What the Tech?! Free tech support Archive
This is a read-only archive. No new posts or registrations. Privacy Page
Spyware / Malware / Virus Removal

I have a problem wiht my computer, please hepl me....

1 min read

This thread's last reply is from . Advice, software, and links below may be out of date — treat specific steps and download links with caution.

Looking for the outcome? Ask AI

Post #1
Hi everybody. I am new Here so It's my first post here. Well, since one or two day I see my computer, in specific my browser strange and I decide scan with avira antivirus premium and the diagnostic is:


Premium Security Suite
Fecha de creación del fichero de informe: viernes, 26 de agosto de 2011 18:04

Analizando cepas de virus de 3292370.

El programa está funcionando como versión completa sin limitaciones.
Los servicios online están a disposición.

Titular de la licencia : Yumi Leal
Número de serie : 2215598976-ISECE-0000001
Plataforma : Windows XP
Versión de Windows : (Service Pack 3) [5.1.2600]
Modo de arranque : Arranque normal
Nombre de usuario : SYSTEM
Nombre del equipo : COFTIELD-G665QJ

Información de versión:
BUILD.DAT : 10.0.0.95 42917 Bytes 17/06/2011 16:10:00
AVSCAN.EXE : 10.0.4.2 442024 Bytes 17/06/2011 16:21:08
AVSCAN.DLL : 10.0.3.0 53608 Bytes 21/04/2011 11:42:02
LUKE.DLL : 10.0.3.2 104296 Bytes 17/06/2011 16:21:39
LUKERES.DLL : 10.0.0.0 13160 Bytes 25/02/2010 20:41:03
VBASE000.VDF : 7.10.0.0 19875328 Bytes 06/11/2009 14:05:36
VBASE001.VDF : 7.11.0.0 13342208 Bytes 14/12/2010 11:41:54
VBASE002.VDF : 7.11.3.0 1950720 Bytes 09/02/2011 11:41:55
VBASE003.VDF : 7.11.5.225 1980416 Bytes 07/04/2011 16:21:44
VBASE004.VDF : 7.11.8.178 2354176 Bytes 31/05/2011 16:18:22
VBASE005.VDF : 7.11.10.251 1788416 Bytes 07/07/2011 04:31:54
VBASE006.VDF : 7.11.13.60 6411776 Bytes 16/08/2011 04:32:46
VBASE007.VDF : 7.11.13.61 2048 Bytes 16/08/2011 04:32:47
VBASE008.VDF : 7.11.13.62 2048 Bytes 16/08/2011 04:32:47
VBASE009.VDF : 7.11.13.63 2048 Bytes 16/08/2011 04:32:48
VBASE010.VDF : 7.11.13.64 2048 Bytes 16/08/2011 04:32:48
VBASE011.VDF : 7.11.13.65 2048 Bytes 16/08/2011 04:32:48
VBASE012.VDF : 7.11.13.66 2048 Bytes 16/08/2011 04:32:49
VBASE013.VDF : 7.11.13.95 166400 Bytes 17/08/2011 04:32:53
VBASE014.VDF : 7.11.13.125 209920 Bytes 18/08/2011 04:32:55
VBASE015.VDF : 7.11.13.157 184832 Bytes 22/08/2011 04:32:59
VBASE016.VDF : 7.11.13.201 128000 Bytes 24/08/2011 19:02:21
VBASE017.VDF : 7.11.13.202 2048 Bytes 24/08/2011 19:02:22
VBASE018.VDF : 7.11.13.203 2048 Bytes 24/08/2011 19:02:22
VBASE019.VDF : 7.11.13.204 2048 Bytes 24/08/2011 19:02:22
VBASE020.VDF : 7.11.13.205 2048 Bytes 24/08/2011 19:02:23
VBASE021.VDF : 7.11.13.206 2048 Bytes 24/08/2011 19:02:23
VBASE022.VDF : 7.11.13.207 2048 Bytes 24/08/2011 19:02:24
VBASE023.VDF : 7.11.13.208 2048 Bytes 24/08/2011 19:02:24
VBASE024.VDF : 7.11.13.209 2048 Bytes 24/08/2011 19:02:24
VBASE025.VDF : 7.11.13.210 2048 Bytes 24/08/2011 19:02:25
VBASE026.VDF : 7.11.13.211 2048 Bytes 24/08/2011 19:02:25
VBASE027.VDF : 7.11.13.212 2048 Bytes 24/08/2011 19:02:25
VBASE028.VDF : 7.11.13.213 2048 Bytes 24/08/2011 19:02:26
VBASE029.VDF : 7.11.13.214 2048 Bytes 24/08/2011 19:02:26
VBASE030.VDF : 7.11.13.215 2048 Bytes 24/08/2011 19:02:26
VBASE031.VDF : 7.11.13.220 40448 Bytes 24/08/2011 19:02:27
Versión del motor : 8.2.6.32
AEVDF.DLL : 8.1.2.1 106868 Bytes 21/04/2011 11:41:16
AESCRIPT.DLL : 8.1.3.74 1622393 Bytes 23/08/2011 04:33:51
AESCN.DLL : 8.1.7.2 127349 Bytes 21/04/2011 11:41:14
AESBX.DLL : 8.2.1.34 323957 Bytes 16/06/2011 04:54:00
AERDL.DLL : 8.1.9.13 639349 Bytes 23/08/2011 04:33:45
AEPACK.DLL : 8.2.9.5 676214 Bytes 23/08/2011 04:33:41
AEOFFICE.DLL : 8.1.2.13 201083 Bytes 23/08/2011 04:33:36
AEHEUR.DLL : 8.1.2.155 3617144 Bytes 23/08/2011 04:33:33
AEHELP.DLL : 8.1.17.7 254327 Bytes 23/08/2011 04:33:17
AEGEN.DLL : 8.1.5.7 401778 Bytes 23/08/2011 04:33:14
AEEMU.DLL : 8.1.3.0 393589 Bytes 21/04/2011 11:41:01
AECORE.DLL : 8.1.22.4 196983 Bytes 23/08/2011 04:33:11
AEBB.DLL : 8.1.1.0 53618 Bytes 21/04/2011 11:41:01
AVWINLL.DLL : 10.0.0.0 19304 Bytes 21/04/2011 11:41:25
AVPREF.DLL : 10.0.0.0 44904 Bytes 17/06/2011 16:21:07
AVREP.DLL : 10.0.0.10 174120 Bytes 23/08/2011 04:34:08
AVREG.DLL : 10.0.3.2 53096 Bytes 17/06/2011 16:21:07
AVSCPLR.DLL : 10.0.4.2 84840 Bytes 17/06/2011 16:21:09
AVARKT.DLL : 10.0.22.6 231784 Bytes 17/06/2011 16:21:00
AVEVTLOG.DLL : 10.0.0.8 203112 Bytes 17/06/2011 16:21:05
SQLITE3.DLL : 3.6.19.0 355688 Bytes 17/06/2010 19:23:28
AVSMTP.DLL : 10.0.0.17 63848 Bytes 21/04/2011 11:41:25
NETNT.DLL : 10.0.0.0 11624 Bytes 21/04/2011 11:41:44
RCIMAGE.DLL : 10.0.0.32 2899304 Bytes 01/04/2010 17:57:22
RCTEXT.DLL : 10.0.58.0 98664 Bytes 21/04/2011 11:42:04

Configuración para el análisis actual:
Nombre de tarea………………………: Análisis completo del sistema
Fichero de configuración………………: c:\archivos de programa\avira\antivir desktop\sysscan.avp
Registro…………………………….: bajo
Acción principal……………………..: interactivo
Acción secundaria…………………….: omitir
Analizando sectores de arranque maestros..: activado
Analizando sectores de arranque………..: activado
Sectores de arranque………………….: C:,
Analizando programas activos…………..: activado
Programas en ejecución extendidos………: activado
Analizando registro…………………..: activado
Búsqueda de rootkits………………….: activado
Compr. integridad ficheros del sistema….: desactivado
Modo de análisis de ficheros…………..: Todos los ficheros
Analizando archivos…………………..: activado
Limitar nivel de recursividad………….: 20
Extensiones inteligentes de archivo…….: activado
Heurística de macrovirus………………: activado
Heurística de ficheros………………..: medio

Comienzo del análisis: viernes, 26 de agosto de 2011 18:04

Comienza el análisis de existencia de objetos ocultos.
c:\documents and settings\obelisco\configuración local\archivos temporales de internet\content.ie5\index.dat
c:\documents and settings\obelisco\configuración local\archivos temporales de internet\content.ie5\index.dat
[NOTA] El fichero no es visible.
c:\documents and settings\obelisco\configuración local\historial\history.ie5\index.dat
c:\documents and settings\obelisco\configuración local\historial\history.ie5\index.dat
[NOTA] El fichero no es visible.
c:\windows\system32\ntmsdata\ntmsjrnl
c:\windows\system32\ntmsdata\ntmsjrnl
[NOTA] El fichero no es visible.
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
[NOTA] El proceso no es visible.

Comienza el análisis de los procesos iniciados:
Analizando proceso 'rsmsink.exe' - se analizaron '29' módulos
Analizando proceso 'msdtc.exe' - se analizaron '41' módulos
Analizando proceso 'dllhost.exe' - se analizaron '60' módulos
Analizando proceso 'dllhost.exe' - se analizaron '46' módulos
Analizando proceso 'vssvc.exe' - se analizaron '49' módulos
Analizando proceso 'avscan.exe' - se analizaron '68' módulos
Analizando proceso 'avcenter.exe' - se analizaron '84' módulos
Analizando proceso 'GoogleUpdate.exe' - se analizaron '40' módulos
Analizando proceso 'CTLTask.exe' - se analizaron '50' módulos
Analizando proceso 'CTLTray.exe' - se analizaron '31' módulos
Analizando proceso 'ctfmon.exe' - se analizaron '25' módulos
Analizando proceso 'avgnt.exe' - se analizaron '67' módulos
Analizando proceso 'CTHELPER.EXE' - se analizaron '34' módulos
Analizando proceso 'cfp.exe' - se analizaron '51' módulos
Analizando proceso 'wuauclt.exe' - se analizaron '35' módulos
Analizando proceso 'Explorer.EXE' - se analizaron '84' módulos
Analizando proceso 'alg.exe' - se analizaron '36' módulos
Analizando proceso 'AVWEBGRD.EXE' - se analizaron '36' módulos
Analizando proceso 'avmailc.exe' - se analizaron '41' módulos
Analizando proceso 'avshadow.exe' - se analizaron '27' módulos
Analizando proceso 'MsPMSPSv.exe' - se analizaron '16' módulos
Analizando proceso 'CTsvcCDA.exe' - se analizaron '12' módulos
Analizando proceso 'Cleaner_Validator.exe' - se analizaron '34' módulos
Analizando proceso 'avguard.exe' - se analizaron '73' módulos
Analizando proceso 'avfwsvc.exe' - se analizaron '53' módulos
Analizando proceso 'svchost.exe' - se analizaron '35' módulos
Analizando proceso 'sched.exe' - se analizaron '47' módulos
Analizando proceso 'spoolsv.exe' - se analizaron '52' módulos
Analizando proceso 'svchost.exe' - se analizaron '40' módulos
Analizando proceso 'svchost.exe' - se analizaron '29' módulos
Analizando proceso 'svchost.exe' - se analizaron '164' módulos
Analizando proceso 'cmdagent.exe' - se analizaron '76' módulos
Analizando proceso 'svchost.exe' - se analizaron '40' módulos
Analizando proceso 'svchost.exe' - se analizaron '51' módulos
Analizando proceso 'lsass.exe' - se analizaron '60' módulos
Analizando proceso 'services.exe' - se analizaron '28' módulos
Analizando proceso 'winlogon.exe' - se analizaron '69' módulos
Analizando proceso 'csrss.exe' - se analizaron '12' módulos
Analizando proceso 'smss.exe' - se analizaron '2' módulos

Comienza el análisis de los sectores de arranque maestros:
Sector de arranque maestro HD0
[INFORMACIÓN] No se encontraron virus.

Comienza el análisis de los sectores de arranque:
Sector de arranque 'C:\'
[INFORMACIÓN] No se encontraron virus.

Se inicia el análisis de las referencias a ficheros ejecutables (registro):
Se analizó el registro ( '337' ficheros ).


Comienza el análisis de los ficheros seleccionados:

Comenzando el análisis en 'C:\'


Fin del análisis: viernes, 26 de agosto de 2011 18:43
Tiempo requerido: 38:56 Minutos

El análisis se ejecutó por completo.

2059 Se analizaron las carpetas
87166 Ficheros analizados
0 Virus o programas no deseados detectados
0 Ficheros clasificados como sospechosos
0 Ficheros eliminados
0 Virus o programas no deseados reparados
0 Los ficheros se movieron a cuarentena
0 Se cambió el nombre de los ficheros
0 No se pudieron analizar los ficheros
87166 Ficheros no concernidos
1225 Se analizaron los archivos
0 Advertencias
4 Notas
155838 Los objetos se analizaron con el análisis de rootkits
4 Se detectaron objetos ocultos

I am worry about this two hide objects in specific:

c:\windows\system32\ntmsdata\ntmsjrnl
c:\windows\system32\ntmsdata\ntmsjrnl
[NOTA] El fichero no es visible.
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
[NOTA] El proceso no es visible.

For me It's not normal but I am interesting in your opinions about it.

Log Of OTL with the button activated Lop and Purity:

OTL logfile created on: 26/08/2011 20:35:54 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Documents and Settings\Obelisco\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

255,30 Mb Total Physical Memory | 69,06 Mb Available Physical Memory | 27,05% Memory free
672,67 Mb Paging File | 127,00 Mb Available in Paging File | 18,88% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 55,89 Gb Total Space | 49,11 Gb Free Space | 87,87% Space Free | Partition Type: NTFS

Computer Name: COFTIELD-G665QJ | User Name: Obelisco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Obelisco\Mis documentos\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe (COMODO)
PRC - C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
PRC - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avwebgrd.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\CTHELPER.EXE (Creative Technology Ltd)
PRC - C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe (Creative Technology Ltd)
PRC - C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe (Creative Technology Ltd.)


========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\ppgooglenaclpluginchrome.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\pdf.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\Locales\es.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avutil-50.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avformat-52.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avcodec-52.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\UtilsDll.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\CSCdll.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\libxml2.dll ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\cares.dll ()


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – File not found
SRV - (cmdAgent) – C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV - (AntiVirWebService) – C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira GmbH)
SRV - (AntiVirFirewallService) – C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe (Avira GmbH)
SRV - (AntiVirMailService) – C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) – C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) – C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Cleaner_Validator) – C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()


========== Driver Services (SafeList) ==========

DRV - (Inspect) – C:\WINDOWS\System32\DRIVERS\inspect.sys (COMODO)
DRV - (cmdHlp) – C:\WINDOWS\system32\drivers\cmdhlp.sys (COMODO)
DRV - (cmdGuard) – C:\WINDOWS\system32\drivers\cmdGuard.sys (COMODO)
DRV - (avipbb) – C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) – C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avfwot) – C:\WINDOWS\system32\drivers\avfwot.sys (Avira GmbH)
DRV - (avfwim) – C:\WINDOWS\system32\drivers\avfwim.sys (Avira GmbH)
DRV - (CFRPD) – C:\WINDOWS\system32\drivers\CFRPD.sys (Windows ® Win 7 DDK provider)
DRV - (CFRMD) – C:\WINDOWS\system32\drivers\CFRMD.sys (Windows ® Win 7 DDK provider)
DRV - (ssmdrv) – C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avgio) – C:\Archivos de programa\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (gameenum) – C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (rtl8139) Controlador de Windows NT del adaptador Fast Ethernet PCI basado en Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\rtl8139.sys (Realtek Semiconductor Corporation)
DRV - (ha10kx2k) – C:\WINDOWS\system32\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV - (emupia) – C:\WINDOWS\system32\drivers\emupia2k.sys (Creative Technology Ltd)
DRV - (ctsfm2k) – C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (ctprxy2k) – C:\WINDOWS\system32\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV - (ossrv) – C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctaud2k) Creative Audio Driver (WDM) – C:\WINDOWS\system32\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV - (ctac32k) – C:\WINDOWS\system32\drivers\ctac32k.sys (Creative Technology Ltd)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Archivos de programa\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Archivos de programa\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2011/08/22 22:35:44 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins

[2011/08/22 23:48:32 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Obelisco\Datos de programa\Mozilla\Extensions
[2011/08/22 22:35:44 | 000,000,000 | —D | M] (No name found) – C:\Archivos de programa\Mozilla Firefox\extensions
File not found (No name found) –
[2011/08/12 02:15:02 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Archivos de programa\mozilla firefox\components\browsercomps.dll
[2011/08/12 00:14:12 | 000,002,252 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\bing.xml
[2011/08/12 00:37:39 | 000,003,996 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\drae.xml
[2011/08/12 00:37:39 | 000,001,143 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\eBay-es.xml
[2011/08/12 00:37:39 | 000,001,178 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\wikipedia-es.xml
[2011/08/12 00:37:39 | 000,001,102 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\yahoo-es.xml

O1 HOSTS File: ([2001/08/24 12:00:00 | 000,000,792 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [avgnt] C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [Jet Detection] C:\Archivos de programa\Creative\SBAudigy\PROGRAM\ADGJDet.exe ()
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [WINDVDPatch] C:\WINDOWS\System32\CTHELPER.EXE (Creative Technology Ltd)

OTL Extras:

OTL Extras logfile created on: 26/08/2011 20:35:54 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Documents and Settings\Obelisco\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

255,30 Mb Total Physical Memory | 69,06 Mb Available Physical Memory | 27,05% Memory free
672,67 Mb Paging File | 127,00 Mb Available in Paging File | 18,88% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 55,89 Gb Total Space | 49,11 Gb Free Space | 87,87% Space Free | Partition Type: NTFS

Computer Name: COFTIELD-G665QJ | User Name: Obelisco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{350C9C0A-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{9115E7DB-3B29-445A-802D-11E0AA945B7F}" = Sound Blaster Audigy
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{C4039DC0-905D-4372-8B20-120F0B6CF283}" = COMODO System-Cleaner
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Avira AntiVir Desktop" = Avira Premium Security Suite
"Glary Utilities_is1" = Glary Utilities 2.35.0.1216
"Mozilla Firefox 6.0 (x86 es-ES)" = Mozilla Firefox 6.0 (x86 es-ES)
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.01 (32-bit)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 23/08/2011 0:16:59 | Computer Name = COFTIELD-G665QJ | Source = Avira Firewall | ID = 0
Description = Licencia no válida

Error - 23/08/2011 0:19:00 | Computer Name = COFTIELD-G665QJ | Source = Avira AntiVir | ID = 4117
Description = El fichero de licencia no contiene una licencia válida. El servicio
finalizará!

Error - 23/08/2011 0:24:01 | Computer Name = COFTIELD-G665QJ | Source = Avira AntiVir | ID = 4117
Description = El fichero de licencia no contiene una licencia válida. El servicio
finalizará!

[ System Events ]
Error - 24/08/2011 13:04:02 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7022
Description = El servicio Avira AntiVir Guard permanece en inicio.

Error - 24/08/2011 13:04:03 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 24/08/2011 13:04:03 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7022
Description = El servicio Avira AntiVir Guard permanece en inicio.

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 26/08/2011 19:14:56 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:02 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:09 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:31 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.


< End of report >

This is with the buttons activated Lop and Purity…

Now the log of OLP without Lop and Purity:

OTL logfile created on: 26/08/2011 20:09:27 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Documents and Settings\Obelisco\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

255,30 Mb Total Physical Memory | 69,92 Mb Available Physical Memory | 27,39% Memory free
672,67 Mb Paging File | 158,06 Mb Available in Paging File | 23,50% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 55,89 Gb Total Space | 49,11 Gb Free Space | 87,88% Space Free | Partition Type: NTFS

Computer Name: COFTIELD-G665QJ | User Name: Obelisco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Documents and Settings\Obelisco\Mis documentos\Downloads\OTL.exe (OldTimer Tools)
PRC - C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe (COMODO)
PRC - C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
PRC - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe (Google Inc.)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avwebgrd.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
PRC - C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
PRC - C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()
PRC - C:\WINDOWS\explorer.exe (Microsoft Corporation)
PRC - C:\WINDOWS\system32\CTHELPER.EXE (Creative Technology Ltd)
PRC - C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe (Creative Technology Ltd)
PRC - C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe (Creative Technology Ltd.)


