.pdf
[2011/05/29 21:32:03 | 054,160,162 | —- | C] () – C:\Documents and Settings\Jessica\Escritorio\Logo_Design_Workbook.pdf
[2011/01/24 20:12:07 | 000,042,464 | -H– | C] () – C:\WINDOWS\System32\mlfcache.dat
[2011/01/18 10:21:49 | 000,000,032 | —- | C] () – C:\WINDOWS\CD_Start.INI
[2010/11/01 22:31:03 | 000,094,208 | —- | C] () – C:\WINDOWS\System32\GTW32N50.dll
[2010/07/30 18:59:32 | 000,035,363 | —- | C] () – C:\WINDOWS\System32\windrvNT.sys
[2010/07/30 18:59:30 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\suppdll.dll
[2010/06/21 07:43:43 | 000,000,000 | —- | C] () – C:\Documents and Settings\Jessica\Datos de programa\lw-220208319605258362can-write-test
[2010/06/03 13:20:11 | 000,105,984 | —- | C] () – C:\Documents and Settings\Jessica\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/05/13 17:05:34 | 000,028,572 | —- | C] () – C:\WINDOWS\cdplayer.ini
[2010/05/13 16:59:18 | 000,001,302 | —- | C] () – C:\Documents and Settings\All Users\Datos de programa\ss.ini
[2010/05/13 16:58:51 | 000,000,034 | —- | C] () – C:\Documents and Settings\Jessica\Datos de programa\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/05/13 16:58:39 | 000,000,033 | —- | C] () – C:\Documents and Settings\All Users\Datos de programa\{081230F8-EA50-42A9-983C-D22ABC2EED3B}.ini
[2010/05/11 19:51:33 | 000,000,048 | -H– | C] () – C:\WINDOWS\System32\ezsidmv.dat
[2010/05/11 19:35:16 | 000,068,736 | —- | C] () – C:\WINDOWS\hpoins05.dat
[2010/05/11 19:35:16 | 000,019,696 | —- | C] () – C:\WINDOWS\hpomdl05.dat
[2010/05/11 19:31:16 | 000,000,069 | —- | C] () – C:\WINDOWS\NeroDigital.ini
[2010/05/11 16:52:15 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2010/05/11 16:47:15 | 000,067,560 | —- | C] () – C:\Documents and Settings\LocalService\Configuración local\Datos de programa\FontCache3.0.0.0.dat
[2010/05/11 16:40:19 | 000,021,900 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2010/05/11 16:39:46 | 000,052,836 | —- | C] () – C:\WINDOWS\System32\zlib1.dll
[2010/05/11 16:39:39 | 000,162,304 | —- | C] () – C:\WINDOWS\System32\libpng13.dll
[2010/05/11 16:39:38 | 000,394,752 | —- | C] () – C:\WINDOWS\System32\cygwinb19.dll
[2010/05/11 16:39:31 | 000,009,216 | —- | C] () – C:\WINDOWS\System32\PSSetupNativeUtils.exe
[2010/05/11 16:39:05 | 000,106,605 | —- | C] () – C:\WINDOWS\System32\structuredqueryschema.bin
[2010/05/11 16:39:05 | 000,018,904 | —- | C] () – C:\WINDOWS\System32\structuredqueryschematrivial.bin
[2010/05/11 16:39:04 | 000,023,640 | —- | C] () – C:\WINDOWS\System32\idxcntrs.ini
[2010/05/11 16:39:04 | 000,016,892 | —- | C] () – C:\WINDOWS\System32\gthrctr.ini
[2010/05/11 16:39:04 | 000,016,164 | —- | C] () – C:\WINDOWS\System32\gsrvctr.ini
[2010/05/11 11:31:37 | 000,004,205 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2010/05/11 11:27:00 | 000,147,456 | —- | C] () – C:\WINDOWS\System32\igfxCoIn_v4926.dll
[2010/05/11 11:27:00 | 000,104,636 | —- | C] () – C:\WINDOWS\System32\igmedcompkrn.dll
[2010/05/11 11:26:59 | 001,843,784 | —- | C] () – C:\WINDOWS\System32\igklg400.dll
[2010/05/11 11:26:59 | 001,399,880 | —- | C] () – C:\WINDOWS\System32\igklg450.dll
[2010/05/11 11:25:39 | 000,272,576 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2009/11/24 10:05:31 | 000,230,768 | —- | C] () – C:\WINDOWS\System32\OGAEXEC.exe
[2009/11/24 10:04:24 | 000,084,784 | —- | C] () – C:\WINDOWS\System32\fciv.exe
[2008/04/14 07:04:38 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\Dcache.bin
[2006/12/31 06:57:08 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2001/10/06 07:28:36 | 000,004,463 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2001/10/06 07:28:34 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2001/08/24 05:30:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2001/08/24 05:30:00 | 000,532,314 | —- | C] () – C:\WINDOWS\System32\perfh00A.dat
[2001/08/24 05:30:00 | 000,444,038 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2001/08/24 05:30:00 | 000,403,816 | —- | C] () – C:\WINDOWS\System32\OGACheckControl.dll
[2001/08/24 05:30:00 | 000,317,534 | —- | C] () – C:\WINDOWS\System32\perfi00A.dat
[2001/08/24 05:30:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2001/08/24 05:30:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2001/08/24 05:30:00 | 000,101,640 | —- | C] () – C:\WINDOWS\System32\perfc00A.dat
[2001/08/24 05:30:00 | 000,072,296 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2001/08/24 05:30:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2001/08/24 05:30:00 | 000,036,284 | —- | C] () – C:\WINDOWS\System32\perfd00A.dat
[2001/08/24 05:30:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2001/08/24 05:30:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat

< End of report >


OTL EXTRAS LOGS ////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////


OTL Extras logfile created on: 26/06/2011 10:31:30 a.m. - Run 1
OTL by OldTimer - Version 3.2.24.1 Folder = C:\Documents and Settings\Jessica\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.6001.18702)
Locale: 0000200A | Country: Venezuela | Language: ESV | Date Format: dd/MM/yyyy

1,98 Gb Total Physical Memory | 0,52 Gb Available Physical Memory | 26,25% Memory free
3,83 Gb Paging File | 2,58 Gb Available in Paging File | 67,46% Paging File free
Paging file location(s): C:\pagefile.sys 2048 5160 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 74,52 Gb Total Space | 10,30 Gb Free Space | 13,82% Space Free | Partition Type: NTFS

Computer Name: BARQUISIMETO | User Name: Jessica | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:\Archivos de programa\VideoLAN\VLC\vlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [Lock folder with Folder Lock] – G:\Nueva carpeta (2)\Folder Lock.exe %1
Directory [PlayWithVLC] – "C:\Archivos de programa\VideoLAN\VLC\vlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"FirstRunDisabled" = 1
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 1
"DoNotAllowExceptions" = 0
"DisableNotifications" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\GloballyOpenPorts\List]
"5985:TCP" = 5985:TCP:*:Disabled:Administración remota de Windows
"80:TCP" = 80:TCP:*:Disabled:Administración remota de Windows - Modo de compatibilidad (HTTP de entrada)