========== Modules (No Company Name) ==========

MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\ppgooglenaclpluginchrome.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\pdf.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\Locales\es.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avutil-50.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avformat-52.dll ()
MOD - C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\13.0.782.215\avcodec-52.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\UtilsDll.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\CSCdll.dll ()
MOD - C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\sqlite3.dll ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\libxml2.dll ()
MOD - C:\Archivos de programa\Avira\AntiVir Desktop\cares.dll ()


========== Win32 Services (SafeList) ==========

SRV - (HidServ) – File not found
SRV - (cmdAgent) – C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO)
SRV - (AntiVirWebService) – C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE (Avira GmbH)
SRV - (AntiVirFirewallService) – C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe (Avira GmbH)
SRV - (AntiVirMailService) – C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe (Avira GmbH)
SRV - (AntiVirSchedulerService) – C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe (Avira GmbH)
SRV - (AntiVirService) – C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe (Avira GmbH)
SRV - (Cleaner_Validator) – C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe ()


========== Driver Services (SafeList) ==========

DRV - (Inspect) – C:\WINDOWS\System32\DRIVERS\inspect.sys (COMODO)
DRV - (cmdHlp) – C:\WINDOWS\system32\drivers\cmdhlp.sys (COMODO)
DRV - (cmdGuard) – C:\WINDOWS\system32\drivers\cmdGuard.sys (COMODO)
DRV - (avipbb) – C:\WINDOWS\system32\drivers\avipbb.sys (Avira GmbH)
DRV - (avgntflt) – C:\WINDOWS\system32\drivers\avgntflt.sys (Avira GmbH)
DRV - (avfwot) – C:\WINDOWS\system32\drivers\avfwot.sys (Avira GmbH)
DRV - (avfwim) – C:\WINDOWS\system32\drivers\avfwim.sys (Avira GmbH)
DRV - (CFRPD) – C:\WINDOWS\system32\drivers\CFRPD.sys (Windows ® Win 7 DDK provider)
DRV - (CFRMD) – C:\WINDOWS\system32\drivers\CFRMD.sys (Windows ® Win 7 DDK provider)
DRV - (ssmdrv) – C:\WINDOWS\system32\drivers\ssmdrv.sys (Avira GmbH)
DRV - (avgio) – C:\Archivos de programa\Avira\AntiVir Desktop\avgio.sys (Avira GmbH)
DRV - (gameenum) – C:\WINDOWS\system32\drivers\gameenum.sys (Microsoft Corporation)
DRV - (rtl8139) Controlador de Windows NT del adaptador Fast Ethernet PCI basado en Realtek RTL8139(A/B/C) – C:\WINDOWS\system32\drivers\rtl8139.sys (Realtek Semiconductor Corporation)
DRV - (ha10kx2k) – C:\WINDOWS\system32\drivers\ha10kx2k.sys (Creative Technology Ltd)
DRV - (emupia) – C:\WINDOWS\system32\drivers\emupia2k.sys (Creative Technology Ltd)
DRV - (ctsfm2k) – C:\WINDOWS\system32\drivers\ctsfm2k.sys (Creative Technology Ltd)
DRV - (ctprxy2k) – C:\WINDOWS\system32\drivers\ctprxy2k.sys (Creative Technology Ltd)
DRV - (ossrv) – C:\WINDOWS\system32\drivers\ctoss2k.sys (Creative Technology Ltd.)
DRV - (ctaud2k) Creative Audio Driver (WDM) – C:\WINDOWS\system32\drivers\ctaud2k.sys (Creative Technology Ltd)
DRV - (ctac32k) – C:\WINDOWS\system32\drivers\ctac32k.sys (Creative Technology Ltd)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %SystemRoot%\system32\blank.htm

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========


FF - HKLM\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Archivos de programa\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@docu-track.com/PDF-XChange Viewer Plugin,version=1.0,application/pdf: C:\Archivos de programa\Tracker Software\PDF Viewer\npPDFXCviewNPPlugin.dll (Tracker Software Products Ltd.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\1.3.21.67\npGoogleUpdate3.dll (Google Inc.)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Components: C:\Archivos de programa\Mozilla Firefox\components [2011/08/22 22:35:44 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 6.0\extensions\\Plugins: C:\Archivos de programa\Mozilla Firefox\plugins

[2011/08/22 23:48:32 | 000,000,000 | —D | M] (No name found) – C:\Documents and Settings\Obelisco\Datos de programa\Mozilla\Extensions
[2011/08/22 22:35:44 | 000,000,000 | —D | M] (No name found) – C:\Archivos de programa\Mozilla Firefox\extensions
File not found (No name found) –
[2011/08/12 02:15:02 | 000,134,104 | —- | M] (Mozilla Foundation) – C:\Archivos de programa\mozilla firefox\components\browsercomps.dll
[2011/08/12 00:14:12 | 000,002,252 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\bing.xml
[2011/08/12 00:37:39 | 000,003,996 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\drae.xml
[2011/08/12 00:37:39 | 000,001,143 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\eBay-es.xml
[2011/08/12 00:37:39 | 000,001,178 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\wikipedia-es.xml
[2011/08/12 00:37:39 | 000,001,102 | —- | M] () – C:\Archivos de programa\mozilla firefox\searchplugins\yahoo-es.xml

O1 HOSTS File: ([2001/08/24 12:00:00 | 000,000,792 | —- | M]) - C:\WINDOWS\system32\drivers\etc\hosts
O1 - Hosts: 127.0.0.1 localhost
O4 - HKLM..\Run: [avgnt] C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe (Avira GmbH)
O4 - HKLM..\Run: [COMODO Internet Security] C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe (COMODO)
O4 - HKLM..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [Jet Detection] C:\Archivos de programa\Creative\SBAudigy\PROGRAM\ADGJDet.exe ()
O4 - HKLM..\Run: [UpdReg] C:\WINDOWS\Updreg.EXE (Creative Technology Ltd.)
O4 - HKLM..\Run: [WINDVDPatch] C:\WINDOWS\System32\CTHELPER.EXE (Creative Technology Ltd)
O4 - HKCU..\Run: [TaskBar] C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe (Creative Technology Ltd)
O4 - HKCU..\Run: [TaskTray] C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe (Creative Technology Ltd.)
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: =
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data]
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = _ [binary data]
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Archivos de programa\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Archivos de programa\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O10 - Protocol_Catalog9\Catalog_Entries\000000000016 - C:\Archivos de programa\Avira\AntiVir Desktop\avsda.dll (Avira GmbH)
O16 - DPF: DirectAnimation Java Classes file://C:\WINDOWS\Java\classes\dajava.cab (Reg Error: Key error.)
O16 - DPF: Microsoft XML Parser for Java file://C:\WINDOWS\Java\classes\xmldso.cab (Reg Error: Key error.)
O18 - Protocol\Handler\http\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\http\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\https\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\ipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\0x00000001 {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O18 - Protocol\Handler\msdaipp\oledb {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\msdaipp.dll (Microsoft Corporation)
O20 - AppInit_DLLs: (C:\WINDOWS\system32\guard32.dll) - C:\WINDOWS\system32\guard32.dll (COMODO)
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\WINDOWS\system32\userinit.exe (Microsoft Corporation)
O24 - Desktop Components:0 (Mi página de inicio actual) - About:Home
O24 - Desktop WallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O24 - Desktop BackupWallPaper: C:\WINDOWS\Web\Wallpaper\Felicidad.bmp
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2011/08/22 21:02:38 | 000,000,000 | —- | M] () - C:\AUTOEXEC.BAT – [ NTFS ]
O34 - HKLM BootExecute: (autocheck autochk *) - File not found
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37 - HKLM\…com [@ = comfile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2011/08/25 14:32:10 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\PDF-XChange PDF Viewer
[2011/08/25 14:31:43 | 000,000,000 | —D | C] – C:\Archivos de programa\Tracker Software
[2011/08/23 23:46:30 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Mis documentos\Americo - Yo Soy Americo [2010]
[2011/08/23 22:17:30 | 000,000,000 | -H-D | C] – C:\WINDOWS\PIF
[2011/08/23 22:02:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\WinRAR
[2011/08/23 22:02:17 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\WinRAR
[2011/08/23 22:02:17 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\WinRAR
[2011/08/23 22:02:11 | 000,000,000 | —D | C] – C:\Archivos de programa\WinRAR
[2011/08/23 22:01:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Mis documentos\Downloads
[2011/08/23 21:11:08 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\GlarySoft
[2011/08/23 21:09:53 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Glary Utilities
[2011/08/23 21:09:32 | 000,000,000 | —D | C] – C:\Archivos de programa\Glary Utilities
[2011/08/23 19:26:16 | 000,026,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\usbstor.sys
[2011/08/23 02:17:23 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Macromedia
[2011/08/23 02:17:18 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Adobe
[2011/08/23 02:15:10 | 000,272,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bthport.sys
[2011/08/23 02:14:53 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Google Chrome
[2011/08/23 02:14:19 | 000,953,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc40u.dll
[2011/08/23 02:14:17 | 000,974,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mfc42.dll
[2011/08/23 02:14:10 | 000,203,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rmcast.sys
[2011/08/23 02:13:05 | 000,119,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\t2embed.dll
[2011/08/23 02:13:05 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fontsub.dll
[2011/08/23 02:09:09 | 000,331,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadce.dll
[2011/08/23 02:08:44 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google
[2011/08/23 02:07:33 | 000,456,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mrxsmb.sys
[2011/08/23 01:30:58 | 000,000,000 | —D | C] – C:\WINDOWS\System32\NtmsData
[2011/08/23 00:42:35 | 000,617,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\comctl32.dll
[2011/08/23 00:42:31 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndproxy.sys
[2011/08/23 00:39:48 | 000,139,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpwd.sys
[2011/08/23 00:38:53 | 000,471,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aclayers.dll
[2011/08/23 00:37:19 | 000,733,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lsasrv.dll
[2011/08/23 00:33:03 | 000,744,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helpsvc.exe
[2011/08/23 00:30:23 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mup.sys
[2011/08/23 00:26:59 | 001,172,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml3.dll
[2011/08/23 00:22:36 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Avira
[2011/08/23 00:11:37 | 003,558,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\moviemk.exe
[2011/08/23 00:09:49 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Avira
[2011/08/23 00:09:04 | 000,337,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\netapi32.dll
[2011/08/23 00:09:01 | 000,692,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetcomm.dll
[2011/08/23 00:08:10 | 000,028,520 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\ssmdrv.sys
[2011/08/23 00:08:05 | 000,137,656 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avipbb.sys
[2011/08/23 00:08:05 | 000,061,960 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avgntflt.sys
[2011/08/23 00:08:05 | 000,022,360 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avgntmgr.sys
[2011/08/23 00:08:04 | 000,102,856 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avfwot.sys
[2011/08/23 00:08:04 | 000,045,416 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avgntdd.sys
[2011/08/23 00:08:03 | 000,079,432 | —- | C] (Avira GmbH) – C:\WINDOWS\System32\drivers\avfwim.sys
[2011/08/23 00:07:54 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\Avira
[2011/08/23 00:07:54 | 000,000,000 | —D | C] – C:\Archivos de programa\Avira
[2011/08/23 00:07:32 | 000,852,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vgx.dll
[2011/08/23 00:07:04 | 002,151,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlmp.exe
[2011/08/23 00:07:03 | 002,195,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntoskrnl.exe
[2011/08/23 00:07:02 | 002,029,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrpamp.exe
[2011/08/23 00:07:00 | 002,071,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ntkrnlpa.exe
[2011/08/23 00:05:22 | 000,010,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ndistapi.sys
[2011/08/23 00:01:10 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wab.exe
[2011/08/23 00:00:59 | 000,590,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rpcrt4.dll
[2011/08/22 23:51:29 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Mis documentos\Descargas
[2011/08/22 23:48:14 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Mozilla
[2011/08/22 23:48:13 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Mozilla
[2011/08/22 23:48:06 | 000,000,000 | —D | C] – C:\WINDOWS\System32\PreInstall
[2011/08/22 23:48:04 | 000,000,000 | -H-D | C] – C:\WINDOWS\$hf_mig$
[2011/08/22 22:35:40 | 000,000,000 | —D | C] – C:\Archivos de programa\Mozilla Firefox
[2011/08/22 22:34:43 | 013,784,816 | —- | C] (Mozilla) – C:\Documents and Settings\Obelisco\Mis documentos\Firefox Setup 6.0.exe
[2011/08/22 22:32:40 | 000,000,000 | —D | C] – C:\WINDOWS\System32\SoftwareDistribution
[2011/08/22 22:32:38 | 000,000,000 | –SD | C] – C:\Documents and Settings\Obelisco\UserData
[2011/08/22 22:23:59 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Creative
[2011/08/22 22:21:46 | 000,090,112 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\Updreg.EXE
[2011/08/22 22:21:45 | 000,149,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MFCANS32.DLL
[2011/08/22 22:21:45 | 000,108,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\MFCUIA32.DLL
[2011/08/22 22:21:45 | 000,084,992 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\SFCVRT32.DLL
[2011/08/22 22:21:45 | 000,082,432 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTWFLT32.DLL
[2011/08/22 22:21:45 | 000,053,552 | —- | C] (Creative® Technology Ltd.) – C:\WINDOWS\CTCCW.DLL
[2011/08/22 22:21:45 | 000,026,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\CTL3D.DLL
[2011/08/22 22:21:45 | 000,024,976 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\CTRES.DLL
[2011/08/22 22:21:40 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Defaults
[2011/08/22 22:21:26 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\gameenum.sys
[2011/08/22 22:21:26 | 000,010,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\gameenum.sys
[2011/08/22 22:21:23 | 000,006,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\splitter.sys
[2011/08/22 22:21:20 | 000,083,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wdmaud.sys
[2011/08/22 22:21:18 | 000,052,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dmusic.sys
[2011/08/22 22:21:16 | 000,056,576 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\swmidi.sys
[2011/08/22 22:21:13 | 000,142,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aec.sys
[2011/08/22 22:21:11 | 000,172,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kmixer.sys
[2011/08/22 22:21:10 | 000,002,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmkaud.sys
[2011/08/22 22:21:07 | 000,060,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sysaudio.sys
[2011/08/22 22:21:05 | 000,007,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mskssrv.sys
[2011/08/22 22:21:03 | 000,004,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspqm.sys
[2011/08/22 22:21:01 | 000,005,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspclock.sys
[2011/08/22 22:20:05 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\portcls.sys
[2011/08/22 22:20:05 | 000,146,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\portcls.sys
[2011/08/22 22:20:05 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksuser.dll
[2011/08/22 22:20:05 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksuser.dll
[2011/08/22 22:20:04 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ksproxy.ax
[2011/08/22 22:20:04 | 000,129,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ksproxy.ax
[2011/08/22 22:20:04 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\drmk.sys
[2011/08/22 22:20:04 | 000,060,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmk.sys
[2011/08/22 22:19:49 | 000,020,480 | —- | C] (Creative Technology Limited) – C:\WINDOWS\INRESSPN.DLL
[2011/08/22 22:19:49 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Data
[2011/08/22 22:19:43 | 000,998,004 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\ha10kx2k.sys
[2011/08/22 22:19:43 | 000,213,860 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\ctsfm2k.sys
[2011/08/22 22:19:43 | 000,195,432 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\drivers\ctoss2k.sys
[2011/08/22 22:19:43 | 000,156,604 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\emupia2k.sys
[2011/08/22 22:19:43 | 000,011,068 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\ctprxy2k.sys
[2011/08/22 22:19:42 | 000,837,548 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\ctaud2k.sys
[2011/08/22 22:19:42 | 000,127,948 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\drivers\ctac32k.sys
[2011/08/22 22:19:38 | 000,270,336 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\SFMS32.DLL
[2011/08/22 22:19:38 | 000,176,128 | —- | C] (Creative Technology Limited) – C:\WINDOWS\READREG.EXE
[2011/08/22 22:19:38 | 000,049,152 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\CTDCRES.DLL
[2011/08/22 22:19:38 | 000,036,864 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\sfman32.dll
[2011/08/22 22:19:37 | 000,643,072 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTSBLFX.DLL
[2011/08/22 22:19:37 | 000,155,648 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTOSUSER.DLL
[2011/08/22 22:19:37 | 000,135,168 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\OPENAL32.DLL
[2011/08/22 22:19:37 | 000,110,592 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\PIAPROXY.DLL
[2011/08/22 22:19:37 | 000,094,208 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\DEVREG.DLL
[2011/08/22 22:19:37 | 000,077,824 | —- | C] (Creative Labs) – C:\WINDOWS\System32\EAXAC3.DLL
[2011/08/22 22:19:37 | 000,061,440 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\MIDIDEF.EXE
[2011/08/22 22:19:37 | 000,036,864 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTEMUPIA.DLL
[2011/08/22 22:19:37 | 000,028,672 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTSPKHLP.DLL
[2011/08/22 22:19:37 | 000,024,576 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTHELPER.EXE
[2011/08/22 22:19:34 | 000,319,488 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTDEVCON.DLL
[2011/08/22 22:19:34 | 000,110,592 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\COMMONFX.DLL
[2011/08/22 22:19:34 | 000,106,496 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTDPROXY.DLL
[2011/08/22 22:19:34 | 000,106,496 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTASIO.DLL
[2011/08/22 22:19:34 | 000,065,536 | —- | C] ( ) – C:\WINDOWS\System32\dllcache\a3d.dll
[2011/08/22 22:19:34 | 000,065,536 | —- | C] ( ) – C:\WINDOWS\System32\a3d.dll
[2011/08/22 22:19:34 | 000,057,344 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTAGENT.DLL
[2011/08/22 22:19:34 | 000,053,248 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\AC3API.DLL
[2011/08/22 22:18:08 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\VB6STKIT.DLL
[2011/08/22 22:18:08 | 000,040,960 | —- | C] (PixAround.com Pte Ltd) – C:\WINDOWS\System32\PixWorldViewer.ocx
[2011/08/22 22:18:07 | 000,466,944 | —- | C] (PixAround.com) – C:\WINDOWS\System32\PixWorldEdit.dll
[2011/08/22 22:15:46 | 000,055,808 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTMp3.crl
[2011/08/22 22:15:46 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\Creative
[2011/08/22 22:15:32 | 000,025,088 | —- | C] (Creative Technology Ltd) – C:\WINDOWS\System32\CTSVCCTL.EXE
[2011/08/22 22:15:31 | 000,139,264 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\Video.skn
[2011/08/22 22:15:31 | 000,073,728 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTDrmRes.dll
[2011/08/22 22:15:31 | 000,064,512 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTDetres.dll
[2011/08/22 22:15:31 | 000,028,672 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTIntRes.dll
[2011/08/22 22:15:30 | 000,000,000 | —D | C] – C:\Media
[2011/08/22 22:15:28 | 000,364,544 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\ctmp3.acm
[2011/08/22 22:15:28 | 000,331,776 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTMedEng.DLL
[2011/08/22 22:15:28 | 000,230,912 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTDetect.cpl
[2011/08/22 22:15:28 | 000,163,840 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\CTDRMUI.dll
[2011/08/22 22:15:28 | 000,054,784 | —- | C] (Blue Sky Software Corporation.) – C:\WINDOWS\System32\Inetwh32.dll
[2011/08/22 22:15:07 | 000,012,288 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\AHQCpURes.dll
[2011/08/22 22:15:06 | 000,032,768 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\AudioHQU.cpl
[2011/08/22 22:14:48 | 000,000,000 | -H-D | C] – C:\Archivos de programa\InstallShield Installation Information
[2011/08/22 22:14:20 | 000,006,752 | —- | C] (Creative Technology Ltd.) – C:\WINDOWS\System32\PFMODNT.SYS
[2011/08/22 22:14:11 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Creative
[2011/08/22 22:14:10 | 000,041,984 | —- | C] (Creative Technology Ltd ) – C:\WINDOWS\CTRegRun.exe
[2011/08/22 22:14:10 | 000,000,000 | —D | C] – C:\Archivos de programa\Creative
[2011/08/22 22:13:53 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\InstallShield
[2011/08/22 22:13:49 | 000,000,000 | -H-D | C] – C:\VritualRoot
[2011/08/22 22:11:50 | 000,000,000 | -HSD | C] – C:\RECYCLER
[2011/08/22 22:08:27 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Datos de programa\Comodo
[2011/08/22 22:06:08 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\COMODO
[2011/08/22 22:05:41 | 000,000,000 | —D | C] – C:\Archivos de programa\COMODO
[2011/08/22 22:05:35 | 001,060,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mfc71.dll
[2011/08/22 22:05:34 | 001,700,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\gdiplus.dll
[2011/08/22 22:03:29 | 000,000,000 | —D | C] – C:\WINDOWS\Prefetch
[2011/08/22 21:47:14 | 001,372,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6.dll
[2011/08/22 21:47:14 | 000,090,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msxml6r.dll
[2011/08/22 21:47:14 | 000,090,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msxml6r.dll
[2011/08/22 21:47:11 | 001,119,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmoe2.dll
[2011/08/22 21:47:11 | 001,001,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvdmoe2.dll
[2011/08/22 21:47:11 | 000,897,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmspdmoe.dll
[2011/08/22 21:47:11 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmspdmod.dll
[2011/08/22 21:47:11 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpdxm.dll
[2011/08/22 21:47:11 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpns.dll
[2011/08/22 21:47:10 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpband.dll
[2011/08/22 21:47:09 | 004,886,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.dll
[2011/08/22 21:47:09 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmerror.dll
[2011/08/22 21:47:09 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmidx.dll
[2011/08/22 21:47:09 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpasf.dll
[2011/08/22 21:47:08 | 000,368,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpvis.dll
[2011/08/22 21:47:08 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msaud32.acm
[2011/08/22 21:47:08 | 000,086,016 | —- | C] (Sipro Lab Telecom Inc.) – C:\WINDOWS\System32\dllcache\sl_anet.acm
[2011/08/22 21:47:08 | 000,052,736 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspmsnsv.dll
[2011/08/22 21:47:07 | 000,786,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\migrate.exe
[2011/08/22 21:47:07 | 000,384,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mp4sdmod.dll
[2011/08/22 21:47:07 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mp43dmod.dll
[2011/08/22 21:47:07 | 000,290,816 | —- | C] (Fraunhofer Institut Integrierte Schaltungen IIS) – C:\WINDOWS\System32\dllcache\l3codeca.acm
[2011/08/22 21:47:02 | 000,103,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dpcdll.dll
[2011/08/22 21:47:01 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smtpapi.dll
[2011/08/22 21:47:01 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwnh.dll
[2011/08/22 21:46:58 | 000,136,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\aaclient.dll
[2011/08/22 21:46:57 | 000,651,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3ui.dll
[2011/08/22 21:46:57 | 000,233,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\azroles.dll
[2011/08/22 21:46:57 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3cfg.dll
[2011/08/22 21:46:57 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3msm.dll
[2011/08/22 21:46:57 | 000,048,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dhcpqec.dll
[2011/08/22 21:46:57 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dot3gpclnt.dll
[2011/08/22 21:46:57 | 000,039,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dimsroam.dll
[2011/08/22 21:46:57 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx4.dll
[2011/08/22 21:46:56 | 000,184,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapp3hst.dll
[2011/08/22 21:46:56 | 000,179,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapphost.dll
[2011/08/22 21:46:56 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eappgnui.dll
[2011/08/22 21:46:56 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\eapqec.dll
[2011/08/22 21:46:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdnepr.dll
[2011/08/22 21:46:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdiultn.dll
[2011/08/22 21:46:55 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbhc.dll
[2011/08/22 21:46:54 | 000,397,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcex.dll
[2011/08/22 21:46:54 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\microsoft.managementconsole.dll
[2011/08/22 21:46:54 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcfxcommon.dll
[2011/08/22 21:46:54 | 000,037,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\l2gpstore.dll
[2011/08/22 21:46:54 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmcperf.exe
[2011/08/22 21:46:54 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpash.dll
[2011/08/22 21:46:53 | 000,200,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napmontr.dll
[2011/08/22 21:46:53 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napstat.exe
[2011/08/22 21:46:53 | 000,155,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mssha.dll
[2011/08/22 21:46:53 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msshavmsg.dll
[2011/08/22 21:46:53 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\napipsec.dll
[2011/08/22 21:46:52 | 000,412,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\photometadatahandler.dll
[2011/08/22 21:46:52 | 000,290,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rhttpaa.dll
[2011/08/22 21:46:52 | 000,150,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qagent.dll
[2011/08/22 21:46:52 | 000,062,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qcliprov.dll
[2011/08/22 21:46:51 | 000,032,768 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\setupn.exe
[2011/08/22 21:46:50 | 000,346,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\windowscodecsext.dll
[2011/08/22 21:46:50 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsgqec.dll
[2011/08/22 21:46:50 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\verclsid.exe
[2011/08/22 21:46:49 | 000,276,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmphoto.dll
[2011/08/22 21:46:49 | 000,069,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wlanapi.dll
[2011/08/22 21:46:47 | 000,000,000 | —D | C] – C:\WINDOWS\System32\es-es
[2011/08/22 21:46:45 | 000,000,000 | —D | C] – C:\WINDOWS\l2schemas
[2011/08/22 21:46:44 | 000,000,000 | —D | C] – C:\WINDOWS\System32\es
[2011/08/22 21:46:44 | 000,000,000 | —D | C] – C:\WINDOWS\System32\bits
[2011/08/22 21:44:11 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\custsat.dll
[2011/08/22 21:43:57 | 000,286,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\blackbox.dll
[2011/08/22 21:43:57 | 000,159,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cewmdm.dll
[2011/08/22 21:43:57 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asferror.dll
[2011/08/22 21:43:56 | 000,695,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmv2clt.dll
[2011/08/22 21:43:56 | 000,499,766 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dxmasf.dll
[2011/08/22 21:43:56 | 000,299,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmclien.dll
[2011/08/22 21:43:56 | 000,294,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dlimport.exe
[2011/08/22 21:43:56 | 000,087,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\drmstor.dll
[2011/08/22 21:43:53 | 000,847,898 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdxm.ocx
[2011/08/22 21:43:53 | 000,364,544 | —- | C] (Microsoft Corporation (written by Digital Renaissance Inc.)) – C:\WINDOWS\System32\dllcache\npdsplay.dll
[2011/08/22 21:43:53 | 000,356,352 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msscp.dll
[2011/08/22 21:43:53 | 000,262,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpg4ds32.ax
[2011/08/22 21:43:53 | 000,259,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msnetobj.dll
[2011/08/22 21:43:53 | 000,246,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mswmdm.dll
[2011/08/22 21:43:53 | 000,240,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mpg4dmod.dll
[2011/08/22 21:43:53 | 000,226,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npdrmv2.dll
[2011/08/22 21:43:53 | 000,221,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msadds32.ax
[2011/08/22 21:43:53 | 000,201,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mspmsp.dll
[2011/08/22 21:43:53 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplay32.exe
[2011/08/22 21:43:53 | 000,103,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logagent.exe
[2011/08/22 21:43:53 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msscds32.ax
[2011/08/22 21:43:53 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\npwmsdrm.dll
[2011/08/22 21:43:53 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\laprxy.dll
[2011/08/22 21:43:53 | 000,004,639 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mplayer2.exe
[2011/08/22 21:43:53 | 000,004,126 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msdxmlc.dll
[2011/08/22 21:43:52 | 000,778,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\setup_wm.exe
[2011/08/22 21:43:52 | 000,246,814 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\strmdll.dll
[2011/08/22 21:43:52 | 000,208,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unregmp2.exe
[2011/08/22 21:43:52 | 000,153,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shmedia.dll
[2011/08/22 21:43:51 | 002,977,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmploc.dll
[2011/08/22 21:43:51 | 001,053,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\WMNetmgr.dll
[2011/08/22 21:43:51 | 000,759,296 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmod.dll
[2011/08/22 21:43:51 | 000,670,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmadmoe.dll
[2011/08/22 21:43:51 | 000,408,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmadmod.dll
[2011/08/22 21:43:51 | 000,230,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmasf.dll
[2011/08/22 21:43:51 | 000,102,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpshell.dll
[2011/08/22 21:43:51 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmplayer.exe
[2011/08/22 21:43:51 | 000,027,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmdmlog.dll
[2011/08/22 21:43:51 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmdmps.dll
[2011/08/22 21:43:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpui.dll
[2011/08/22 21:43:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpcore.dll
[2011/08/22 21:43:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpcd.dll
[2011/08/22 21:43:51 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmp.ocx
[2011/08/22 21:43:50 | 002,113,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\WMVCore.dll
[2011/08/22 21:43:50 | 000,809,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvdmod.dll
[2011/08/22 21:43:50 | 000,303,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmstream.dll
[2011/08/22 21:43:50 | 000,278,559 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmv8ds32.ax
[2011/08/22 21:43:50 | 000,258,048 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmvds32.ax
[2011/08/22 21:43:50 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmsdmoe.dll
[2011/08/22 21:42:22 | 000,000,000 | —D | C] – C:\WINDOWS\network diagnostic
[2011/08/22 21:30:41 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documentos\Mis vídeos
[2011/08/22 21:30:18 | 000,000,000 | —D | C] – C:\WINDOWS\SoftwareDistribution
[2011/08/22 21:29:17 | 000,000,000 | –SD | C] – C:\WINDOWS\System32\Microsoft
[2011/08/22 21:22:57 | 000,046,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\irbus.sys
[2011/08/22 21:22:57 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsdupd.exe
[2011/08/22 21:22:52 | 000,327,168 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtaa.sys
[2011/08/22 21:22:52 | 000,063,663 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1rvxx.sys
[2011/08/22 21:22:52 | 000,056,623 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1btxx.sys
[2011/08/22 21:22:52 | 000,036,463 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1tuxx.sys
[2011/08/22 21:22:52 | 000,034,735 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xsxx.sys
[2011/08/22 21:22:52 | 000,030,671 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1raxx.sys
[2011/08/22 21:22:52 | 000,029,455 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1xbxx.sys
[2011/08/22 21:22:52 | 000,026,367 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1snxx.sys
[2011/08/22 21:22:52 | 000,021,343 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1ttxx.sys
[2011/08/22 21:22:52 | 000,012,047 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1pdxx.sys
[2011/08/22 21:22:52 | 000,011,615 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati1mdxx.sys
[2011/08/22 21:22:52 | 000,004,255 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv01nt5.dll
[2011/08/22 21:22:52 | 000,003,967 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv02nt5.dll
[2011/08/22 21:22:52 | 000,003,775 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv11nt5.dll
[2011/08/22 21:22:52 | 000,003,711 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv09nt5.dll
[2011/08/22 21:22:52 | 000,003,647 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv07nt5.dll
[2011/08/22 21:22:52 | 000,003,615 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv05nt5.dll
[2011/08/22 21:22:52 | 000,003,135 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\adv08nt5.dll
[2011/08/22 21:22:51 | 000,701,440 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\ati2mtag.sys
[2011/08/22 21:22:51 | 000,104,960 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinrvxx.sys
[2011/08/22 21:22:51 | 000,073,216 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atintuxx.sys
[2011/08/22 21:22:51 | 000,063,488 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxsxx.sys
[2011/08/22 21:22:51 | 000,057,856 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinbtxx.sys
[2011/08/22 21:22:51 | 000,052,224 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinraxx.sys
[2011/08/22 21:22:51 | 000,036,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\bthprint.sys
[2011/08/22 21:22:51 | 000,031,744 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinxbxx.sys
[2011/08/22 21:22:51 | 000,028,672 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinsnxx.sys
[2011/08/22 21:22:51 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv04nt5.dll
[2011/08/22 21:22:51 | 000,021,183 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv01nt5.dll
[2011/08/22 21:22:51 | 000,017,279 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv10nt5.dll
[2011/08/22 21:22:51 | 000,015,423 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\ch7xxnt5.dll
[2011/08/22 21:22:51 | 000,014,336 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinpdxx.sys
[2011/08/22 21:22:51 | 000,014,143 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv06nt5.dll
[2011/08/22 21:22:51 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinttxx.sys
[2011/08/22 21:22:51 | 000,013,824 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\drivers\atinmdxx.sys
[2011/08/22 21:22:51 | 000,011,359 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\atv02nt5.dll
[2011/08/22 21:22:50 | 001,309,184 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlstrm.sys
[2011/08/22 21:22:50 | 000,452,736 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\drivers\mtxparhm.sys
[2011/08/22 21:22:50 | 000,180,360 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\ntmtlfax.sys
[2011/08/22 21:22:50 | 000,126,686 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\mtlmnt5.sys
[2011/08/22 21:22:50 | 000,013,776 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\recagent.sys
[2011/08/22 21:22:50 | 000,012,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\mutohpen.sys
[2011/08/22 21:22:49 | 000,404,990 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slntamr.sys
[2011/08/22 21:22:49 | 000,377,984 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvaa.dll
[2011/08/22 21:22:49 | 000,229,376 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2cqag.dll
[2011/08/22 21:22:49 | 000,201,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ati2dvag.dll
[2011/08/22 21:22:49 | 000,166,912 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\drivers\s3gnbm.sys
[2011/08/22 21:22:49 | 000,129,535 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnt7554.sys
[2011/08/22 21:22:49 | 000,095,424 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slnthal.sys
[2011/08/22 21:22:49 | 000,030,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\rndismpx.sys
[2011/08/22 21:22:49 | 000,025,471 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv10nt.sys
[2011/08/22 21:22:49 | 000,022,271 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\watv06nt.sys
[2011/08/22 21:22:49 | 000,013,240 | —- | C] (Smart Link) – C:\WINDOWS\System32\drivers\slwdmsup.sys
[2011/08/22 21:22:49 | 000,011,935 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv11nt.sys
[2011/08/22 21:22:49 | 000,011,871 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv09nt.sys
[2011/08/22 21:22:49 | 000,011,807 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv07nt.sys
[2011/08/22 21:22:49 | 000,011,325 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\vchnt5.dll
[2011/08/22 21:22:49 | 000,011,295 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\wadv08nt.sys
[2011/08/22 21:22:49 | 000,005,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\smbali.sys
[2011/08/22 21:22:49 | 000,003,901 | —- | C] (Intel® Corporation) – C:\WINDOWS\System32\drivers\siint5.dll
[2011/08/22 21:22:48 | 001,888,992 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3duag.dll
[2011/08/22 21:22:48 | 001,689,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\d3d9.dll
[2011/08/22 21:22:48 | 000,870,784 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ati3d1ag.dll
[2011/08/22 21:22:48 | 000,516,768 | —- | C] (ATI Technologies Inc. ) – C:\WINDOWS\System32\ativvaxx.dll
[2011/08/22 21:22:48 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bthprops.cpl
[2011/08/22 21:22:48 | 000,071,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\blastcln.exe
[2011/08/22 21:22:48 | 000,050,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\btpanui.dll
[2011/08/22 21:22:48 | 000,032,768 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativtmxx.dll