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]
"C:\Archivos de programa\Veoh Networks\VeohWebPlayer\veohwebplayer.exe" = C:\Archivos de programa\Veoh Networks\VeohWebPlayer\veohwebplayer.exe:*:Enabled:Veoh Web Player
"C:\Archivos de programa\uTorrent\uTorrent.exe" = C:\Archivos de programa\uTorrent\uTorrent.exe:*:Enabled:µTorrent – (BitTorrent, Inc.)
"C:\Documents and Settings\Jessica\Mis documentos\Downloads\Nueva carpeta\AoE1 Gold Edition Spa\EMPIRESX.EXE" = C:\Documents and Settings\Jessica\Mis documentos\Downloads\Nueva carpeta\AoE1 Gold Edition Spa\EMPIRESX.EXE:*:Enabled:Age of Empires, the Rise of Rome – (Microsoft Corporation)
"C:\Archivos de programa\Ares\Ares.exe" = C:\Archivos de programa\Ares\Ares.exe:*:Enabled:Ares p2p for windows
"C:\Archivos de programa\LimeWire\LimeWire.exe" = C:\Archivos de programa\LimeWire\LimeWire.exe:*:Disabled:LimeWire – (Lime Wire, LLC)
"C:\Archivos de programa\Vuze\Azureus.exe" = C:\Archivos de programa\Vuze\Azureus.exe:*:Enabled:Azureus / Vuze
"C:\Archivos de programa\Raptr\raptr.exe" = C:\Archivos de programa\Raptr\raptr.exe:*:Enabled:Raptr Client – ()
"C:\Archivos de programa\Raptr\raptr_im.exe" = C:\Archivos de programa\Raptr\raptr_im.exe:*:Enabled:Raptr IM – ()
"C:\Archivos de programa\easyMule\emule.exe" = C:\Archivos de programa\easyMule\emule.exe:*:Enabled:easyMule
"C:\Archivos de programa\Soulseek\slsk.exe" = C:\Archivos de programa\Soulseek\slsk.exe:*:Enabled:SoulSeek – ()
"C:\Documents and Settings\Jessica\Mis documentos\Downloads\tinyumbrella-4.21.08.exe" = C:\Documents and Settings\Jessica\Mis documentos\Downloads\tinyumbrella-4.21.08.exe:*:Enabled:TinyUmbrella - Save your SHSH!
"C:\Documents and Settings\Jessica\Mis documentos\Downloads\tinyumbrella-4.21.07.exe" = C:\Documents and Settings\Jessica\Mis documentos\Downloads\tinyumbrella-4.21.07.exe:*:Enabled:TinyUmbrella - Save your SHSH!
"C:\Archivos de programa\Java\jre6\bin\java.exe" = C:\Archivos de programa\Java\jre6\bin\java.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\Archivos de programa\Java\jre6\bin\javaw.exe" = C:\Archivos de programa\Java\jre6\bin\javaw.exe:*:Enabled:Java™ Platform SE binary – (Sun Microsystems, Inc.)
"C:\xampp\mysql\bin\mysqld.exe" = C:\xampp\mysql\bin\mysqld.exe:*:Enabled:mysqld – ()
"C:\xampp\xampp-control.exe" = C:\xampp\xampp-control.exe:*:Enabled:XAMPP Control Panel – ()
"C:\wamp\bin\apache\Apache2.2.17\bin\httpd.exe" = C:\wamp\bin\apache\Apache2.2.17\bin\httpd.exe:*:Enabled:Apache HTTP Server – (Apache Software Foundation)