[2011/08/22 21:22:48 | 000,023,040 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativmvxx.ax
[2011/08/22 21:22:48 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bthci.dll
[2011/08/22 21:22:48 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\auditusr.exe
[2011/08/22 21:22:48 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmsetacl.dll
[2011/08/22 21:22:48 | 000,009,728 | —- | C] (ATI Technologies Inc.) – C:\WINDOWS\System32\ativdaxx.ax
[2011/08/22 21:22:48 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx2.dll
[2011/08/22 21:22:48 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\bitsprx3.dll
[2011/08/22 21:22:47 | 002,113,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dxdiagn.dll
[2011/08/22 21:22:47 | 000,848,384 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ir41_32.ax
[2011/08/22 21:22:47 | 000,371,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\html.iec
[2011/08/22 21:22:47 | 000,338,432 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\ir41_qcx.dll
[2011/08/22 21:22:47 | 000,199,680 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\iac25_32.ax
[2011/08/22 21:22:47 | 000,193,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fsquirt.exe
[2011/08/22 21:22:47 | 000,120,320 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\ir41_qc.dll
[2011/08/22 21:22:47 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ieencode.dll
[2011/08/22 21:22:47 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\firewall.cpl
[2011/08/22 21:22:47 | 000,060,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fwcfg.dll
[2011/08/22 21:22:47 | 000,032,285 | —- | C] (Conexant Systems, Inc.) – C:\WINDOWS\System32\hsfcisp2.dll
[2011/08/22 21:22:47 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\fltmc.exe
[2011/08/22 21:22:47 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\hccoin.dll
[2011/08/22 21:22:46 | 000,755,200 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ir50_32.dll
[2011/08/22 21:22:46 | 000,384,512 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mp4sdmod.dll
[2011/08/22 21:22:46 | 000,380,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irprops.cpl
[2011/08/22 21:22:46 | 000,310,272 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mp43dmod.dll
[2011/08/22 21:22:46 | 000,200,192 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\ir50_qc.dll
[2011/08/22 21:22:46 | 000,183,808 | —- | C] (Intel Corporation.) – C:\WINDOWS\System32\ir50_qcx.dll
[2011/08/22 21:22:46 | 000,154,624 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\ivfsrc.ax
[2011/08/22 21:22:46 | 000,118,784 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdadiag.dll
[2011/08/22 21:22:46 | 000,086,016 | —- | C] (Conexant) – C:\WINDOWS\System32\mdmxsdk.dll
[2011/08/22 21:22:46 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsmsno.dll
[2011/08/22 21:22:46 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsmsfi.dll
[2011/08/22 21:22:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdukx.dll
[2011/08/22 21:22:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdno1.dll
[2011/08/22 21:22:46 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdfi1.dll
[2011/08/22 21:22:46 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinmal.dll
[2011/08/22 21:22:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmlt48.dll
[2011/08/22 21:22:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmlt47.dll
[2011/08/22 21:22:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinben.dll
[2011/08/22 21:22:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdinbe1.dll
[2011/08/22 21:22:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmaori.dll
[2011/08/22 21:22:45 | 001,737,856 | —- | C] (Matrox Graphics Inc.) – C:\WINDOWS\System32\mtxparhd.dll
[2011/08/22 21:22:45 | 000,025,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\netsetup.cpl
[2011/08/22 21:22:44 | 000,481,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xpob2res.dll
[2011/08/22 21:22:44 | 000,397,056 | —- | C] (S3 Graphics, Inc.) – C:\WINDOWS\System32\s3gnb.dll
[2011/08/22 21:22:44 | 000,313,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pgraph.dll
[2011/08/22 21:22:44 | 000,286,792 | —- | C] (Smart Link) – C:\WINDOWS\System32\slextspk.dll
[2011/08/22 21:22:44 | 000,188,508 | —- | C] (Smart Link) – C:\WINDOWS\System32\slgen.dll
[2011/08/22 21:22:44 | 000,153,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2p.dll
[2011/08/22 21:22:44 | 000,115,712 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pnetsh.dll
[2011/08/22 21:22:44 | 000,105,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\p2pgasvc.dll
[2011/08/22 21:22:44 | 000,073,832 | —- | C] (Smart Link) – C:\WINDOWS\System32\slcoinst.dll
[2011/08/22 21:22:44 | 000,049,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\powercfg.exe
[2011/08/22 21:22:44 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\System32\slrundll.exe
[2011/08/22 21:22:44 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sdhcinst.dll
[2011/08/22 21:22:43 | 000,200,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmerror.dll
[2011/08/22 21:22:43 | 000,151,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmidx.dll
[2011/08/22 21:22:43 | 000,073,796 | —- | C] (Smart Link) – C:\WINDOWS\System32\slserv.exe
[2011/08/22 21:22:43 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\vidcap.ax
[2011/08/22 21:22:43 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winshfhc.dll
[2011/08/22 21:22:43 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\smbinst.exe
[2011/08/22 21:22:42 | 001,119,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmsdmoe2.dll
[2011/08/22 21:22:42 | 000,485,376 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmspdmod.dll
[2011/08/22 21:22:42 | 000,114,688 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmpasf.dll
[2011/08/22 21:22:41 | 001,001,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmvdmoe2.dll
[2011/08/22 21:22:41 | 000,897,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wmspdmoe.dll
[2011/08/22 21:22:41 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuapi.dll
[2011/08/22 21:22:41 | 000,575,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuapi.dll
[2011/08/22 21:22:41 | 000,217,816 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaucpl.cpl
[2011/08/22 21:22:41 | 000,168,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuauclt1.exe
[2011/08/22 21:22:41 | 000,148,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wscui.cpl
[2011/08/22 21:22:40 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wucltui.dll
[2011/08/22 21:22:40 | 000,327,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wucltui.dll
[2011/08/22 21:22:40 | 000,209,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuweb.dll
[2011/08/22 21:22:40 | 000,184,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wuaueng1.dll
[2011/08/22 21:22:40 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xmlprovi.dll
[2011/08/22 21:22:40 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\wups.dll
[2011/08/22 21:22:40 | 000,035,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wups.dll
[2011/08/22 21:22:40 | 000,032,866 | —- | C] (Smart Link) – C:\WINDOWS\slrundll.exe
[2011/08/22 21:22:38 | 000,000,000 | —D | C] – C:\WINDOWS\peernet
[2011/08/22 21:22:37 | 000,000,000 | —D | C] – C:\WINDOWS\provisioning
[2011/08/22 21:20:35 | 000,000,000 | —D | C] – C:\WINDOWS\ServicePackFiles
[2011/08/22 21:17:35 | 000,018,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spmsg.dll
[2011/08/22 21:17:26 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ReinstallBackups
[2011/08/22 21:17:03 | 000,026,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spupdsvc.exe
[2011/08/22 21:14:57 | 000,000,000 | -H-D | C] – C:\WINDOWS\$NtServicePackUninstall$
[2011/08/22 21:14:52 | 000,000,000 | —D | C] – C:\WINDOWS\EHome
[2011/08/22 21:08:53 | 000,000,000 | -HSD | C] – C:\WINDOWS\Installer
[2011/08/22 21:08:50 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Datos de programa\Identities
[2011/08/22 21:08:44 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Mis documentos\Mi música
[2011/08/22 21:08:44 | 000,000,000 | -H-D | C] – C:\Archivos de programa\Uninstall Information
[2011/08/22 21:08:43 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Mis documentos\Mis imágenes
[2011/08/22 21:08:40 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Microsoft
[2011/08/22 21:08:39 | 000,000,000 | –SD | C] – C:\Documents and Settings\Obelisco\Datos de programa\Microsoft
[2011/08/22 21:08:39 | 000,000,000 | –SD | C] – C:\Documents and Settings\Obelisco\Cookies
[2011/08/22 21:08:39 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Obelisco\SendTo
[2011/08/22 21:08:39 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Obelisco\Reciente
[2011/08/22 21:08:39 | 000,000,000 | RH-D | C] – C:\Documents and Settings\Obelisco\Datos de programa
[2011/08/22 21:08:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Mis documentos
[2011/08/22 21:08:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Menú Inicio
[2011/08/22 21:08:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Inicio
[2011/08/22 21:08:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Favoritos
[2011/08/22 21:08:39 | 000,000,000 | R–D | C] – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Accesorios
[2011/08/22 21:08:39 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Obelisco\Plantillas
[2011/08/22 21:08:39 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Obelisco\Impresoras
[2011/08/22 21:08:39 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Obelisco\Entorno de red
[2011/08/22 21:08:39 | 000,000,000 | -H-D | C] – C:\Documents and Settings\Obelisco\Configuración local
[2011/08/22 21:08:39 | 000,000,000 | —D | C] – C:\Documents and Settings\Obelisco\Escritorio
[2011/08/22 21:06:33 | 000,000,000 | -HSD | C] – C:\System Volume Information
[2011/08/22 21:06:31 | 000,000,000 | –SD | C] – C:\Documents and Settings\LocalService\Datos de programa\Microsoft
[2011/08/22 21:06:31 | 000,000,000 | —D | C] – C:\Documents and Settings\NetworkService\Configuración local\Datos de programa\Microsoft
[2011/08/22 21:06:31 | 000,000,000 | —D | C] – C:\Documents and Settings\LocalService\Configuración local\Datos de programa\Microsoft
[2011/08/22 21:06:30 | 000,000,000 | –SD | C] – C:\Documents and Settings\NetworkService\Datos de programa\Microsoft
[2011/08/22 21:05:19 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winzm.ime
[2011/08/22 21:05:18 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winsp.ime
[2011/08/22 21:05:18 | 000,156,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winpy.ime
[2011/08/22 21:05:18 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winime.ime
[2011/08/22 21:05:17 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winar30.ime
[2011/08/22 21:05:17 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wingb.ime
[2011/08/22 21:05:16 | 000,041,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.dll
[2011/08/22 21:05:16 | 000,031,488 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\weitekp9.sys
[2011/08/22 21:05:15 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamps51.dll
[2011/08/22 21:05:14 | 000,074,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ext.dll
[2011/08/22 21:05:14 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3svapi.dll
[2011/08/22 21:05:14 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w3ctrs51.dll
[2011/08/22 21:05:13 | 000,426,041 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicepad.dll
[2011/08/22 21:05:13 | 000,086,073 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\voicesub.dll
[2011/08/22 21:05:13 | 000,048,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\w32.dll
[2011/08/22 21:05:11 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniime.dll
[2011/08/22 21:05:11 | 000,065,024 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unicdime.ime
[2011/08/22 21:05:10 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsprof.exe
[2011/08/22 21:05:09 | 000,455,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintsetp.exe
[2011/08/22 21:05:09 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlphr.exe
[2011/08/22 21:05:09 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmigrate.dll
[2011/08/22 21:05:08 | 000,571,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tintlgnt.ime
[2011/08/22 21:05:08 | 000,185,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\thawbrkr.dll
[2011/08/22 21:05:08 | 000,019,464 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdspx.sys
[2011/08/22 21:05:07 | 000,021,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdipx.sys
[2011/08/22 21:05:07 | 000,013,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tdasync.sys
[2011/08/22 21:05:05 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\status.dll
[2011/08/22 21:05:04 | 000,101,888 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srusbusd.dll
[2011/08/22 21:05:03 | 000,143,422 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\softkey.dll
[2011/08/22 21:05:03 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_snprfdll.dll
[2011/08/22 21:05:02 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\snmpstup.dll
[2011/08/22 21:05:01 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsm.dll
[2011/08/22 21:05:01 | 000,012,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpctrs.dll
[2011/08/22 21:05:01 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpapi.dll
[2011/08/22 21:05:01 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smimsgif.dll
[2011/08/22 21:05:01 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smierrsy.dll
[2011/08/22 21:05:00 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm9aw.dll
[2011/08/22 21:05:00 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smb6w.dll
[2011/08/22 21:05:00 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sma3w.dll
[2011/08/22 21:05:00 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8cw.dll
[2011/08/22 21:05:00 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm93w.dll
[2011/08/22 21:05:00 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm92w.dll
[2011/08/22 21:05:00 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm90w.dll
[2011/08/22 21:05:00 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8dw.dll
[2011/08/22 21:05:00 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm8aw.dll
[2011/08/22 21:04:59 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm87w.dll
[2011/08/22 21:04:59 | 000,030,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm81w.dll
[2011/08/22 21:04:59 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm89w.dll
[2011/08/22 21:04:59 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sm59w.dll
[2011/08/22 21:04:59 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\simptcp.dll
[2011/08/22 21:04:55 | 000,205,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seo.dll
[2011/08/22 21:04:55 | 000,057,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_scripto.dll
[2011/08/22 21:04:55 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_seos.dll
[2011/08/22 21:04:53 | 000,080,896 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia330.dll
[2011/08/22 21:04:53 | 000,080,896 | —- | C] (Ricoh Co., Ltd.) – C:\WINDOWS\System32\dllcache\rwia001.dll
[2011/08/22 21:04:53 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_rwnh.dll
[2011/08/22 21:04:52 | 000,026,112 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\romanime.ime
[2011/08/22 21:04:51 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_regtrace.exe
[2011/08/22 21:04:50 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\register.exe
[2011/08/22 21:04:49 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quick.ime
[2011/08/22 21:04:49 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\quser.exe
[2011/08/22 21:04:48 | 000,009,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\query.exe
[2011/08/22 21:04:47 | 000,131,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxviceo.dll
[2011/08/22 21:04:46 | 000,070,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlphr.exe
[2011/08/22 21:04:46 | 000,067,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmigrate.dll
[2011/08/22 21:04:46 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxmcro.dll
[2011/08/22 21:04:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pmxgl.dll
[2011/08/22 21:04:45 | 000,482,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlgnt.ime
[2011/08/22 21:04:45 | 000,079,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\phon.ime
[2011/08/22 21:04:45 | 000,053,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pintlcsd.dll
[2011/08/22 21:04:45 | 000,020,992 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\permchk.dll
[2011/08/22 21:04:44 | 000,036,927 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs411.dll
[2011/08/22 21:04:44 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\pagecnt.dll
[2011/08/22 21:04:44 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs404.dll
[2011/08/22 21:04:44 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs804.dll
[2011/08/22 21:04:44 | 000,014,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\padrs412.dll
[2011/08/22 21:04:41 | 000,038,912 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_ntfsdrv.dll
[2011/08/22 21:04:39 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nextlink.dll
[2011/08/22 21:04:37 | 000,229,439 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\multibox.dll
[2011/08/22 21:04:32 | 001,875,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.lex
[2011/08/22 21:04:32 | 000,098,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msir3jp.dll
[2011/08/22 21:04:25 | 000,092,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.sys
[2011/08/22 21:04:25 | 000,092,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mga.dll
[2011/08/22 21:04:25 | 000,026,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mdsync.dll
[2011/08/22 21:04:24 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_mailmsg.dll
[2011/08/22 21:04:23 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logscrpt.dll
[2011/08/22 21:04:21 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\korwbrkr.dll
[2011/08/22 21:04:21 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdvntc.dll
[2011/08/22 21:04:21 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdusa.dll
[2011/08/22 21:04:21 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdurdu.dll
[2011/08/22 21:04:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth3.dll
[2011/08/22 21:04:20 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth2.dll
[2011/08/22 21:04:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth1.dll
[2011/08/22 21:04:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdth0.dll
[2011/08/22 21:04:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr2.dll
[2011/08/22 21:04:20 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsyr1.dll
[2011/08/22 21:04:19 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecat.dll
[2011/08/22 21:04:19 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnecnt.dll
[2011/08/22 21:04:19 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdnec95.dll
[2011/08/22 21:04:19 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinpun.dll
[2011/08/22 21:04:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintel.dll
[2011/08/22 21:04:19 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdintam.dll
[2011/08/22 21:04:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinmar.dll
[2011/08/22 21:04:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinkan.dll
[2011/08/22 21:04:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinhin.dll
[2011/08/22 21:04:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdinguj.dll
[2011/08/22 21:04:18 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdindev.dll
[2011/08/22 21:04:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdheb.dll
[2011/08/22 21:04:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdfa.dll
[2011/08/22 21:04:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv2.dll
[2011/08/22 21:04:17 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbddiv1.dll
[2011/08/22 21:04:17 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgeo.dll
[2011/08/22 21:04:16 | 000,018,432 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\jupiw.dll
[2011/08/22 21:04:16 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbd101a.dll
[2011/08/22 21:04:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda3.dll
[2011/08/22 21:04:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda2.dll
[2011/08/22 21:04:16 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbda1.dll
[2011/08/22 21:04:16 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarmw.dll
[2011/08/22 21:04:16 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdarme.dll
[2011/08/22 21:04:15 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iwrps.dll
[2011/08/22 21:04:15 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isapips.dll
[2011/08/22 21:04:14 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\infoctrs.dll
[2011/08/22 21:04:13 | 000,471,102 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskdic.dll
[2011/08/22 21:04:13 | 000,315,455 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imskf.dll
[2011/08/22 21:04:12 | 000,274,489 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputyc.dll
[2011/08/22 21:04:12 | 000,262,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjputy.exe
[2011/08/22 21:04:12 | 000,233,527 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjprw.exe
[2011/08/22 21:04:12 | 000,208,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpmig.exe
[2011/08/22 21:04:12 | 000,102,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imlang.dll
[2011/08/22 21:04:12 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imkrinst.exe
[2011/08/22 21:04:12 | 000,045,109 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpuex.exe
[2011/08/22 21:04:11 | 000,716,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcus.dll
[2011/08/22 21:04:11 | 000,368,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpcic.dll
[2011/08/22 21:04:11 | 000,307,257 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.exe
[2011/08/22 21:04:11 | 000,155,705 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdsvr.exe
[2011/08/22 21:04:11 | 000,081,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdct.dll
[2011/08/22 21:04:11 | 000,057,398 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjpdadm.exe
[2011/08/22 21:04:10 | 000,811,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81k.dll
[2011/08/22 21:04:10 | 000,340,023 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imjp81.ime
[2011/08/22 21:04:10 | 000,311,359 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsv.exe
[2011/08/22 21:04:10 | 000,106,496 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrcic.dll
[2011/08/22 21:04:10 | 000,102,463 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imepadsm.dll
[2011/08/22 21:04:10 | 000,094,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekr61.ime
[2011/08/22 21:04:10 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmbx.dll
[2011/08/22 21:04:10 | 000,044,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\imekrmig.exe
[2011/08/22 21:04:09 | 000,060,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisclex4.dll
[2011/08/22 21:04:09 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iiscrmap.dll
[2011/08/22 21:04:09 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iissync.exe
[2011/08/22 21:04:09 | 000,003,584 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iismui.dll
[2011/08/22 21:04:04 | 010,129,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxkor.dll
[2011/08/22 21:03:55 | 010,096,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hwxcht.dll
[2011/08/22 21:03:53 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hanjadic.dll
[2011/08/22 21:03:51 | 000,031,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsroute.dll
[2011/08/22 21:03:51 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxssend.exe
[2011/08/22 21:03:50 | 000,138,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxsclntr.dll
[2011/08/22 21:03:50 | 000,112,640 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fxscfgwz.dll
[2011/08/22 21:03:50 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpctrs2.dll
[2011/08/22 21:03:50 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftlx041e.dll
[2011/08/22 21:03:48 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\flattemp.exe
[2011/08/22 21:03:47 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_fcachdll.dll
[2011/08/22 21:03:46 | 000,045,568 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esunid.dll
[2011/08/22 21:03:46 | 000,025,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\et4000.sys
[2011/08/22 21:03:45 | 000,057,856 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esuimgd.dll
[2011/08/22 21:03:45 | 000,031,744 | —- | C] (SEIKO EPSON CORP.) – C:\WINDOWS\System32\dllcache\esucmd.dll
[2011/08/22 21:03:44 | 000,514,587 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\edb500.dll
[2011/08/22 21:03:39 | 000,078,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dayi.ime
[2011/08/22 21:03:38 | 000,057,399 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cplexe.exe
[2011/08/22 21:03:38 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\counters.dll
[2011/08/22 21:03:38 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cprofile.exe
[2011/08/22 21:03:37 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\convlog.exe
[2011/08/22 21:03:37 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\controt.dll
[2011/08/22 21:03:34 | 000,480,256 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintsetp.exe
[2011/08/22 21:03:34 | 000,198,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintime.dll
[2011/08/22 21:03:34 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtmbx.dll
[2011/08/22 21:03:34 | 000,056,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtskdic.dll
[2011/08/22 21:03:34 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cintlgnt.ime
[2011/08/22 21:03:33 | 001,677,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chsbrkr.dll
[2011/08/22 21:03:33 | 000,838,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chtbrkr.dll
[2011/08/22 21:03:32 | 000,078,336 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chajei.ime
[2011/08/22 21:03:32 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgport.exe
[2011/08/22 21:03:32 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chgusr.exe
[2011/08/22 21:03:32 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chglogon.exe
[2011/08/22 21:03:32 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\change.exe
[2011/08/22 21:03:31 | 000,054,528 | —- | C] (Philips Semiconductors GmbH) – C:\WINDOWS\System32\dllcache\cap7146.sys
[2011/08/22 21:03:30 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\browscap.dll
[2011/08/22 21:03:30 | 000,010,752 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_iscii.dll
[2011/08/22 21:03:30 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\c_is2022.dll
[2011/08/22 21:03:28 | 000,029,184 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\asptxn.dll
[2011/08/22 21:03:28 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\aspperf.dll
[2011/08/22 21:03:28 | 000,009,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\authfilt.dll
[2011/08/22 21:03:27 | 000,314,368 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqueue.dll
[2011/08/22 21:03:27 | 000,045,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_aqadmin.dll
[2011/08/22 21:03:25 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\adrot.dll
[2011/08/22 21:03:25 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\admxprox.dll
[2011/08/22 21:03:25 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_adsiisex.dll
[2011/08/22 21:03:21 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wamregps.dll
[2011/08/22 21:03:19 | 002,134,528 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpsnap.dll
[2011/08/22 21:03:19 | 000,175,616 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\EXCH_smtpadm.dll
[2011/08/22 21:03:13 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetsloc.dll
[2011/08/22 21:03:13 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\inetmgr.exe
[2011/08/22 21:03:12 | 000,172,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisui.dll
[2011/08/22 21:03:12 | 000,014,848 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisreset.exe
[2011/08/22 21:03:12 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ftpsapi2.dll
[2011/08/22 21:03:12 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\iisrstap.dll
[2011/08/22 21:03:08 | 000,095,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\certmap.ocx
[2011/08/22 21:03:00 | 000,000,000 | —D | C] – C:\WINDOWS\System32\xircom
[2011/08/22 21:03:00 | 000,000,000 | —D | C] – C:\Archivos de programa\xerox
[2011/08/22 21:03:00 | 000,000,000 | —D | C] – C:\Archivos de programa\microsoft frontpage
[2011/08/22 21:02:23 | 000,112,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mapi32.dll
[2011/08/22 21:01:36 | 000,000,000 | -HSD | C] – C:\Documents and Settings\All Users\DRM
[2011/08/22 21:01:25 | 000,000,000 | –SD | C] – C:\WINDOWS\Downloaded Program Files
[2011/08/22 21:01:25 | 000,000,000 | R–D | C] – C:\WINDOWS\Offline Web Pages
[2011/08/22 21:00:56 | 000,000,000 | —D | C] – C:\WINDOWS\System32\DirectX
[2011/08/22 21:00:36 | 000,099,840 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\helphost.exe
[2011/08/22 21:00:36 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrslv.dll
[2011/08/22 21:00:36 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrcdlg.dll
[2011/08/22 21:00:36 | 000,043,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\racpldlg.dll
[2011/08/22 21:00:36 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\notiflag.exe
[2011/08/22 21:00:36 | 000,029,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\safrdm.dll
[2011/08/22 21:00:36 | 000,021,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\brpinfo.dll
[2011/08/22 21:00:36 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\atrace.dll
[2011/08/22 21:00:36 | 000,011,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\atrace.dll
[2011/08/22 21:00:35 | 000,007,680 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hcappres.dll
[2011/08/22 21:00:30 | 000,047,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\srdiag.exe
[2011/08/22 21:00:29 | 000,032,768 | —- | C] (Intel Corporation) – C:\WINDOWS\System32\isrdbg32.dll
[2011/08/22 21:00:29 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmevtmsg.dll
[2011/08/22 21:00:29 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\nmevtmsg.dll
[2011/08/22 21:00:28 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\acctres.dll
[2011/08/22 21:00:28 | 000,071,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\acctres.dll
[2011/08/22 21:00:28 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msinfo32.exe
[2011/08/22 21:00:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wb32.exe
[2011/08/22 21:00:28 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cb32.exe
[2011/08/22 21:00:27 | 000,050,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetres.dll
[2011/08/22 21:00:27 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\Services
[2011/08/22 21:00:24 | 000,282,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\inetcfg.dll
[2011/08/22 21:00:24 | 000,086,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\isign32.dll
[2011/08/22 21:00:24 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwdial.dll
[2011/08/22 21:00:24 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icwphbk.dll
[2011/08/22 21:00:24 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\icfgnt5.dll
[2011/08/22 21:00:24 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icfgnt5.dll
[2011/08/22 21:00:24 | 000,000,000 | –SD | C] – C:\WINDOWS\Tasks
[2011/08/22 21:00:23 | 000,073,728 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwtutor.exe
[2011/08/22 21:00:23 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\icwres.dll
[2011/08/22 21:00:23 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trialoc.dll
[2011/08/22 21:00:23 | 000,025,088 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wisc10.dll
[2011/08/22 21:00:23 | 000,023,552 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoapr.dll
[2011/08/22 21:00:23 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\isignup.exe
[2011/08/22 21:00:22 | 000,235,520 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mssoap1.dll
[2011/08/22 21:00:22 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\MSSoap
[2011/08/22 21:00:21 | 000,094,208 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ieinfo5.ocx
[2011/08/22 21:00:19 | 000,000,000 | —D | C] – C:\WINDOWS\srchasst
[2011/08/22 21:00:18 | 000,520,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmpvis.dll
[2011/08/22 21:00:18 | 000,163,897 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmutil.dll
[2011/08/22 21:00:18 | 000,110,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmfilt.dll
[2011/08/22 21:00:18 | 000,018,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qmgrprxy.dll
[2011/08/22 21:00:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Macromed
[2011/08/22 21:00:17 | 000,327,743 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmmres.dll
[2011/08/22 21:00:17 | 000,000,000 | —D | C] – C:\Archivos de programa\Movie Maker
[2011/08/22 21:00:14 | 000,241,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\srrstr.dll
[2011/08/22 21:00:14 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Restore
[2011/08/22 21:00:14 | 000,000,000 | —D | C] – C:\WINDOWS\PCHealth
[2011/08/22 21:00:13 | 000,081,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\ils.dll
[2011/08/22 21:00:13 | 000,069,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msconf.dll
[2011/08/22 21:00:13 | 000,034,560 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mnmdd.dll
[2011/08/22 21:00:13 | 000,028,672 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\nmmkcert.dll
[2011/08/22 21:00:11 | 000,252,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoeacct.dll
[2011/08/22 21:00:11 | 000,105,984 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msoert2.dll
[2011/08/22 21:00:11 | 000,000,000 | —D | C] – C:\Archivos de programa\NetMeeting
[2011/08/22 21:00:10 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mstinit.exe
[2011/08/22 21:00:10 | 000,000,000 | —D | C] – C:\Archivos de programa\Outlook Express
[2011/08/22 21:00:05 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\System
[2011/08/22 21:00:03 | 000,000,000 | —D | C] – C:\Archivos de programa\Internet Explorer
[2011/08/22 21:00:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documentos\Mis imágenes
[2011/08/22 21:00:01 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documentos\Mi música
[2011/08/22 20:59:35 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Juegos
[2011/08/22 20:59:23 | 000,000,000 | —D | C] – C:\Archivos de programa\ComPlus Applications
[2011/08/22 20:59:18 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Herramientas administrativas
[2011/08/22 20:59:18 | 000,000,000 | —D | C] – C:\WINDOWS\Registration
[2011/08/22 20:59:11 | 000,000,000 | -H-D | C] – C:\Archivos de programa\WindowsUpdate
[2011/08/22 20:59:10 | 000,000,000 | —D | C] – C:\Archivos de programa\Windows Media Player
[2011/08/22 20:59:10 | 000,000,000 | —D | C] – C:\Archivos de programa\Servicios en línea
[2011/08/22 20:59:05 | 000,000,000 | —D | C] – C:\Archivos de programa\Messenger
[2011/08/22 20:59:03 | 001,817,687 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgres.dll
[2011/08/22 20:59:03 | 000,082,501 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckg.dll
[2011/08/22 20:59:03 | 000,042,577 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\bckgzm.exe
[2011/08/22 20:59:03 | 000,042,574 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvsezm.exe
[2011/08/22 20:59:02 | 002,178,131 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlres.dll
[2011/08/22 20:59:02 | 001,175,635 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzres.dll
[2011/08/22 20:59:02 | 000,781,397 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrres.dll
[2011/08/22 20:59:02 | 000,753,236 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvseres.dll
[2011/08/22 20:59:02 | 000,066,113 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvl.dll
[2011/08/22 20:59:02 | 000,057,409 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtz.dll
[2011/08/22 20:59:02 | 000,048,706 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rvse.dll
[2011/08/22 20:59:02 | 000,042,575 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkrzm.exe
[2011/08/22 20:59:02 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shvlzm.exe
[2011/08/22 20:59:02 | 000,042,573 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\hrtzzm.exe
[2011/08/22 20:59:02 | 000,040,515 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\chkr.dll
[2011/08/22 20:59:01 | 001,041,491 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnresm.dll
[2011/08/22 20:59:01 | 000,217,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cmnclim.dll
[2011/08/22 20:59:01 | 000,113,222 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zoneclim.dll
[2011/08/22 20:59:01 | 000,041,029 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zcorem.dll
[2011/08/22 20:59:01 | 000,036,937 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zclientm.exe
[2011/08/22 20:59:01 | 000,032,339 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\uniansi.dll
[2011/08/22 20:59:01 | 000,029,760 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\znetm.dll
[2011/08/22 20:59:01 | 000,013,894 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zonelibm.dll
[2011/08/22 20:59:01 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\write.exe
[2011/08/22 20:59:01 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\write.exe
[2011/08/22 20:59:01 | 000,004,677 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\zeeverm.dll
[2011/08/22 20:59:01 | 000,000,000 | —D | C] – C:\Archivos de programa\MSN Gaming Zone
[2011/08/22 20:58:54 | 000,188,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\accwiz.exe
[2011/08/22 20:58:54 | 000,070,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\access.cpl
[2011/08/22 20:58:53 | 000,353,280 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hypertrm.dll
[2011/08/22 20:58:53 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avtapi.dll
[2011/08/22 20:58:53 | 000,232,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avtapi.dll
[2011/08/22 20:58:53 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndvol32.exe
[2011/08/22 20:58:53 | 000,139,264 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sndvol32.exe
[2011/08/22 20:58:53 | 000,132,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sndrec32.exe
[2011/08/22 20:58:53 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avwav.dll
[2011/08/22 20:58:53 | 000,073,216 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avwav.dll
[2011/08/22 20:58:53 | 000,044,544 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\hticons.dll
[2011/08/22 20:58:53 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avmeter.dll
[2011/08/22 20:58:53 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\avmeter.dll
[2011/08/22 20:58:53 | 000,013,312 | —- | C] (Hilgraeve, Inc.) – C:\WINDOWS\System32\dllcache\htrn_jis.dll
[2011/08/22 20:58:52 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winchat.exe
[2011/08/22 20:58:52 | 000,035,328 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winchat.exe
[2011/08/22 20:58:49 | 000,000,000 | —D | C] – C:\WINDOWS\Cursores
[2011/08/22 20:58:48 | 000,652,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\getuname.dll
[2011/08/22 20:58:48 | 000,652,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\getuname.dll
[2011/08/22 20:58:48 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\charmap.exe
[2011/08/22 20:58:48 | 000,080,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\charmap.exe
[2011/08/22 20:58:47 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mshearts.exe
[2011/08/22 20:58:47 | 000,128,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mshearts.exe
[2011/08/22 20:58:47 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\winmine.exe
[2011/08/22 20:58:47 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmine.exe
[2011/08/22 20:58:47 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\calc.exe
[2011/08/22 20:58:47 | 000,115,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\calc.exe
[2011/08/22 20:58:47 | 000,067,072 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdshost.exe
[2011/08/22 20:58:47 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\sol.exe
[2011/08/22 20:58:47 | 000,057,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sol.exe
[2011/08/22 20:58:47 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\freecell.exe
[2011/08/22 20:58:47 | 000,055,808 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\freecell.exe
[2011/08/22 20:58:47 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\reset.exe
[2011/08/22 20:58:47 | 000,010,240 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\reset.exe
[2011/08/22 20:58:46 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\regini.exe
[2011/08/22 20:58:46 | 000,033,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\regini.exe
[2011/08/22 20:58:46 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qwinsta.exe
[2011/08/22 20:58:46 | 000,023,040 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qwinsta.exe
[2011/08/22 20:58:46 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msg.exe
[2011/08/22 20:58:46 | 000,022,016 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msg.exe
[2011/08/22 20:58:46 | 000,020,480 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qprocess.exe
[2011/08/22 20:58:46 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsshutdn.exe
[2011/08/22 20:58:46 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsshutdn.exe
[2011/08/22 20:58:46 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\qappsrv.exe
[2011/08/22 20:58:46 | 000,017,408 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\qappsrv.exe
[2011/08/22 20:58:46 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tskill.exe
[2011/08/22 20:58:46 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tskill.exe
[2011/08/22 20:58:46 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rwinsta.exe
[2011/08/22 20:58:46 | 000,016,384 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rwinsta.exe
[2011/08/22 20:58:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\logoff.exe
[2011/08/22 20:58:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\logoff.exe
[2011/08/22 20:58:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\cdmodem.dll
[2011/08/22 20:58:46 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cdmodem.dll
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tsdiscon.exe
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tsdiscon.exe
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscon.exe
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tscon.exe
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\shadow.exe
[2011/08/22 20:58:46 | 000,015,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shadow.exe
[2011/08/22 20:58:46 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpcfgex.dll
[2011/08/22 20:58:46 | 000,004,608 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\rdpcfgex.dll
[2011/08/22 20:58:45 | 000,956,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtctm.dll
[2011/08/22 20:58:45 | 000,161,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcuiu.dll
[2011/08/22 20:58:45 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtclog.dll
[2011/08/22 20:58:45 | 000,019,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mtsadmin.tlb
[2011/08/22 20:58:45 | 000,011,776 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\xolehlp.dll
[2011/08/22 20:58:44 | 000,110,592 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clbcatex.dll
[2011/08/22 20:58:44 | 000,097,792 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comrepl.dll
[2011/08/22 20:58:44 | 000,085,504 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\catsrvps.dll
[2011/08/22 20:58:44 | 000,059,392 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\stclient.dll
[2011/08/22 20:58:44 | 000,034,304 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxlegih.dll
[2011/08/22 20:58:44 | 000,030,720 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxdm.dll
[2011/08/22 20:58:44 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comaddin.dll
[2011/08/22 20:58:44 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dcomcnfg.exe
[2011/08/22 20:58:44 | 000,004,096 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mtxex.dll
[2011/08/22 20:58:43 | 000,539,648 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comuid.dll
[2011/08/22 20:58:43 | 000,167,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\comsnap.dll
[2011/08/22 20:58:43 | 000,045,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmi2xml.dll
[2011/08/22 20:58:40 | 000,076,800 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmipicmp.dll
[2011/08/22 20:58:40 | 000,052,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmitimep.dll
[2011/08/22 20:58:39 | 000,116,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\updprov.dll
[2011/08/22 20:58:39 | 000,061,440 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wmimsg.dll
[2011/08/22 20:58:39 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemdisp.tlb
[2011/08/22 20:58:39 | 000,031,232 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.tlb
[2011/08/22 20:58:39 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmtr.dll
[2011/08/22 20:58:39 | 000,016,896 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\unsecapp.exe
[2011/08/22 20:58:39 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\winmgmt.exe
[2011/08/22 20:58:39 | 000,012,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wbemads.dll
[2011/08/22 20:58:38 | 000,273,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msiprov.dll
[2011/08/22 20:58:38 | 000,061,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tmplprov.dll
[2011/08/22 20:58:38 | 000,059,904 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\trnsprov.dll
[2011/08/22 20:58:38 | 000,040,960 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\smtpcons.dll
[2011/08/22 20:58:37 | 000,188,416 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cmprops.dll
[2011/08/22 20:58:37 | 000,120,320 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\dsprov.dll
[2011/08/22 20:58:37 | 000,056,832 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\servdeps.dll
[2011/08/22 20:58:37 | 000,053,248 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\fwdprov.dll
[2011/08/22 20:58:37 | 000,017,920 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mmfutil.dll
[2011/08/22 20:58:33 | 000,346,624 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mspaint.exe
[2011/08/22 20:58:33 | 000,124,928 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\mplay32.exe
[2011/08/22 20:58:33 | 000,104,448 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\clipbrd.exe
[2011/08/22 20:58:33 | 000,000,000 | —D | C] – C:\Archivos de programa\Windows NT
[2011/08/22 20:58:33 | 000,000,000 | —D | C] – C:\Archivos de programa\MSN
[2011/08/22 20:58:32 | 001,929,952 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuaueng.dll
[2011/08/22 20:58:32 | 000,539,136 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\spider.exe
[2011/08/22 20:58:32 | 000,093,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscfgwmi.dll
[2011/08/22 20:58:32 | 000,053,472 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wuauclt.exe
[2011/08/22 20:58:31 | 000,428,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\msdtcprx.dll
[2011/08/22 20:58:31 | 000,147,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdchost.dll
[2011/08/22 20:58:31 | 000,087,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpwsx.dll
[2011/08/22 20:58:31 | 000,062,976 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpclip.exe
[2011/08/22 20:58:31 | 000,044,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\tscupgrd.exe
[2011/08/22 20:58:31 | 000,039,424 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\cfgbkend.dll
[2011/08/22 20:58:31 | 000,019,968 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdpsnd.dll
[2011/08/22 20:58:31 | 000,013,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\rdsaddin.exe
[2011/08/22 20:58:31 | 000,000,000 | —D | C] – C:\WINDOWS\System32\MsDtc
[2011/08/22 20:58:30 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Com
[2011/08/22 20:58:28 | 000,058,880 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\licwmi.dll
[2011/08/22 20:57:10 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Accesorios
[2011/08/22 16:47:48 | 000,000,000 | R-SD | C] – C:\WINDOWS\Fonts
[2011/08/22 16:47:48 | 000,000,000 | RHSD | C] – C:\WINDOWS\System32\dllcache
[2011/08/22 16:47:48 | 000,000,000 | R–D | C] – C:\WINDOWS\Web
[2011/08/22 16:47:48 | 000,000,000 | -H-D | C] – C:\WINDOWS\inf
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\WinSxS
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wins
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\wbem
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\usmt
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\twain_32
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Temp
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\system32
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\system
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\spool
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ShellExt
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\Setup
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\security
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Resources
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\repair
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ras
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\oobe
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\npp
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\mui
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\mui
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\msapps
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\msagent
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Media
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\java
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\inetsrv
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\IME
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\ime
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\icsxml
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\ias
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Help
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\export
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\etc
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Driver Cache
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\drivers\disdn
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\dhcp
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Debug
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Cursors
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Connection Wizard
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\config
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\Config
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\AppPatch
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\addins
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3com_dmi
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3082
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\3076
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\2052
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1054
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1042
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1041
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1037
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1033
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1031
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1028
[2011/08/22 16:47:48 | 000,000,000 | —D | C] – C:\WINDOWS\System32\1025
[2011/08/22 15:54:25 | 000,020,992 | —- | C] (Realtek Semiconductor Corporation) – C:\WINDOWS\System32\drivers\rtl8139.sys
[2011/08/22 15:54:16 | 000,006,400 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\drivers\enum1394.sys
[2011/08/22 15:54:10 | 004,274,816 | —- | C] (NVIDIA Corporation) – C:\WINDOWS\System32\nv4_disp.dll
[2011/08/22 15:53:58 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\usbui.dll
[2011/08/22 15:52:55 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\ODBC
[2011/08/22 15:52:53 | 000,077,824 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcommon.dll
[2011/08/22 15:52:53 | 000,065,536 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spcplui.dll
[2011/08/22 15:52:52 | 000,774,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\spttseng.dll
[2011/08/22 15:52:52 | 000,036,864 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sapisvr.exe
[2011/08/22 15:52:52 | 000,000,000 | R–D | C] – C:\Archivos de programa
[2011/08/22 15:52:52 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\SpeechEngines
[2011/08/22 15:52:52 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes\Microsoft Shared
[2011/08/22 15:52:52 | 000,000,000 | —D | C] – C:\Archivos de programa\Archivos comunes
[2011/08/22 15:52:49 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuq.dll
[2011/08/22 15:52:49 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtuf.dll
[2011/08/22 15:52:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuq.dll
[2011/08/22 15:52:49 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtuf.dll
[2011/08/22 15:52:49 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdazel.dll
[2011/08/22 15:52:49 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdazel.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycc.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbduzb.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdur.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdtat.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdmon.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkyr.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdkaz.dll
[2011/08/22 15:52:48 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdaze.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycc.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbduzb.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdur.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdtat.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdmon.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkyr.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdkaz.dll
[2011/08/22 15:52:48 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdaze.dll
[2011/08/22 15:52:47 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru1.dll
[2011/08/22 15:52:47 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdru.dll
[2011/08/22 15:52:47 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdbu.dll
[2011/08/22 15:52:47 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdblr.dll
[2011/08/22 15:52:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru1.dll
[2011/08/22 15:52:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdru.dll
[2011/08/22 15:52:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdbu.dll
[2011/08/22 15:52:47 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdblr.dll
[2011/08/22 15:52:46 | 000,008,192 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhept.dll
[2011/08/22 15:52:46 | 000,008,192 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhept.dll
[2011/08/22 15:52:46 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela3.dll
[2011/08/22 15:52:46 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela3.dll
[2011/08/22 15:52:46 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhela2.dll
[2011/08/22 15:52:46 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdgkl.dll
[2011/08/22 15:52:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhela2.dll
[2011/08/22 15:52:46 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdgkl.dll
[2011/08/22 15:52:46 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe319.dll
[2011/08/22 15:52:46 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe220.dll
[2011/08/22 15:52:46 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhe.dll
[2011/08/22 15:52:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe319.dll
[2011/08/22 15:52:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe220.dll
[2011/08/22 15:52:46 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhe.dll
[2011/08/22 15:52:45 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv1.dll
[2011/08/22 15:52:45 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlv.dll
[2011/08/22 15:52:45 | 000,006,144 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdest.dll
[2011/08/22 15:52:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv1.dll
[2011/08/22 15:52:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlv.dll
[2011/08/22 15:52:45 | 000,006,144 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdest.dll
[2011/08/22 15:52:45 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt1.dll
[2011/08/22 15:52:45 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdlt.dll
[2011/08/22 15:52:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt1.dll
[2011/08/22 15:52:45 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdlt.dll
[2011/08/22 15:52:44 | 000,007,168 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz.dll
[2011/08/22 15:52:44 | 000,007,168 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdycl.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl1.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdsl.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz2.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcz1.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdcr.dll
[2011/08/22 15:52:44 | 000,006,656 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\KBDAL.DLL
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdycl.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl1.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdsl.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz2.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcz1.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdcr.dll
[2011/08/22 15:52:44 | 000,006,656 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdal.dll
[2011/08/22 15:52:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdro.dll
[2011/08/22 15:52:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdpl1.dll
[2011/08/22 15:52:44 | 000,005,632 | R— | C] (Microsoft Corporation) – C:\WINDOWS\System32\kbdhu1.dll
[2011/08/22 15:52:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdro.dll
[2011/08/22 15:52:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdpl1.dll
[2011/08/22 15:52:44 | 000,005,632 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\kbdhu1.dll
[2011/08/22 15:52:42 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dllcache\dgrpsetu.dll
[2011/08/22 15:52:42 | 000,176,157 | —- | C] (Digi International, Inc.) – C:\WINDOWS\System32\dgrpsetu.dll
[2011/08/22 15:52:42 | 000,085,532 | —- | C] (Digi International) – C:\WINDOWS\System32\dllcache\dgsetup.dll
[2011/08/22 15:52:42 | 000,085,532 | —- | C] (Digi International) – C:\WINDOWS\System32\dgsetup.dll
[2011/08/22 15:52:42 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\spxcoins.dll
[2011/08/22 15:52:42 | 000,024,661 | —- | C] (Perle Systems Ltd.) – C:\WINDOWS\System32\dllcache\spxcoins.dll
[2011/08/22 15:52:42 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\irclass.dll
[2011/08/22 15:52:42 | 000,013,312 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\irclass.dll
[2011/08/22 15:52:41 | 000,127,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\msvideo.dll
[2011/08/22 15:52:41 | 000,127,104 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MSVIDEO.DLL
[2011/08/22 15:52:41 | 000,103,936 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\EqnClass.Dll
[2011/08/22 15:52:41 | 000,103,936 | —- | C] (Equinox Systems Inc.) – C:\WINDOWS\System32\dllcache\eqnclass.dll
[2011/08/22 15:52:41 | 000,083,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olecli.dll
[2011/08/22 15:52:41 | 000,083,456 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLECLI.DLL
[2011/08/22 15:52:41 | 000,070,544 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\mmsystem.dll
[2011/08/22 15:52:41 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\olesvr.dll
[2011/08/22 15:52:41 | 000,024,064 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\OLESVR.DLL
[2011/08/22 15:52:41 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\tapi.dll
[2011/08/22 15:52:41 | 000,019,200 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TAPI.DLL
[2011/08/22 15:52:41 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\wfwnet.drv
[2011/08/22 15:52:41 | 000,013,600 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\WFWNET.DRV
[2011/08/22 15:52:41 | 000,009,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\ver.dll
[2011/08/22 15:52:41 | 000,009,056 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VER.DLL
[2011/08/22 15:52:41 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\shell.dll
[2011/08/22 15:52:41 | 000,005,120 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SHELL.DLL
[2011/08/22 15:52:41 | 000,004,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\timer.drv
[2011/08/22 15:52:41 | 000,004,128 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\TIMER.DRV
[2011/08/22 15:52:41 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\system.drv
[2011/08/22 15:52:41 | 000,003,360 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SYSTEM.DRV
[2011/08/22 15:52:41 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\vga.drv
[2011/08/22 15:52:41 | 000,002,176 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\VGA.DRV
[2011/08/22 15:52:41 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mouse.drv
[2011/08/22 15:52:41 | 000,002,032 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MOUSE.DRV
[2011/08/22 15:52:41 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\sound.drv
[2011/08/22 15:52:41 | 000,001,744 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\SOUND.DRV
[2011/08/22 15:52:41 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mmtask.tsk
[2011/08/22 15:52:41 | 000,001,152 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MMTASK.TSK
[2011/08/22 15:52:40 | 000,146,944 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\winspool.drv
[2011/08/22 15:52:40 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avifile.dll
[2011/08/22 15:52:40 | 000,109,568 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVIFILE.DLL
[2011/08/22 15:52:40 | 000,073,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciavi.drv
[2011/08/22 15:52:40 | 000,073,696 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIAVI.DRV
[2011/08/22 15:52:40 | 000,070,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\avicap.dll
[2011/08/22 15:52:40 | 000,070,224 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\AVICAP.DLL
[2011/08/22 15:52:40 | 000,033,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\commdlg.dll
[2011/08/22 15:52:40 | 000,033,856 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\COMMDLG.DLL
[2011/08/22 15:52:40 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciwave.drv
[2011/08/22 15:52:40 | 000,028,160 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCIWAVE.DRV
[2011/08/22 15:52:40 | 000,025,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\mciseq.drv
[2011/08/22 15:52:40 | 000,025,344 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\MCISEQ.DRV
[2011/08/22 15:52:40 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\TASKMAN.EXE
[2011/08/22 15:52:40 | 000,015,872 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\taskman.exe
[2011/08/22 15:52:40 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\lzexpand.dll
[2011/08/22 15:52:40 | 000,009,936 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\LZEXPAND.DLL
[2011/08/22 15:52:40 | 000,008,704 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\batt.dll
[2011/08/22 15:52:40 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\dllcache\keyboard.drv
[2011/08/22 15:52:40 | 000,002,000 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System\KEYBOARD.DRV
[2011/08/22 15:52:39 | 000,076,288 | —- | C] (Microsoft Corporation) – C:\WINDOWS\System32\storprop.dll
[2011/08/22 15:52:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Menú Inicio
[2011/08/22 15:52:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio
[2011/08/22 15:52:32 | 000,000,000 | R–D | C] – C:\Documents and Settings\All Users\Documentos
[2011/08/22 15:52:32 | 000,000,000 | -H-D | C] – C:\Documents and Settings\All Users\Plantillas
[2011/08/22 15:52:32 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Favoritos
[2011/08/22 15:52:32 | 000,000,000 | —D | C] – C:\Documents and Settings\All Users\Escritorio
[2011/08/22 15:52:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot2
[2011/08/22 15:52:18 | 000,000,000 | —D | C] – C:\WINDOWS\System32\CatRoot
[2011/08/22 15:52:12 | 000,000,000 | –SD | C] – C:\Documents and Settings\All Users\Datos de programa\Microsoft
[2011/08/22 15:52:12 | 000,000,000 | RH-D | C] – C:\Documents and Settings\All Users\Datos de programa
[2011/08/22 15:51:57 | 000,000,000 | —D | C] – C:\Documents and Settings
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2011/08/26 20:13:12 | 000,001,204 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1645522239-682003330-1003UA.job
[2011/08/26 17:57:45 | 003,207,333 | —- | M] () – C:\WINDOWS\{00000002-00000000-00000009-00001102-00000004-00531102}.CDF
[2011/08/26 17:56:50 | 000,000,332 | —- | M] () – C:\WINDOWS\tasks\GlaryInitialize.job
[2011/08/26 17:42:01 | 000,002,206 | —- | M] () – C:\WINDOWS\System32\wpa.dbl
[2011/08/26 17:41:58 | 000,002,048 | –S- | M] () – C:\WINDOWS\bootstat.dat
[2011/08/26 17:41:56 | 267,767,808 | -HS- | M] () – C:\hiberfil.sys
[2011/08/26 02:02:14 | 000,071,427 | —- | M] () – C:\WINDOWS\cscmondump.bin
[2011/08/26 02:02:13 | 000,417,792 | —- | M] () – C:\WINDOWS\CSC_ServiceDump.dat
[2011/08/26 02:02:11 | 000,028,332 | —- | M] () – C:\WINDOWS\System32\BMXCtrlState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/26 02:02:11 | 000,028,332 | —- | M] () – C:\WINDOWS\System32\BMXBkpCtrlState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/26 02:02:10 | 000,020,316 | —- | M] () – C:\WINDOWS\System32\BMXStateBkp-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/26 02:02:10 | 000,020,316 | —- | M] () – C:\WINDOWS\System32\BMXState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/26 02:02:10 | 000,001,080 | —- | M] () – C:\WINDOWS\System32\settingsbkup.sfm
[2011/08/26 02:02:10 | 000,001,080 | —- | M] () – C:\WINDOWS\System32\settings.sfm
[2011/08/26 02:02:10 | 000,000,024 | —- | M] () – C:\WINDOWS\System32\DVCStateBkp-{00000002-00000000-00000009-00001102-00000004-00531102}.dat
[2011/08/26 02:02:10 | 000,000,024 | —- | M] () – C:\WINDOWS\System32\DVCState-{00000002-00000000-00000009-00001102-00000004-00531102}.dat
[2011/08/26 02:01:14 | 003,207,333 | —- | M] () – C:\WINDOWS\{00000002-00000000-00000009-00001102-00000004-00531102}.BAK
[2011/08/25 22:07:03 | 000,000,484 | —- | M] () – C:\WINDOWS\tasks\COMODO Updater.job
[2011/08/25 02:21:57 | 000,225,130 | —- | M] () – C:\WINDOWS\CSC_ActiveCleanLog.dat
[2011/08/25 02:13:07 | 000,001,152 | —- | M] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1645522239-682003330-1003Core.job
[2011/08/24 00:12:01 | 104,823,197 | —- | M] () – C:\Documents and Settings\Obelisco\Mis documentos\Americo - Yo Soy Americo [2010].rar
[2011/08/23 21:05:52 | 000,362,204 | —- | M] () – C:\WINDOWS\System32\perfh00A.dat
[2011/08/23 21:05:52 | 000,311,604 | —- | M] () – C:\WINDOWS\System32\perfh009.dat
[2011/08/23 21:05:52 | 000,051,068 | —- | M] () – C:\WINDOWS\System32\perfc00A.dat
[2011/08/23 21:05:52 | 000,039,992 | —- | M] () – C:\WINDOWS\System32\perfc009.dat
[2011/08/23 21:01:08 | 000,092,680 | —- | M] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2011/08/23 20:55:54 | 000,001,374 | —- | M] () – C:\WINDOWS\imsins.BAK
[2011/08/22 23:38:14 | 000,285,256 | —- | M] (COMODO) – C:\WINDOWS\System32\guard32.dll
[2011/08/22 23:38:12 | 000,097,504 | —- | M] (COMODO) – C:\WINDOWS\System32\drivers\inspect.sys
[2011/08/22 23:38:10 | 000,029,400 | —- | M] (COMODO) – C:\WINDOWS\System32\drivers\cmdhlp.sys
[2011/08/22 23:38:09 | 000,017,416 | —- | M] (COMODO) – C:\WINDOWS\System32\drivers\cmderd.sys
[2011/08/22 23:38:07 | 000,242,600 | —- | M] (COMODO) – C:\WINDOWS\System32\drivers\cmdGuard.sys
[2011/08/22 22:35:11 | 013,784,816 | —- | M] (Mozilla) – C:\Documents and Settings\Obelisco\Mis documentos\Firefox Setup 6.0.exe
[2011/08/22 22:21:47 | 000,000,317 | —- | M] () – C:\WINDOWS\SBWIN.INI
[2011/08/22 22:17:11 | 000,316,640 | —- | M] () – C:\WINDOWS\WMSysPr9.prx
[2011/08/22 22:06:08 | 000,000,884 | —- | M] () – C:\Documents and Settings\All Users\Escritorio\COMODO System-Cleaner.lnk
[2011/08/22 22:05:35 | 001,700,352 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\gdiplus.dll
[2011/08/22 22:05:35 | 001,060,864 | —- | M] (Microsoft Corporation) – C:\WINDOWS\System32\mfc71.dll
[2011/08/22 21:42:07 | 000,251,168 | RHS- | M] () – C:\ntldr
[2011/08/22 21:23:47 | 000,000,211 | RHS- | M] () – C:\boot.ini
[2011/08/22 21:18:32 | 000,047,564 | RHS- | M] () – C:\NTDETECT.COM
[2011/08/22 21:08:51 | 000,025,065 | —- | M] () – C:\WINDOWS\System32\wmpscheme.xml
[2011/08/22 21:06:26 | 000,008,192 | —- | M] () – C:\WINDOWS\REGLOCS.OLD
[2011/08/22 21:05:36 | 000,000,261 | —- | M] () – C:\WINDOWS\System32\$winnt$.inf
[2011/08/22 21:02:38 | 000,002,909 | —- | M] () – C:\WINDOWS\System32\CONFIG.NT
[2011/08/22 21:02:38 | 000,000,000 | RHS- | M] () – C:\MSDOS.SYS
[2011/08/22 21:02:38 | 000,000,000 | RHS- | M] () – C:\IO.SYS
[2011/08/22 21:02:38 | 000,000,000 | —- | M] () – C:\CONFIG.SYS
[2011/08/22 21:02:38 | 000,000,000 | —- | M] () – C:\AUTOEXEC.BAT
[2011/08/22 21:02:36 | 000,023,392 | —- | M] () – C:\WINDOWS\System32\nscompat.tlb
[2011/08/22 21:02:36 | 000,016,832 | —- | M] () – C:\WINDOWS\System32\amcompat.tlb
[2011/08/22 21:02:34 | 000,299,552 | —- | M] () – C:\WINDOWS\WMSysPrx.prx
[2011/08/22 21:02:23 | 000,004,207 | —- | M] () – C:\WINDOWS\ODBCINST.INI
[2011/08/22 20:59:32 | 000,021,900 | —- | M] () – C:\WINDOWS\System32\emptyregdb.dat
[4 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
[1 C:\WINDOWS\System32\*.tmp files -> C:\WINDOWS\System32\*.tmp -> ]