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{0840B4D6-7DD1-4187-8523-E6FC0007EFB7}" = Ayudante para el inicio de sesión de Windows Live ID
"{0D5B5ED2-3E38-4585-B1F3-64B2A9EA95D6}_is1" = BusinessCards MX
"{0DC86BEC-5CE3-413A-BB61-C40A3D186B24}" = Scan
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{205C6BDD-7B73-42DE-8505-9A093F35A238}" = Herramienta de carga de Windows Live
"{21DD56B6-A7C1-4EA6-BC53-28A63A4A1820}" = Windows Live Toolbar
"{22B775E7-6C42-4FC5-8E10-9A5E3257BD94}" = MSVCRT
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{23C12370-3A82-4558-B727-F345B473AD87}" = BlackBerry Device Software Updater
"{26A24AE4-039D-4CA4-87B4-2F83216020FF}" = Java™ 6 Update 24
"{2B83A043-BA8C-4164-98AA-29529D0BE756}" = Windows Live Essentials
"{3175E049-F9A9-4A3D-8F19-AC9FB04514D1}" = Windows Live Communications Platform
"{350C9C0A-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{3921A67A-5AB1-4E48-9444-C71814CF3027}" = VCRedistSetup
"{3C5F1B30-B10B-4579-86DD-D00F66213322}" = Nero 8
"{45A66726-69BC-466B-A7A4-12FCBA4883D7}" = HiJackThis
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4CBA3D4C-8F51-4D60-B27E-F6B641C571E7}" = Microsoft Search Enhancement Pack
"{501451DE-5808-4599-B544-8BD0915B6B24}_is1" = FreeRIP v3.40
"{5469D537-9B44-4c78-BF2D-5F9807564F74}" = HP PSC & OfficeJet 4.7
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{57752979-A1C9-4C02-856B-FBB27AC4E02C}" = QuickTime
"{5EBC884A-3FC9-4359-A03C-94BF082429F7}" = CIT300
"{655CB07D-C944-40BE-B93F-55957CAC7625}" = AiO_Scan
"{6811CAA0-BF12-11D4-9EA1-0050BAE317E1}" = PowerDVD
"{7E6066E6-8B5B-4100-B0FA-1D9E9B663CBA}" = iTunes
"{83169D43-4660-4347-BC95-E9D6E6BE65CE}" = Paquete de idioma de Microsoft .NET Framework 1.1 Service Pack 1 - ESN
"{84E6A538-D3AE-4510-B32F-2415361D2770}" = Windows Live Protección Infantil
"{85AC0FFA-643D-3103-9310-7086ECB0C36C}" = Paquete de idioma de Microsoft .NET Framework 2.0 Service Pack 2 - ESN
"{8777AC6D-89F9-4793-8266-DE406F343E89}" = QFolder
"{8924FD04-AFF1-4387-B08B-6A979485F2BD}" = Windows Live Call
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8A74E887-8F0F-4017-AF53-CBA42211AAA5}" = Microsoft Sync Framework Runtime Native v1.0 (x86)
"{8E5233E1-7495-44FB-8DEB-4BE906D59619}" = Junk Mail filter update
"{90120000-0010-0C0A-0000-0000000FF1CE}" = Microsoft Software Update for Web Folders (Spanish) 12
"{90120000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2007
"{90120000-0015-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2007
"{90120000-0016-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2007
"{90120000-0018-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2007
"{90120000-0019-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2007
"{90120000-001A-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2007
"{90120000-001B-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2007
"{90120000-001F-0403-0000-0000000FF1CE}_ENTERPRISE_{4B47C31E-46B0-462B-BEE4-DC383B6A1F2A}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2007
"{90120000-001F-0409-0000-0000000FF1CE}_ENTERPRISE_{ABDDE972-355B-4AF1-89A8-DA50B7B5C045}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2007
"{90120000-001F-040C-0000-0000000FF1CE}_ENTERPRISE_{F580DDD5-8D37-4998-968E-EBB76BB86787}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2007
"{90120000-001F-0416-0000-0000000FF1CE}_ENTERPRISE_{75EBE365-7FC5-4720-A7D3-804BF550D1BC}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2007
"{90120000-001F-042D-0000-0000000FF1CE}_ENTERPRISE_{E62E1AA9-F2F1-4230-8EC7-5D90ECCDFE1A}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2007
"{90120000-001F-0456-0000-0000000FF1CE}_ENTERPRISE_{D93B4372-B042-4AB2-A657-C5C5C25F8BAC}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2007
"{90120000-001F-0C0A-0000-0000000FF1CE}_ENTERPRISE_{187308AB-5FA7-4F14-9AB9-D290383A10D9}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2007
"{90120000-0030-0000-0000-0000000FF1CE}" = Microsoft Office Enterprise 2007
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{0B36C6D6-F5D8-4EAF-BF94-4376A230AD5B}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-0030-0000-0000-0000000FF1CE}_ENTERPRISE_{3D019598-7B59-447A-80AE-815B703B84FF}" = Security Update for Microsoft Office system 2007 (972581)