========== Files Created - No Company Name ==========

[2011/08/24 00:09:33 | 104,823,197 | —- | C] () – C:\Documents and Settings\Obelisco\Mis documentos\Americo - Yo Soy Americo [2010].rar
[2011/08/24 00:08:53 | 000,028,207 | —- | C] () – C:\Documents and Settings\Obelisco\Mis documentos\americoyosoyamericonuev.jpg
[2011/08/23 22:41:31 | 053,059,896 | —- | C] () – C:\Documents and Settings\Obelisco\Mis documentos\americo - cuando estes con el.rar
[2011/08/23 21:10:05 | 000,000,332 | —- | C] () – C:\WINDOWS\tasks\GlaryInitialize.job
[2011/08/23 02:08:55 | 000,001,204 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1645522239-682003330-1003UA.job
[2011/08/23 02:08:52 | 000,001,152 | —- | C] () – C:\WINDOWS\tasks\GoogleUpdateTaskUserS-1-5-21-1644491937-1645522239-682003330-1003Core.job
[2011/08/22 23:43:07 | 000,020,316 | —- | C] () – C:\WINDOWS\System32\BMXStateBkp-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/22 23:43:07 | 000,020,316 | —- | C] () – C:\WINDOWS\System32\BMXState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/22 23:43:07 | 000,001,080 | —- | C] () – C:\WINDOWS\System32\settingsbkup.sfm
[2011/08/22 23:43:07 | 000,001,080 | —- | C] () – C:\WINDOWS\System32\settings.sfm
[2011/08/22 23:43:07 | 000,000,024 | —- | C] () – C:\WINDOWS\System32\DVCStateBkp-{00000002-00000000-00000009-00001102-00000004-00531102}.dat
[2011/08/22 23:43:07 | 000,000,024 | —- | C] () – C:\WINDOWS\System32\DVCState-{00000002-00000000-00000009-00001102-00000004-00531102}.dat
[2011/08/22 22:35:46 | 000,000,779 | —- | C] () – C:\Documents and Settings\All Users\Menú Inicio\Programas\Mozilla Firefox.lnk
[2011/08/22 22:23:41 | 003,207,333 | —- | C] () – C:\WINDOWS\{00000002-00000000-00000009-00001102-00000004-00531102}.BAK
[2011/08/22 22:23:39 | 003,207,333 | —- | C] () – C:\WINDOWS\{00000002-00000000-00000009-00001102-00000004-00531102}.CDF
[2011/08/22 22:22:39 | 000,028,332 | —- | C] () – C:\WINDOWS\System32\BMXCtrlState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/22 22:22:39 | 000,028,332 | —- | C] () – C:\WINDOWS\System32\BMXBkpCtrlState-{00000002-00000000-00000009-00001102-00000004-00531102}.rfx
[2011/08/22 22:21:45 | 000,000,231 | —- | C] () – C:\WINDOWS\AC3API.INI
[2011/08/22 22:21:44 | 001,048,576 | —- | C] () – C:\WINDOWS\System32\SFMAN.DAT
[2011/08/22 22:19:49 | 000,037,727 | —- | C] () – C:\WINDOWS\System32\Emu10kx.ini
[2011/08/22 22:19:49 | 000,000,029 | —- | C] () – C:\WINDOWS\System32\ctzapxx.ini
[2011/08/22 22:19:43 | 002,259,067 | —- | C] () – C:\WINDOWS\System32\default.ecw
[2011/08/22 22:19:43 | 000,179,669 | —- | C] () – C:\WINDOWS\System32\ctstatic.dat
[2011/08/22 22:19:43 | 000,164,044 | —- | C] () – C:\WINDOWS\System32\ctdlang.dat
[2011/08/22 22:19:43 | 000,113,373 | —- | C] () – C:\WINDOWS\System32\CTBASICW.DAT
[2011/08/22 22:19:43 | 000,113,273 | —- | C] () – C:\WINDOWS\System32\ctbas2w.dat
[2011/08/22 22:19:43 | 000,044,055 | —- | C] () – C:\WINDOWS\System32\ctdaught.dat
[2011/08/22 22:19:42 | 000,001,912 | —- | C] () – C:\WINDOWS\System32\Audigy.bmp
[2011/08/22 22:19:38 | 000,184,320 | —- | C] () – C:\WINDOWS\PSCONV.EXE
[2011/08/22 22:19:38 | 000,036,864 | —- | C] () – C:\WINDOWS\System32\REGPLIB.EXE
[2011/08/22 22:19:37 | 000,049,152 | —- | C] () – C:\WINDOWS\System32\KILLAPPS.EXE
[2011/08/22 22:19:37 | 000,000,180 | —- | C] () – C:\WINDOWS\System32\KILL.INI
[2011/08/22 22:19:37 | 000,000,059 | —- | C] () – C:\WINDOWS\System32\DEFAULT8.SFM
[2011/08/22 22:19:37 | 000,000,059 | —- | C] () – C:\WINDOWS\System32\DEFAULT4.SFM
[2011/08/22 22:19:37 | 000,000,059 | —- | C] () – C:\WINDOWS\System32\DEFAULT.SFM
[2011/08/22 22:19:36 | 003,206,822 | —- | C] () – C:\WINDOWS\CTDVAUDY.CDF
[2011/08/22 22:19:35 | 003,735,544 | —- | C] () – C:\WINDOWS\CTDV10K2.CDF
[2011/08/22 22:19:34 | 003,373,917 | —- | C] () – C:\WINDOWS\CTDV10K1.CDF
[2011/08/22 22:19:34 | 002,167,684 | —- | C] () – C:\WINDOWS\System32\CT2MGM.SF2
[2011/08/22 22:19:34 | 001,048,576 | —- | C] () – C:\WINDOWS\System32\CT1MGM.ROM
[2011/08/22 22:19:25 | 004,174,814 | —- | C] () – C:\WINDOWS\System32\CT4MGM.SF2
[2011/08/22 22:19:08 | 000,000,317 | —- | C] () – C:\WINDOWS\SBWIN.INI
[2011/08/22 22:18:39 | 000,233,472 | —- | C] () – C:\WINDOWS\System32\CTPlay.CRL
[2011/08/22 22:15:31 | 000,024,576 | —- | C] () – C:\WINDOWS\System32\CTMERes.DLL
[2011/08/22 22:10:40 | 000,071,427 | —- | C] () – C:\WINDOWS\cscmondump.bin
[2011/08/22 22:10:34 | 000,417,792 | —- | C] () – C:\WINDOWS\CSC_ServiceDump.dat
[2011/08/22 22:10:34 | 000,225,130 | —- | C] () – C:\WINDOWS\CSC_ActiveCleanLog.dat
[2011/08/22 22:06:11 | 000,000,484 | —- | C] () – C:\WINDOWS\tasks\COMODO Updater.job
[2011/08/22 22:06:08 | 000,000,884 | —- | C] () – C:\Documents and Settings\All Users\Escritorio\COMODO System-Cleaner.lnk
[2011/08/22 21:47:11 | 000,666,623 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.chm
[2011/08/22 21:47:11 | 000,074,638 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplayer.adm
[2011/08/22 21:47:11 | 000,026,745 | —- | C] () – C:\WINDOWS\System32\dllcache\wmplay.chm
[2011/08/22 21:47:11 | 000,010,457 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.hta
[2011/08/22 21:47:11 | 000,001,771 | —- | C] () – C:\WINDOWS\System32\dllcache\wmptour.css
[2011/08/22 21:47:11 | 000,001,760 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpocm.inf
[2011/08/22 21:47:11 | 000,000,420 | —- | C] () – C:\WINDOWS\System32\dllcache\wmploc.js
[2011/08/22 21:47:10 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud7.wav
[2011/08/22 21:47:10 | 000,343,204 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud6.wav
[2011/08/22 21:47:10 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud9.wav
[2011/08/22 21:47:10 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud8.wav
[2011/08/22 21:47:10 | 000,086,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud5.wav
[2011/08/22 21:47:09 | 000,354,468 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud1.wav
[2011/08/22 21:47:09 | 000,300,969 | —- | C] () – C:\WINDOWS\System32\dllcache\viz.wmv
[2011/08/22 21:47:09 | 000,172,196 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud3.wav
[2011/08/22 21:47:09 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud4.wav
[2011/08/22 21:47:09 | 000,086,180 | —- | C] () – C:\WINDOWS\System32\dllcache\wmpaud2.wav
[2011/08/22 21:47:09 | 000,058,412 | —- | C] () – C:\WINDOWS\System32\dllcache\wmp.inf
[2011/08/22 21:47:09 | 000,034,556 | —- | C] () – C:\WINDOWS\System32\dllcache\wmdm.inf
[2011/08/22 21:47:09 | 000,023,829 | —- | C] () – C:\WINDOWS\System32\dllcache\tourbg.gif
[2011/08/22 21:47:09 | 000,017,489 | —- | C] () – C:\WINDOWS\System32\dllcache\videobg.gif
[2011/08/22 21:47:09 | 000,013,540 | —- | C] () – C:\WINDOWS\System32\dllcache\wmfsdk.inf
[2011/08/22 21:47:09 | 000,008,677 | —- | C] () – C:\WINDOWS\System32\dllcache\wm7.gif
[2011/08/22 21:47:09 | 000,007,892 | —- | C] () – C:\WINDOWS\System32\dllcache\wm9.gif
[2011/08/22 21:47:09 | 000,007,636 | —- | C] () – C:\WINDOWS\System32\dllcache\wm2.gif
[2011/08/22 21:47:09 | 000,007,369 | —- | C] () – C:\WINDOWS\System32\dllcache\wm4.gif
[2011/08/22 21:47:09 | 000,006,241 | —- | C] () – C:\WINDOWS\System32\dllcache\wm3.gif
[2011/08/22 21:47:09 | 000,006,060 | —- | C] () – C:\WINDOWS\System32\dllcache\wm6.gif
[2011/08/22 21:47:09 | 000,005,789 | —- | C] () – C:\WINDOWS\System32\dllcache\wm1.gif
[2011/08/22 21:47:09 | 000,005,290 | —- | C] () – C:\WINDOWS\System32\dllcache\vidsamp.gif
[2011/08/22 21:47:09 | 000,004,193 | —- | C] () – C:\WINDOWS\System32\dllcache\wm8.gif
[2011/08/22 21:47:09 | 000,003,187 | —- | C] () – C:\WINDOWS\System32\dllcache\tour.js
[2011/08/22 21:47:09 | 000,002,477 | —- | C] () – C:\WINDOWS\System32\dllcache\wm5.gif
[2011/08/22 21:47:09 | 000,002,469 | —- | C] () – C:\WINDOWS\System32\dllcache\tplay.gif
[2011/08/22 21:47:09 | 000,002,450 | —- | C] () – C:\WINDOWS\System32\dllcache\tpause.gif
[2011/08/22 21:47:09 | 000,002,375 | —- | C] () – C:\WINDOWS\System32\dllcache\tplayh.gif
[2011/08/22 21:47:09 | 000,002,371 | —- | C] () – C:\WINDOWS\System32\dllcache\tpauseh.gif
[2011/08/22 21:47:09 | 000,001,398 | —- | C] () – C:\WINDOWS\System32\dllcache\taon.gif
[2011/08/22 21:47:09 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taonh.gif
[2011/08/22 21:47:09 | 000,001,380 | —- | C] () – C:\WINDOWS\System32\dllcache\taoff.gif
[2011/08/22 21:47:09 | 000,001,367 | —- | C] () – C:\WINDOWS\System32\dllcache\taoffh.gif
[2011/08/22 21:47:09 | 000,001,148 | —- | C] () – C:\WINDOWS\System32\dllcache\snd.htm
[2011/08/22 21:47:08 | 000,572,557 | —- | C] () – C:\WINDOWS\System32\dllcache\rtuner.wmv
[2011/08/22 21:47:08 | 000,375,519 | —- | C] () – C:\WINDOWS\System32\dllcache\nuskin.wmv
[2011/08/22 21:47:08 | 000,085,852 | —- | C] () – C:\WINDOWS\System32\dllcache\plyr_err.chm
[2011/08/22 21:47:08 | 000,066,174 | —- | C] () – C:\WINDOWS\System32\dllcache\revert.wmz
[2011/08/22 21:47:08 | 000,036,714 | —- | C] () – C:\WINDOWS\System32\dllcache\mplayer2.inf
[2011/08/22 21:47:08 | 000,022,060 | —- | C] () – C:\WINDOWS\System32\dllcache\npds.zip
[2011/08/22 21:47:08 | 000,002,778 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogoh.gif
[2011/08/22 21:47:08 | 000,002,545 | —- | C] () – C:\WINDOWS\System32\dllcache\mplogo.gif
[2011/08/22 21:47:08 | 000,001,832 | —- | C] () – C:\WINDOWS\System32\dllcache\skins.inf
[2011/08/22 21:47:08 | 000,001,488 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst5.wpl
[2011/08/22 21:47:08 | 000,001,481 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst6.wpl
[2011/08/22 21:47:08 | 000,001,481 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst3.wpl
[2011/08/22 21:47:08 | 000,001,453 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst12.wpl
[2011/08/22 21:47:08 | 000,001,451 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst4.wpl
[2011/08/22 21:47:08 | 000,001,251 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst1.wpl
[2011/08/22 21:47:08 | 000,001,058 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst2.wpl
[2011/08/22 21:47:08 | 000,001,048 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst7.wpl
[2011/08/22 21:47:08 | 000,001,038 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst8.wpl
[2011/08/22 21:47:08 | 000,000,816 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst11.wpl
[2011/08/22 21:47:08 | 000,000,812 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst10.wpl
[2011/08/22 21:47:08 | 000,000,785 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst14.wpl
[2011/08/22 21:47:08 | 000,000,784 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst9.wpl
[2011/08/22 21:47:08 | 000,000,783 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst13.wpl
[2011/08/22 21:47:08 | 000,000,736 | —- | C] () – C:\WINDOWS\System32\dllcache\plylst15.wpl
[2011/08/22 21:47:08 | 000,000,403 | —- | C] () – C:\WINDOWS\System32\dllcache\npdrmv2.zip
[2011/08/22 21:47:07 | 000,457,607 | —- | C] () – C:\WINDOWS\System32\dllcache\mdlib.wmv
[2011/08/22 21:47:07 | 000,381,425 | —- | C] () – C:\WINDOWS\System32\dllcache\copycd.wmv
[2011/08/22 21:47:07 | 000,184,132 | —- | C] () – C:\WINDOWS\System32\dllcache\compact.wmz
[2011/08/22 21:47:07 | 000,009,585 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.css
[2011/08/22 21:47:07 | 000,008,298 | —- | C] () – C:\WINDOWS\System32\dllcache\contents.htm
[2011/08/22 21:47:07 | 000,006,878 | —- | C] () – C:\WINDOWS\System32\dllcache\controls.js
[2011/08/22 21:47:07 | 000,005,971 | —- | C] () – C:\WINDOWS\System32\dllcache\events.js
[2011/08/22 21:47:07 | 000,000,999 | —- | C] () – C:\WINDOWS\System32\dllcache\bktrh.gif
[2011/08/22 21:47:07 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnth.gif
[2011/08/22 21:47:07 | 000,000,773 | —- | C] () – C:\WINDOWS\System32\dllcache\cnt.gif
[2011/08/22 21:47:07 | 000,000,772 | —- | C] () – C:\WINDOWS\System32\dllcache\cntd.gif
[2011/08/22 21:47:07 | 000,000,760 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapph.gif
[2011/08/22 21:47:07 | 000,000,717 | —- | C] () – C:\WINDOWS\System32\dllcache\cloapp.gif
[2011/08/22 21:23:37 | 000,316,640 | —- | C] () – C:\WINDOWS\WMSysPr9.prx
[2011/08/22 21:22:57 | 000,053,248 | —- | C] () – C:\WINDOWS\System32\vbicodec.ax
[2011/08/22 21:22:56 | 000,239,616 | —- | C] () – C:\WINDOWS\System32\wstrenderer.ax
[2011/08/22 21:22:56 | 000,164,352 | —- | C] () – C:\WINDOWS\System32\wstpager.ax
[2011/08/22 21:22:51 | 000,129,045 | —- | C] () – C:\WINDOWS\System32\drivers\cxthsfs2.cty
[2011/08/22 21:22:51 | 000,064,352 | —- | C] () – C:\WINDOWS\System32\drivers\ativmc20.cod
[2011/08/22 21:22:50 | 000,067,866 | —- | C] () – C:\WINDOWS\System32\drivers\netwlan5.img
[2011/08/22 21:22:46 | 000,118,272 | —- | C] () – C:\WINDOWS\System32\mpeg2data.ax
[2011/08/22 21:08:50 | 000,000,773 | —- | C] () – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Outlook Express.lnk
[2011/08/22 21:08:45 | 000,000,802 | —- | C] () – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Internet Explorer.lnk
[2011/08/22 21:08:39 | 000,001,599 | —- | C] () – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Asistencia remota.lnk
[2011/08/22 21:08:39 | 000,000,827 | —- | C] () – C:\Documents and Settings\Obelisco\Menú Inicio\Programas\Reproductor de Windows Media.lnk
[2011/08/22 21:08:38 | 267,767,808 | -HS- | C] () – C:\hiberfil.sys
[2011/08/22 21:06:26 | 000,008,192 | —- | C] () – C:\WINDOWS\REGLOCS.OLD
[2011/08/22 21:05:36 | 000,002,048 | –S- | C] () – C:\WINDOWS\bootstat.dat
[2011/08/22 21:04:45 | 000,175,104 | —- | C] () – C:\WINDOWS\System32\dllcache\pintlcsa.dll
[2011/08/22 21:04:21 | 001,158,818 | —- | C] () – C:\WINDOWS\System32\dllcache\korwbrkr.lex
[2011/08/22 21:04:12 | 000,059,392 | —- | C] () – C:\WINDOWS\System32\dllcache\imscinst.exe
[2011/08/22 21:04:11 | 000,196,665 | —- | C] () – C:\WINDOWS\System32\dllcache\imjpinst.exe
[2011/08/22 21:04:10 | 000,134,339 | —- | C] () – C:\WINDOWS\System32\dllcache\imekr.lex
[2011/08/22 21:03:59 | 013,463,552 | —- | C] () – C:\WINDOWS\System32\dllcache\hwxjpn.dll
[2011/08/22 21:03:53 | 000,108,827 | —- | C] () – C:\WINDOWS\System32\dllcache\hanja.lex
[2011/08/22 21:03:34 | 000,173,568 | —- | C] () – C:\WINDOWS\System32\dllcache\chtskf.dll
[2011/08/22 21:02:38 | 000,002,909 | —- | C] () – C:\WINDOWS\System32\CONFIG.NT
[2011/08/22 21:02:38 | 000,000,000 | RHS- | C] () – C:\MSDOS.SYS
[2011/08/22 21:02:38 | 000,000,000 | RHS- | C] () – C:\IO.SYS
[2011/08/22 21:02:38 | 000,000,000 | —- | C] () – C:\CONFIG.SYS
[2011/08/22 21:02:38 | 000,000,000 | —- | C] () – C:\AUTOEXEC.BAT
[2011/08/22 21:02:36 | 000,025,065 | —- | C] () – C:\WINDOWS\System32\wmpscheme.xml
[2011/08/22 21:02:36 | 000,023,392 | —- | C] () – C:\WINDOWS\System32\nscompat.tlb
[2011/08/22 21:02:36 | 000,016,832 | —- | C] () – C:\WINDOWS\System32\amcompat.tlb
[2011/08/22 21:02:34 | 000,299,552 | —- | C] () – C:\WINDOWS\WMSysPrx.prx
[2011/08/22 21:01:02 | 004,399,505 | —- | C] () – C:\WINDOWS\System32\dllcache\nls302en.lex
[2011/08/22 21:00:34 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt256.bmp
[2011/08/22 21:00:34 | 000,048,680 | -HS- | C] () – C:\WINDOWS\winnt.bmp
[2011/08/22 21:00:30 | 000,000,984 | —- | C] () – C:\WINDOWS\System32\dllcache\srframe.mmf
[2011/08/22 20:59:35 | 000,000,888 | —- | C] () – C:\Documents and Settings\All Users\Menú Inicio\Programas\Windows Messenger.lnk
[2011/08/22 20:59:32 | 000,021,900 | —- | C] () – C:\WINDOWS\System32\emptyregdb.dat
[2011/08/22 20:59:10 | 000,001,911 | —- | C] () – C:\Documents and Settings\All Users\Menú Inicio\Programas\MSN Explorer.lnk
[2011/08/22 20:58:49 | 000,065,954 | —- | C] () – C:\WINDOWS\Viento.bmp
[2011/08/22 20:58:49 | 000,065,832 | —- | C] () – C:\WINDOWS\Santa Fe.bmp
[2011/08/22 20:58:49 | 000,026,680 | —- | C] () – C:\WINDOWS\Abanicos.bmp
[2011/08/22 20:58:49 | 000,026,582 | —- | C] () – C:\WINDOWS\Roca verde.bmp
[2011/08/22 20:58:49 | 000,017,362 | —- | C] () – C:\WINDOWS\Rododendro.bmp
[2011/08/22 20:58:49 | 000,017,336 | —- | C] () – C:\WINDOWS\A pescar.bmp
[2011/08/22 20:58:49 | 000,016,730 | —- | C] () – C:\WINDOWS\Plumas.bmp
[2011/08/22 20:58:49 | 000,009,522 | —- | C] () – C:\WINDOWS\Azteca.bmp
[2011/08/22 20:58:48 | 000,065,978 | —- | C] () – C:\WINDOWS\Pompas.bmp
[2011/08/22 20:58:48 | 000,017,062 | —- | C] () – C:\WINDOWS\Grano de café.bmp
[2011/08/22 20:58:48 | 000,001,272 | —- | C] () – C:\WINDOWS\Lazo azul 16.bmp
[2011/08/22 20:58:46 | 000,003,286 | —- | C] () – C:\WINDOWS\System32\tslabels.h
[2011/08/22 20:58:46 | 000,001,161 | —- | C] () – C:\WINDOWS\System32\usrlogon.cmd
[2011/08/22 20:58:45 | 000,000,768 | —- | C] () – C:\WINDOWS\System32\msdtcprf.h
[2011/08/22 20:58:37 | 000,063,488 | —- | C] () – C:\WINDOWS\System32\wmimgmt.msc
[2011/08/22 16:51:11 | 000,000,211 | RHS- | C] () – C:\boot.ini
[2011/08/22 16:51:09 | 000,000,261 | —- | C] () – C:\WINDOWS\System32\$winnt$.inf
[2011/08/22 15:52:59 | 000,001,374 | —- | C] () – C:\WINDOWS\imsins.BAK
[2011/08/22 15:52:55 | 000,004,207 | —- | C] () – C:\WINDOWS\ODBCINST.INI
[2011/08/22 15:52:53 | 001,685,606 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.spd
[2011/08/22 15:52:53 | 000,000,888 | —- | C] () – C:\WINDOWS\System32\dllcache\sam.sdf
[2011/08/22 15:52:52 | 000,643,717 | —- | C] () – C:\WINDOWS\System32\dllcache\ltts1033.lxa
[2011/08/22 15:52:52 | 000,605,050 | —- | C] () – C:\WINDOWS\System32\dllcache\r1033tts.lxa
[2011/08/22 15:52:40 | 000,001,936 | —- | C] () – C:\WINDOWS\System32\AUTOEXEC.NT
[2011/08/22 15:52:30 | 000,810,264 | —- | C] () – C:\WINDOWS\System32\dllcache\NT5IIS.CAT
[2011/08/22 15:52:30 | 000,657,548 | —- | C] () – C:\WINDOWS\System32\dllcache\CLASSES.CAT
[2011/08/22 15:52:30 | 000,399,670 | —- | C] () – C:\WINDOWS\System32\dllcache\MAPIMIG.CAT
[2011/08/22 15:52:30 | 000,390,168 | —- | C] () – C:\WINDOWS\System32\dllcache\WFC.CAT
[2011/08/22 15:52:30 | 000,056,081 | —- | C] () – C:\WINDOWS\System32\dllcache\DAJAVAC.CAT
[2011/08/22 15:52:30 | 000,052,311 | —- | C] () – C:\WINDOWS\System32\dllcache\DX3.CAT
[2011/08/22 15:52:30 | 000,037,509 | —- | C] () – C:\WINDOWS\System32\dllcache\MW770.CAT
[2011/08/22 15:52:30 | 000,022,151 | —- | C] () – C:\WINDOWS\System32\dllcache\TCLASSES.CAT
[2011/08/22 15:52:30 | 000,021,281 | —- | C] () – C:\WINDOWS\System32\dllcache\XMLDSOC.CAT
[2011/08/22 15:52:30 | 000,014,031 | —- | C] () – C:\WINDOWS\System32\dllcache\MSJDBC.CAT
[2011/08/22 15:52:30 | 000,013,497 | —- | C] () – C:\WINDOWS\System32\dllcache\HPCRDP.CAT
[2011/08/22 15:52:30 | 000,008,599 | —- | C] () – C:\WINDOWS\System32\dllcache\IASNT4.CAT
[2011/08/22 15:52:30 | 000,007,382 | —- | C] () – C:\WINDOWS\System32\dllcache\OEMBIOS.CAT
[2011/08/22 15:51:56 | 000,092,680 | —- | C] () – C:\WINDOWS\System32\FNTCACHE.DAT
[2004/08/02 14:20:40 | 000,004,569 | —- | C] () – C:\WINDOWS\System32\secupd.dat
[2002/09/09 14:06:48 | 000,001,804 | —- | C] () – C:\WINDOWS\System32\dcache.bin
[2001/10/06 13:58:36 | 000,004,463 | —- | C] () – C:\WINDOWS\System32\oembios.dat
[2001/10/06 13:58:34 | 013,107,200 | —- | C] () – C:\WINDOWS\System32\oembios.bin
[2001/08/24 12:00:00 | 000,673,088 | —- | C] () – C:\WINDOWS\System32\mlang.dat
[2001/08/24 12:00:00 | 000,362,204 | —- | C] () – C:\WINDOWS\System32\perfh00A.dat
[2001/08/24 12:00:00 | 000,317,534 | —- | C] () – C:\WINDOWS\System32\perfi00A.dat
[2001/08/24 12:00:00 | 000,311,604 | —- | C] () – C:\WINDOWS\System32\perfh009.dat
[2001/08/24 12:00:00 | 000,272,128 | —- | C] () – C:\WINDOWS\System32\perfi009.dat
[2001/08/24 12:00:00 | 000,218,003 | —- | C] () – C:\WINDOWS\System32\dssec.dat
[2001/08/24 12:00:00 | 000,051,068 | —- | C] () – C:\WINDOWS\System32\perfc00A.dat
[2001/08/24 12:00:00 | 000,046,258 | —- | C] () – C:\WINDOWS\System32\mib.bin
[2001/08/24 12:00:00 | 000,039,992 | —- | C] () – C:\WINDOWS\System32\perfc009.dat
[2001/08/24 12:00:00 | 000,036,284 | —- | C] () – C:\WINDOWS\System32\perfd00A.dat
[2001/08/24 12:00:00 | 000,028,626 | —- | C] () – C:\WINDOWS\System32\perfd009.dat
[2001/08/24 12:00:00 | 000,000,741 | —- | C] () – C:\WINDOWS\System32\noise.dat