"{90120000-0044-0C0A-0000-0000000FF1CE}" = Microsoft Office InfoPath MUI (Spanish) 2007
"{90120000-0044-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2007
"{90120000-006E-0C0A-0000-0000000FF1CE}_ENTERPRISE_{6113C11D-BACA-4D8E-8002-03C8D06FD5E6}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2007
"{90120000-00A1-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{90120000-00BA-0C0A-0000-0000000FF1CE}" = Microsoft Office Groove MUI (Spanish) 2007
"{90120000-00BA-0C0A-0000-0000000FF1CE}_ENTERPRISE_{91A7F72A-3273-4C1E-8BE0-BC9DD0D9345C}" = 2007 Microsoft Office Suite Service Pack 2 (SP2)
"{92E4A65F-7007-3357-A69A-167F71A337BD}" = Paquete de idioma de Microsoft .NET Framework 3.5 SP1 - esn
"{95120000-00B9-0409-0000-0000000FF1CE}" = Microsoft Application Error Reporting
"{95120000-0122-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{981029E0-7FC9-4CF3-AB39-6F133621921A}" = Skype Toolbars
"{9850E3EB-69A6-428C-9A23-C64E650809CB}" = Cliente de Windows Rights Management con Service Pack 2
"{98B6FB8A-8638-4037-AD44-CF7D0EEAB875}_is1" = TypingMaster Pro
"{9D669429-A2E4-4793-B7A0-283D259F39AF}" = Adobe Photoshop Lightroom 2.5
"{A1F66FC9-11EE-4F2F-98C9-16F8D1E69FB7}" = Segoe UI
"{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}" = Microsoft .NET Framework 3.0 Service Pack 2
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-1034-4700-7760-000000000002}" = Adobe Acrobat 7.0 Professional - Español, Italiano, Português
"{B3575D00-27EF-49C2-B9E0-14B3D954E992}" = Apple Application Support
"{B8583CB3-8ABE-407E-8BC6-F9A83EAC9133}" = Windows Live Writer
"{BD64AF4A-8C80-4152-AD77-FCDDF05208AB}" = Microsoft Sync Framework Services Native v1.0 (x86)
"{BDEDB104-4067-3D5E-81F0-DBEBFE856B45}" = Paquete de idioma de Microsoft .NET Framework 3.0 Service Pack 2 - ESN
"{BEC001F9-0451-4396-92D7-E1A4E7854BF3}" = Windows Live Mail
"{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}" = Microsoft .NET Framework 2.0 Service Pack 2
"{C23CD6DA-1958-43A5-ADD0-59396572E02E}" = Apple Mobile Device Support
"{C2E4B5BD-32DB-4817-A060-341AB17C3F90}" = Bonjour
"{C41300B9-185D-475E-BFEC-39EF732F19B1}" = Apple Software Update
"{C4156B59-DD7E-40DF-AF08-E568A27A6409}" = Windows Live Messenger
"{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}" = Microsoft .NET Framework 1.1 Service Pack 1
"{CE2CDD62-0124-36CA-84D3-9F4DCF5C5BD9}" = Microsoft .NET Framework 3.5 SP1
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.2
"{E01AB74B-991A-49C2-99F8-3D3682DC9D8E}" = ESET NOD32 Antivirus
"{EC905264-BCFE-423B-9C42-C3A106266790}" = SP2 con compatibilidad hacia atrás con cliente de Windows Rights Management
"{F0E12BBA-AD66-4022-A453-A1C8A0C4D570}" = Microsoft Choice Guard
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{F40BBEC7-C2A4-4A00-9B24-7A055A2C5262}" = Microsoft Office Live Add-in 1.5
"Adobe Acrobat 7.0 Professional - Español, Italiano, Português" = Adobe Acrobat 7.0 Professional - Español, Italiano, Português
"Adobe Flash Player ActiveX" = Adobe Flash Player 10 ActiveX
"Adobe Flash Player Plugin" = Adobe Flash Player 10 Plugin
"Adobe Shockwave Player" = Adobe Shockwave Player 11.5
"ENTERPRISE" = Microsoft Office Enterprise 2007
"ESET 3.0 Fix 2050 v2 x Dasumo" = ESET 3.0 Fix 2050 v2 x Dasumo
"facemoods" = facemoods
"HDMI" = Intel® Graphics Media Accelerator Driver
"HP Photo & Imaging" = HP Image Zone 4.7
"JDownloader" = JDownloader
"LimeWire" = LimeWire 5.5.9
"Magic ISO Maker v5.4 (build 0239)" = Magic ISO Maker v5.4 (build 0239)
"McAfee Security Scan" = McAfee Security Scan Plus
"Microsoft .NET Framework 1.1 (1033)" = Microsoft .NET Framework 1.1
"MSNINST" = MSN
"Raptr" = Raptr
"Soulseek" = SoulSeek Client 156c
"Traducción al Español de ESET NOD 32 3.0 1.00" = Traducción al Español de ESET NOD 32 3.0 1.00
"uTorrent" = µTorrent
"VLC media player" = VLC media player 1.1.7
"WampServer 2_is1" = WampServer 2.1
"WinLiveSuite_Wave3" = Windows Live Essentials
"WinRAR archiver" = WinRAR archiver
"xampp" = XAMPP 1.7.4
"Youda Survivor 1.00" = Youda Survivor 1.00
"YTdetect" = Yahoo! Detect

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 09/06/2011 05:17:44 p.m. | Computer Name = BARQUISIMETO | Source = MySQL | ID = 100
Description = Do you already have another mysqld server running on port: 3306 ? For
more information, see Help and Support Center at http://www.mysql.com.

Error - 09/06/2011 05:17:44 p.m. | Computer Name = BARQUISIMETO | Source = MySQL | ID = 100
Description = Aborting For more information, see Help and Support Center at http://www.mysql.com.



Error - 09/06/2011 07:42:19 p.m. | Computer Name = BARQUISIMETO | Source = Application Error | ID = 1000
Description = Aplicación con errores: wordpad.exe, versión: 5.1.2600.6010, módulo
con error: wordpad.exe, versión 5.1.2600.6010, dirección de error 0x0001ab75.

Error - 09/06/2011 08:01:29 p.m. | Computer Name = BARQUISIMETO | Source = PerfNet | ID = 2004
Description = No se puede abrir el servicio Servidor. No se devolverán datos de rendimiento
del servidor. El código de error devuelto está en los datos DWORD 0.

Error - 09/06/2011 08:17:04 p.m. | Computer Name = BARQUISIMETO | Source = Apache Service | ID = 3299
Description = The Apache service named reported the following error: >>> (OS 10048)Sólo
se permite un uso de cada dirección de socket (protocolo/dirección de red/puerto)
: make_sock: could not bind to address 0.0.0.0:80 .

Error - 09/06/2011 08:17:04 p.m. | Computer Name = BARQUISIMETO | Source = Apache Service | ID = 3299
Description = The Apache service named reported the following error: >>> no listening
sockets available, shutting down .

Error - 09/06/2011 08:17:04 p.m. | Computer Name = BARQUISIMETO | Source = Apache Service | ID = 3299
Description = The Apache service named reported the following error: >>> Unable
to open logs .

Error - 09/06/2011 08:17:06 p.m. | Computer Name = BARQUISIMETO | Source = MySQL | ID = 100
Description = Can't start server: Bind on TCP/IP port: No such file or directory

For
more information, see Help and Support Center at http://www.mysql.com.

Error - 09/06/2011 08:17:06 p.m. | Computer Name = BARQUISIMETO | Source = MySQL | ID = 100
Description = Do you already have another mysqld server running on port: 3306 ? For
more information, see Help and Support Center at http://www.mysql.com.

Error - 09/06/2011 08:17:06 p.m. | Computer Name = BARQUISIMETO | Source = MySQL | ID = 100
Description = Aborting For more information, see Help and Support Center at http://www.mysql.com.



[ OSession Events ]
Error - 07/12/2010 03:08:58 p.m. | Computer Name = BARQUISIMETO | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 0, Application Name: Microsoft Office Word, Application Version:
12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session lasted 3
seconds with 0 seconds of active time. This session ended with a crash.

Error - 25/04/2011 05:47:08 p.m. | Computer Name = BARQUISIMETO | Source = Microsoft Office 12 Sessions | ID = 7001
Description = ID: 3, Application Name: Microsoft Office PowerPoint, Application
Version: 12.0.6545.5000, Microsoft Office Version: 12.0.6425.1000. This session
lasted 11 seconds with 0 seconds of active time. This session ended with a crash.

[ System Events ]
Error - 09/04/2011 03:05:51 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 09/04/2011 04:04:45 p.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 10/04/2011 06:19:26 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 11/04/2011 07:00:33 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 11/04/2011 08:58:03 p.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 12/04/2011 05:15:25 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 13/04/2011 06:21:44 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 11/05/2033 01:57:20 p.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7000
Description = El servicio Nero Registry InCD Service no pudo iniciarse debido al
siguiente error: %%2

Error - 11/05/2033 01:57:20 p.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7031
Description = El servicio ESET Service terminó inesperadamente. Lo ha hecho 1 veces.
Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.

Error - 24/05/2011 12:31:57 a.m. | Computer Name = BARQUISIMETO | Source = Service Control Manager | ID = 7031
Description = El servicio ESET Service terminó inesperadamente. Lo ha hecho 1 veces.
Se realizará la siguiente acción correctora en 0 milisegundos: Reiniciar el servicio.


< End of report >

aswMBL logs //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////

aswMBR version 0.9.7.675 Copyright© 2011 AVAST Software
Run date: 2011-06-26 10:28:54
—————————–
10:28:54.734 OS Version: Windows 5.1.2600 Service Pack 3
10:28:54.734 Number of processors: 2 586 0x605
10:28:54.734 ComputerName: BARQUISIMETO UserName: Jessica
10:28:56.687 Initialize success
10:48:13.093 Disk 0 (boot) \Device\Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3
10:48:13.093 Disk 0 Vendor: SAMSUNG_HD080HJ/P ZH100-51 Size: 76319MB BusType: 3
10:48:15.140 Disk 0 MBR read successfully
10:48:15.140 Disk 0 MBR scan
10:48:15.140 Disk 0 unknown MBR code
10:48:17.140 Disk 0 scanning sectors +156280320
10:48:17.156 Disk 0 scanning C:\WINDOWS\system32\drivers
10:48:21.515 Service scanning
10:48:22.640 Disk 0 trace - called modules:
10:48:22.671 ntkrnlpa.exe CLASSPNP.SYS disk.sys ACPI.sys hal.dll atapi.sys pciide.sys PCIIDEX.SYS
10:48:22.671 1 nt!IofCallDriver -> \Device\Harddisk0\DR0[0x8a6ddab8]
10:48:22.671 3 CLASSPNP.SYS[b80e8fd7] -> nt!IofCallDriver -> \Device\00000063[0x8a71af18]
10:48:22.671 5 ACPI.sys[b7f7e620] -> nt!IofCallDriver -> \Device\Ide\IdeDeviceP0T0L0-3[0x8a717d98]
10:48:22.671 Scan finished successfully
10:48:36.703 Disk 0 MBR has been saved successfully to "C:\Documents and Settings\Jessica\Mis documentos\Downloads\MBR.dat"
10:48:36.718 The log file has been saved successfully to "C:\Documents and Settings\Jessica\Mis documentos\Downloads\aswMBR.txt"

END //////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////////