< End of report >

Now Extras without LOP and Purity:

OTL Extras logfile created on: 26/08/2011 20:09:27 - Run 1
OTL by OldTimer - Version 3.2.26.5 Folder = C:\Documents and Settings\Obelisco\Mis documentos\Downloads
Windows XP Professional Edition Service Pack 3 (Version = 5.1.2600) - Type = NTWorkstation
Internet Explorer (Version = 6.0.2900.5512)
Locale: 00000C0A | Country: España | Language: ESN | Date Format: dd/MM/yyyy

255,30 Mb Total Physical Memory | 69,92 Mb Available Physical Memory | 27,39% Memory free
672,67 Mb Paging File | 158,06 Mb Available in Paging File | 23,50% Paging File free
Paging file location(s): C:\pagefile.sys 384 768 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa
Drive C: | 55,89 Gb Total Space | 49,11 Gb Free Space | 87,88% Space Free | Partition Type: NTFS

Computer Name: COFTIELD-G665QJ | User Name: Obelisco | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\]
.cpl [@ = cplfile] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
.url [@ = InternetShortcut] – rundll32.exe shdocvw.dll,OpenURL %l

[HKEY_CURRENT_USER\SOFTWARE\Classes\]
.html [@ = ChromeHTML] – Reg Error: Key error. File not found

========== Shell Spawning ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\\shell\[command]\command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – rundll32.exe shell32.dll,Control_RunDLL "%1",%*
exefile [open] – "%1" %*
htmlfile – Reg Error: Key error.
InternetShortcut [open] – rundll32.exe shdocvw.dll,OpenURL %l
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%\system32\rundll32.exe %SystemRoot%\system32\shell32.dll,OpenAs_RunDLL %1
Directory [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [open] – %SystemRoot%\Explorer.exe /idlist,%I,%L (Microsoft Corporation)
Folder [explore] – %SystemRoot%\Explorer.exe /e,/idlist,%I,%L (Microsoft Corporation)
Drive [find] – %SystemRoot%\Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"AntiVirusDisableNotify" = 0
"FirewallDisableNotify" = 0
"UpdatesDisableNotify" = 0
"AntiVirusOverride" = 0
"FirewallOverride" = 0

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\AhnlabAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ComputerAssociatesAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\KasperskyAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\McAfeeFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\PandaFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SophosAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\SymantecFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TinyFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendAntiVirus]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\TrendFirewall]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring\ZoneLabsFirewall]

========== System Restore Settings ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SystemRestore]
"DisableSR" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\Sr]
"Start" = 0

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SrService]
"Start" = 2

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"EnableFirewall" = 0

========== Authorized Applications List ==========

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile\AuthorizedApplications\List]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile\AuthorizedApplications\List]


========== HKEY_LOCAL_MACHINE Uninstall List ==========

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{350C9C0A-3D7C-4EE8-BAA9-00BCB3D54227}" = WebFldrs XP
"{9115E7DB-3B29-445A-802D-11E0AA945B7F}" = Sound Blaster Audigy
"{A278382D-4F1B-4D47-9885-8523F7261E8D}_is1" = PDF-Viewer
"{C4039DC0-905D-4372-8B20-120F0B6CF283}" = COMODO System-Cleaner
"{FD8E178D-8B4E-42DA-B434-EFF270329B1C}" = COMODO Internet Security
"Avira AntiVir Desktop" = Avira Premium Security Suite
"Glary Utilities_is1" = Glary Utilities 2.35.0.1216
"Mozilla Firefox 6.0 (x86 es-ES)" = Mozilla Firefox 6.0 (x86 es-ES)
"Windows XP Service Pack" = Windows XP Service Pack 3
"WinRAR archiver" = WinRAR 4.01 (32-bit)

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"Google Chrome" = Google Chrome

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 23/08/2011 0:16:59 | Computer Name = COFTIELD-G665QJ | Source = Avira Firewall | ID = 0
Description = Licencia no válida

Error - 23/08/2011 0:19:00 | Computer Name = COFTIELD-G665QJ | Source = Avira AntiVir | ID = 4117
Description = El fichero de licencia no contiene una licencia válida. El servicio
finalizará!

Error - 23/08/2011 0:24:01 | Computer Name = COFTIELD-G665QJ | Source = Avira AntiVir | ID = 4117
Description = El fichero de licencia no contiene una licencia válida. El servicio
finalizará!

[ System Events ]
Error - 24/08/2011 13:04:02 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7022
Description = El servicio Avira AntiVir Guard permanece en inicio.

Error - 24/08/2011 13:04:03 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 24/08/2011 13:04:03 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7022
Description = El servicio Avira AntiVir Guard permanece en inicio.

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 25/08/2011 13:49:22 | Computer Name = COFTIELD-G665QJ | Source = Service Control Manager | ID = 7001
Description = El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir
Guard, el cual no pudo iniciarse debido al siguiente error: %%1070

Error - 26/08/2011 19:14:56 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:02 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:09 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.

Error - 26/08/2011 19:15:31 | Computer Name = COFTIELD-G665QJ | Source = atapi | ID = 262153
Description = El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de
espera permitido.


< End of report >

Log of Hijackthis:

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 20:54:01, on 26/08/2011
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP3 (6.00.2900.5512)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe
C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe
C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Obelisco\Mis documentos\Downloads\OTL.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\notepad.exe
C:\Documents and Settings\Obelisco\Mis documentos\Downloads\HiJackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O4 - HKLM\..\Run: [COMODO Internet Security] "C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe" -h
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] C:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [Jet Detection] "C:\Archivos de programa\Creative\SBAudigy\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [CTStartup] C:\Archivos de programa\Creative\Splash Screen\CTEaxSpl.EXE /run
O4 - HKLM\..\Run: [avgnt] "C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe" /min
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - HKCU\..\Run: [TaskTray] "C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe"
O4 - HKCU\..\Run: [TaskBar] "C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe"
O4 - HKCU\..\Run: [Google Update] "C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" /c
O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\S-1-5-21-1644491937-1645522239-682003330-1003\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe (User '?')
O4 - HKUS\S-1-5-21-1644491937-1645522239-682003330-1003\..\Run: [Google Update] "C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe" /c (User '?')
O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User '?')
O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\CTFMON.EXE (User 'Default user')
O9 - Extra button: (no name) - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra 'Tools' menuitem: @xpsp3res.dll,-20001 - {e2e2dd38-d088-4134-82b7-f2ba38496583} - C:\WINDOWS\Network Diagnostic\xpnetdiag.exe
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O20 - AppInit_DLLs: C:\WINDOWS\system32\guard32.dll
O22 - SharedTaskScheduler: Precargador Browseui - {438755C2-A8BA-11D1-B96B-00A0C90312E1} - C:\WINDOWS\System32\browseui.dll
O22 - SharedTaskScheduler: Demonio de caché de las categorías de componente - {8C7461EF-2B13-11d2-BE35-3078302C2030} - C:\WINDOWS\System32\browseui.dll
O23 - Service: Avira FireWall (AntiVirFirewallService) - Avira GmbH - C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe
O23 - Service: Avira AntiVir MailGuard (AntiVirMailService) - Avira GmbH - C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe
O23 - Service: Avira AntiVir Programador (AntiVirSchedulerService) - Avira GmbH - C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
O23 - Service: Avira AntiVir Guard (AntiVirService) - Avira GmbH - C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
O23 - Service: Avira AntiVir WebGuard (AntiVirWebService) - Avira GmbH - C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE
O23 - Service: COMODO System - Cleaner Service (Cleaner_Validator) - Unknown owner - C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
O23 - Service: COMODO Internet Security Helper Service (cmdAgent) - COMODO - C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\WINDOWS\System32\dmadmin.exe
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Servicio COM de grabación de CD de IMAPI (ImapiService) - Unknown owner - C:\WINDOWS\System32\imapi.exe
O23 - Service: Escritorio remoto compartido de NetMeeting (mnmsrvc) - Unknown owner - C:\WINDOWS\System32\mnmsrvc.exe
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\WINDOWS\system32\services.exe
O23 - Service: Administrador de sesión de Ayuda de escritorio remoto (RDSessMgr) - Unknown owner - C:\WINDOWS\system32\sessmgr.exe
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\WINDOWS\System32\SCardSvr.exe
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\WINDOWS\system32\smlogsvc.exe
O23 - Service: Instantáneas de volumen (VSS) - Unknown owner - C:\WINDOWS\System32\vssvc.exe
O23 - Service: Adaptador de rendimiento de WMI (WmiApSrv) - Unknown owner - C:\WINDOWS\System32\wbem\wmiapsrv.exe

–
End of file - 6667 bytes

Log DDS:

.
DDS (Ver_11-03-05.01) - NTFSx86
Run by [removed] at 20:55:21,71 on 26/08/2011
Internet Explorer: 6.0.2900.5512
Microsoft Windows XP Professional 5.1.2600.3.1252.34.3082.18.255.34 [GMT -4:00]
.
AV: AntiVir Desktop *Enabled/Updated* {11638345-E4FC-4BEE-BB73-EC754659C5F6}
FW: COMODO Firewall *Enabled*
FW: Avira FireWall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe
C:\WINDOWS\system32\svchost.exe -k netsvcs
svchost.exe
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe
svchost.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe
C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe
C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe
C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe
C:\WINDOWS\system32\CTHELPER.EXE
C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe
C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe
C:\WINDOWS\System32\dllhost.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe
C:\Documents and Settings\Obelisco\Mis documentos\Downloads\OTL.exe
C:\WINDOWS\notepad.exe
C:\WINDOWS\notepad.exe
C:\Documents and Settings\Obelisco\Mis documentos\Downloads\HiJackThis.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\Documents and Settings\Obelisco\Mis documentos\Downloads\dds.scr
.
============== Pseudo HJT Report ===============
.
EB: {32683183-48a0-441b-a342-7c2a440a9478} - No File
uRun: [CTFMON.EXE] c:\windows\system32\ctfmon.exe
uRun: [TaskTray] "c:\archivos de programa\creative\sbaudigy\taskbar\CTLTray.exe"
uRun: [TaskBar] "c:\archivos de programa\creative\sbaudigy\taskbar\CTLTask.exe"
uRun: [Google Update] "c:\documents and settings\obelisco\configuración local\datos de programa\google\update\GoogleUpdate.exe" /c
mRun: [COMODO Internet Security] "c:\archivos de programa\comodo\comodo internet security\cfp.exe" -h
mRun: [WINDVDPatch] CTHELPER.EXE
mRun: [UpdReg] c:\windows\UpdReg.EXE
mRun: [Jet Detection] "c:\archivos de programa\creative\sbaudigy\program\ADGJDet.exe"
mRun: [CTStartup] c:\archivos de programa\creative\splash screen\CTEaxSpl.EXE /run
mRun: [avgnt] "c:\archivos de programa\avira\antivir desktop\avgnt.exe" /min
dRun: [CTFMON.EXE] c:\windows\system32\CTFMON.EXE
mPolicies-explorer: =
IE: {e2e2dd38-d088-4134-82b7-f2ba38496583} - %windir%\Network Diagnostic\xpnetdiag.exe
IE: {FB5F1910-F110-11d2-BB9E-00C04F795683} - c:\archivos de programa\messenger\msmsgs.exe
LSP: c:\archivos de programa\avira\antivir desktop\avsda.dll
DPF: DirectAnimation Java Classes - file://c:\windows\java\classes\dajava.cab
DPF: Microsoft XML Parser for Java - file://c:\windows\java\classes\xmldso.cab
AppInit_DLLs: c:\windows\system32\guard32.dll
.
================= FIREFOX ===================
.
FF - ProfilePath - c:\docume~1\obelisco\datosd~1\mozilla\firefox\profiles\eo15x6uo.default\
.
============= SERVICES / DRIVERS ===============
.
R1 avfwot;avfwot;c:\windows\system32\drivers\avfwot.sys [2011-8-23 102856]
R1 avgio;avgio;c:\archivos de programa\avira\antivir desktop\avgio.sys [2011-8-23 11608]
R1 CFRMD;CFRMD;c:\windows\system32\drivers\CFRMD.sys [2010-12-9 66584]
R1 CFRPD;CFRPD;c:\windows\system32\drivers\CFRPD.sys [2010-12-9 33232]
R1 cmdGuard;COMODO Internet Security Sandbox Driver;c:\windows\system32\drivers\cmdGuard.sys [2011-5-2 242600]
R1 cmdHlp;COMODO Internet Security Helper Driver;c:\windows\system32\drivers\cmdhlp.sys [2011-5-2 29400]
R2 AntiVirFirewallService;Avira FireWall;c:\archivos de programa\avira\antivir desktop\avfwsvc.exe [2011-8-23 539304]
R2 AntiVirMailService;Avira AntiVir MailGuard;c:\archivos de programa\avira\antivir desktop\avmailc.exe [2011-8-23 339624]
R2 AntiVirSchedulerService;Avira AntiVir Programador;c:\archivos de programa\avira\antivir desktop\sched.exe [2011-8-23 136360]
R2 AntiVirService;Avira AntiVir Guard;c:\archivos de programa\avira\antivir desktop\avguard.exe [2011-8-23 269480]
R2 AntiVirWebService;Avira AntiVir WebGuard;c:\archivos de programa\avira\antivir desktop\avwebgrd.exe [2011-8-23 421032]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2011-8-23 61960]
R2 Cleaner_Validator;COMODO System - Cleaner Service;c:\archivos de programa\comodo\comodo system-cleaner\Cleaner_Validator.exe [2010-12-9 305600]
R2 cmdAgent;COMODO Internet Security Helper Service;c:\archivos de programa\comodo\comodo internet security\cmdagent.exe [2011-5-9 1793712]
R3 avfwim;AvFw Packet Filter Miniport;c:\windows\system32\drivers\avfwim.sys [2011-8-23 79432]
.
=============== Created Last 30 ================
.
2011-08-25 18:31:43 ——– d—–w- c:\archivos de programa\Tracker Software
2011-08-24 02:17:30 ——– d–h–w- c:\windows\PIF
2011-08-24 01:11:08 ——– d—–w- c:\docume~1\obelisco\datosd~1\GlarySoft
2011-08-24 01:09:32 ——– d—–w- c:\archivos de programa\Glary Utilities
2011-08-23 23:26:16 26368 -c–a-w- c:\windows\system32\dllcache\usbstor.sys
2011-08-23 06:15:10 272512 -c—-w- c:\windows\system32\dllcache\bthport.sys
2011-08-23 06:14:19 953856 -c—-w- c:\windows\system32\dllcache\mfc40u.dll
2011-08-23 06:14:17 974848 -c—-w- c:\windows\system32\dllcache\mfc42.dll
2011-08-23 06:14:10 203136 -c—-w- c:\windows\system32\dllcache\rmcast.sys
2011-08-23 06:13:05 81920 -c—-w- c:\windows\system32\dllcache\fontsub.dll
2011-08-23 06:13:05 119808 -c—-w- c:\windows\system32\dllcache\t2embed.dll
2011-08-23 06:09:09 331776 -c—-w- c:\windows\system32\dllcache\msadce.dll
2011-08-23 06:08:44 ——– d—–w- c:\docume~1\obelisco\config~1\datosd~1\Google
2011-08-23 06:07:33 456320 -c—-w- c:\windows\system32\dllcache\mrxsmb.sys
2011-08-23 05:30:58 ——– d—–w- c:\windows\system32\NtmsData
2011-08-23 04:42:35 617472 -c—-w- c:\windows\system32\dllcache\comctl32.dll
2011-08-23 04:42:31 40960 -c—-w- c:\windows\system32\dllcache\ndproxy.sys
2011-08-23 04:41:23 153088 -c—-w- c:\windows\system32\dllcache\triedit.dll
2011-08-23 04:39:48 139656 -c—-w- c:\windows\system32\dllcache\rdpwd.sys
2011-08-23 04:38:53 471552 -c—-w- c:\windows\system32\dllcache\aclayers.dll
2011-08-23 04:37:36 227840 -c—-w- c:\windows\system32\dllcache\wmiprvse.exe
2011-08-23 04:37:27 286720 -c—-w- c:\windows\system32\dllcache\pdh.dll
2011-08-23 04:37:26 111104 -c—-w- c:\windows\system32\dllcache\services.exe
2011-08-23 04:37:25 401408 -c—-w- c:\windows\system32\dllcache\rpcss.dll
2011-08-23 04:37:23 473600 -c—-w- c:\windows\system32\dllcache\fastprox.dll
2011-08-23 04:37:21 685056 -c—-w- c:\windows\system32\dllcache\advapi32.dll
2011-08-23 04:37:19 733696 -c—-w- c:\windows\system32\dllcache\lsasrv.dll
2011-08-23 04:37:18 453120 -c—-w- c:\windows\system32\dllcache\wmiprvsd.dll
2011-08-23 04:33:03 744448 -c—-w- c:\windows\system32\dllcache\helpsvc.exe
2011-08-23 04:30:23 105472 -c—-w- c:\windows\system32\dllcache\mup.sys
2011-08-23 04:26:59 1172480 -c—-w- c:\windows\system32\dllcache\msxml3.dll
2011-08-23 04:22:36 ——– d—–w- c:\docume~1\obelisco\datosd~1\Avira
2011-08-23 04:11:37 3558912 -c—-w- c:\windows\system32\dllcache\moviemk.exe
2011-08-23 04:09:04 337408 -c—-w- c:\windows\system32\dllcache\netapi32.dll
2011-08-23 04:09:01 692736 -c—-w- c:\windows\system32\dllcache\inetcomm.dll
2011-08-23 04:08:05 61960 —-a-w- c:\windows\system32\drivers\avgntflt.sys
2011-08-23 04:08:04 102856 —-a-w- c:\windows\system32\drivers\avfwot.sys
2011-08-23 04:08:03 79432 —-a-w- c:\windows\system32\drivers\avfwim.sys
2011-08-23 04:07:54 ——– d—–w- c:\docume~1\alluse~1\datosd~1\Avira
2011-08-23 04:07:54 ——– d—–w- c:\archivos de programa\Avira
2011-08-23 04:07:32 852480 -c—-w- c:\windows\system32\dllcache\vgx.dll
2011-08-23 04:07:05 742912 -c—-w- c:\windows\system32\dllcache\ntdll.dll
2011-08-23 04:07:04 2151424 -c—-w- c:\windows\system32\dllcache\ntkrnlmp.exe
2011-08-23 04:07:03 2195200 -c—-w- c:\windows\system32\dllcache\ntoskrnl.exe
2011-08-23 04:07:02 2029568 -c—-w- c:\windows\system32\dllcache\ntkrpamp.exe
2011-08-23 04:07:00 2071808 -c—-w- c:\windows\system32\dllcache\ntkrnlpa.exe
2011-08-23 04:06:03 219136 -c—-w- c:\windows\system32\dllcache\wordpad.exe
2011-08-23 04:05:22 10496 -c—-w- c:\windows\system32\dllcache\ndistapi.sys
2011-08-23 04:01:10 45568 -c—-w- c:\windows\system32\dllcache\wab.exe
2011-08-23 04:00:59 590848 -c—-w- c:\windows\system32\dllcache\rpcrt4.dll
2011-08-23 03:48:14 ——– d—–w- c:\docume~1\obelisco\config~1\datosd~1\Mozilla
2011-08-23 03:48:06 ——– d—–w- c:\windows\system32\PreInstall
2011-08-23 03:48:04 ——– d–h–w- c:\windows\$hf_mig$
2011-08-23 02:32:40 ——– d—–w- c:\windows\system32\SoftwareDistribution
2011-08-23 02:32:38 ——– d-s—w- c:\documents and settings\obelisco\UserData
2011-08-23 02:20:05 4096 -c–a-w- c:\windows\system32\dllcache\ksuser.dll
2011-08-23 02:20:05 4096 —-a-w- c:\windows\system32\ksuser.dll
2011-08-23 02:20:05 146048 -c–a-w- c:\windows\system32\dllcache\portcls.sys
2011-08-23 02:20:05 146048 —-a-w- c:\windows\system32\drivers\portcls.sys
2011-08-23 02:20:04 60160 -c–a-w- c:\windows\system32\dllcache\drmk.sys
2011-08-23 02:20:04 60160 —-a-w- c:\windows\system32\drivers\drmk.sys
2011-08-23 02:20:04 129536 —-a-w- c:\windows\system32\ksproxy.ax
2011-08-23 02:18:39 233472 ——w- c:\windows\system32\CTPlay.CRL
2011-08-23 02:18:08 40960 ——w- c:\windows\system32\PixWorldViewer.ocx
2011-08-23 02:18:08 101888 ——w- c:\windows\system32\VB6STKIT.DLL
2011-08-23 02:18:07 466944 ——w- c:\windows\system32\PixWorldEdit.dll
2011-08-23 02:14:20 6752 ——w- c:\windows\system32\PFMODNT.SYS
2011-08-23 02:14:10 41984 ——w- c:\windows\CTRegRun.exe
2011-08-23 02:14:10 ——– d—–w- c:\archivos de programa\Creative
2011-08-23 02:14:09 77824 —-a-w- c:\archivos de programa\archivos comunes\installshield\engine\6\intel 32\ctor.dll
2011-08-23 02:14:09 32768 —-a-w- c:\archivos de programa\archivos comunes\installshield\engine\6\intel 32\objectps.dll
2011-08-23 02:14:09 225280 —-a-w- c:\archivos de programa\archivos comunes\installshield\iscript\iscript.dll
2011-08-23 02:14:09 176128 —-a-w- c:\archivos de programa\archivos comunes\installshield\engine\6\intel 32\iuser.dll
2011-08-23 02:13:53 610436 —-a-w- c:\archivos de programa\archivos comunes\installshield\engine\6\intel 32\IKernel.exe
2011-08-23 02:13:53 ——– d—–w- c:\archivos de programa\archivos comunes\InstallShield
2011-08-23 02:13:49 ——– d–h–w- C:\VritualRoot
2011-08-23 02:10:40 71427 —-a-w- c:\windows\cscmondump.bin
2011-08-23 02:08:27 ——– d—–w- c:\docume~1\alluse~1\datosd~1\Comodo
2011-08-23 02:05:41 ——– d—–w- c:\archivos de programa\COMODO
2011-08-23 02:05:35 348160 —-a-w- c:\windows\system32\msvcr71.dll
2011-08-23 02:05:35 1060864 —-a-w- c:\windows\system32\mfc71.dll
2011-08-23 02:05:34 1700352 —-a-w- c:\windows\system32\gdiplus.dll
.
==================== Find3M ====================
.
2011-08-23 03:38:14 285256 —-a-w- c:\windows\system32\guard32.dll
2011-06-20 17:44:48 293888 —-a-w- c:\windows\system32\winsrv.dll
.
============= FINISH: 20:58:28,03 ===============

Attach LOG:

Microsoft Windows XP Professional
Boot Device: \Device\HarddiskVolume1
Install Date: 22/08/2011 21:05:24
System Uptime: 26/08/2011 17:41:35 (3 hours ago)
.
Motherboard: Intel Corporation | | D850MD
Processor: Intel® Pentium® 4 CPU 2.00GHz | J4K2 | 1993/100mhz
.
==== Disk Partitions =========================
.
A: is Removable
C: is FIXED (NTFS) - 56 GiB total, 49,109 GiB free.
D: is CDROM ()
E: is CDROM ()
.
==== Disabled Device Manager Items =============
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Controladora de vídeo multimedia
Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00031461&REV_11\4&11CD5334&0&50F0
Manufacturer:
Name: Controladora de vídeo multimedia
PNP Device ID: PCI\VEN_109E&DEV_036E&SUBSYS_00031461&REV_11\4&11CD5334&0&50F0
Service:
.
Class GUID: {4D36E97E-E325-11CE-BFC1-08002BE10318}
Description: Controladora multimedia
Device ID: PCI\VEN_109E&DEV_0878&SUBSYS_00031461&REV_11\4&11CD5334&0&51F0
Manufacturer:
Name: Controladora multimedia
PNP Device ID: PCI\VEN_109E&DEV_0878&SUBSYS_00031461&REV_11\4&11CD5334&0&51F0
Service:
.
==== System Restore Points ===================
.
RP1: 22/08/2011 21:09:03 - Punto de control del sistema
RP2: 22/08/2011 21:17:35 - Se ha instalado Windows XP Service Pack 2.
RP3: 22/08/2011 21:40:56 - Se ha instalado Windows XP Service Pack 3.
RP4: 22/08/2011 22:08:44 - Instalado COMODO Internet Security
RP5: 22/08/2011 22:14:48 - Instalado Sound Blaster Audigy
RP6: 22/08/2011 22:14:52 - Instalado Creative TaskBar
RP7: 22/08/2011 22:15:05 - Instalado Creative AudioHQ
RP8: 22/08/2011 22:15:15 - Instalado Creative Surround Mixer
RP9: 22/08/2011 22:15:27 - Instalado Creative PlayCenter
RP10: 22/08/2011 22:15:43 - Instalado Creative AudioHQ
RP11: 22/08/2011 22:16:51 - Instalado Creative RemoteCenter
RP12: 22/08/2011 22:17:25 - Installed SB Audigy Experience Demo
RP13: 22/08/2011 22:18:18 - Installed Sound Blaster Audigy Quick Start
RP14: 22/08/2011 22:18:28 - Instalado Creative Recorder
RP15: 22/08/2011 22:18:38 - Instalado Creative MiniDisc Center
RP16: 22/08/2011 22:18:53 - Instalado Creative Restore Defaults
RP17: 22/08/2011 22:18:58 - Instalado Creative Diagnostics
RP18: 22/08/2011 22:19:06 - Instalado Creative WaveStudio
RP19: 22/08/2011 22:19:13 - Installed EAX Goldmine
RP20: 22/08/2011 22:22:02 - Instalado Creative AudioHQ
RP21: 22/08/2011 23:47:58 - Software Distribution Service 3.0
RP22: 23/08/2011 20:17:38 - Software Distribution Service 3.0
RP23: 25/08/2011 1:28:25 - Punto de control del sistema
RP24: 26/08/2011 18:25:46 - Punto de control del sistema
.
==== Installed Programs ======================
.
Actualización de seguridad para el Reproductor de Windows Media (KB2378111)
Actualización de seguridad para el Reproductor de Windows Media (KB952069)
Actualización de seguridad para el Reproductor de Windows Media (KB954155)
Actualización de seguridad para el Reproductor de Windows Media (KB973540)
Actualización de seguridad para el Reproductor de Windows Media (KB975558)
Actualización de seguridad para el Reproductor de Windows Media (KB978695)
Actualización de seguridad para Windows XP (KB2079403)
Actualización de seguridad para Windows XP (KB2229593)
Actualización de seguridad para Windows XP (KB2296011)
Actualización de seguridad para Windows XP (KB2360937)
Actualización de seguridad para Windows XP (KB2387149)
Actualización de seguridad para Windows XP (KB2393802)
Actualización de seguridad para Windows XP (KB2412687)
Actualización de seguridad para Windows XP (KB2423089)
Actualización de seguridad para Windows XP (KB2440591)
Actualización de seguridad para Windows XP (KB2478971)
Actualización de seguridad para Windows XP (KB2479943)
Actualización de seguridad para Windows XP (KB2481109)
Actualización de seguridad para Windows XP (KB2485663)
Actualización de seguridad para Windows XP (KB2507618)
Actualización de seguridad para Windows XP (KB2507938)
Actualización de seguridad para Windows XP (KB2508272)
Actualización de seguridad para Windows XP (KB2508429)
Actualización de seguridad para Windows XP (KB2524375)
Actualización de seguridad para Windows XP (KB2535512)
Actualización de seguridad para Windows XP (KB2536276-v2)
Actualización de seguridad para Windows XP (KB2544521)
Actualización de seguridad para Windows XP (KB2544893)
Actualización de seguridad para Windows XP (KB2562937)
Actualización de seguridad para Windows XP (KB2566454)
Actualización de seguridad para Windows XP (KB2567680)
Actualización de seguridad para Windows XP (KB2570222)
Actualización de seguridad para Windows XP (KB923561)
Actualización de seguridad para Windows XP (KB923789)
Actualización de seguridad para Windows XP (KB946648)
Actualización de seguridad para Windows XP (KB950762)
Actualización de seguridad para Windows XP (KB951376-v2)
Actualización de seguridad para Windows XP (KB952004)
Actualización de seguridad para Windows XP (KB952954)
Actualización de seguridad para Windows XP (KB956572)
Actualización de seguridad para Windows XP (KB956744)
Actualización de seguridad para Windows XP (KB956844)
Actualización de seguridad para Windows XP (KB958644)
Actualización de seguridad para Windows XP (KB959426)
Actualización de seguridad para Windows XP (KB960859)
Actualización de seguridad para Windows XP (KB972270)
Actualización de seguridad para Windows XP (KB973869)
Actualización de seguridad para Windows XP (KB973904)
Actualización de seguridad para Windows XP (KB977914)
Actualización de seguridad para Windows XP (KB978601)
Actualización de seguridad para Windows XP (KB979309)
Actualización de seguridad para Windows XP (KB981997)
Actualización para Windows XP (KB898461)
Actualización para Windows XP (KB955759)
Actualización para Windows XP (KB971029)
Actualización para Windows XP (KB973687)
Avira Premium Security Suite
COMODO Internet Security
COMODO System-Cleaner
Glary Utilities 2.35.0.1216
Google Chrome
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
Mozilla Firefox 6.0 (x86 es-ES)
PDF-Viewer
Revisión para Windows XP (KB2443685)
Revisión para Windows XP (KB952287)
Sound Blaster Audigy
WebFldrs XP
Windows XP Service Pack 3
WinRAR 4.01 (32-bit)
.
==== Event Viewer Messages From Past Week ========
.
26/08/2011 19:15:31, ERROR: atapi [9] - El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de espera permitido.
26/08/2011 19:15:09, ERROR: atapi [9] - El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de espera permitido.
26/08/2011 19:15:02, ERROR: atapi [9] - El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de espera permitido.
26/08/2011 19:14:56, ERROR: atapi [9] - El dispositivo, \Device\Ide\IdePort0, no respondió en el tiempo de espera permitido.
25/08/2011 13:49:22, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
25/08/2011 13:49:22, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
24/08/2011 13:04:03, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
24/08/2011 13:04:03, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
24/08/2011 1:22:28, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
24/08/2011 1:22:28, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 21:04:32, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 21:04:32, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 20:14:43, ERROR: W32Time [17] - El proveedor de tiempo NtpClient: ocurrió un error durante la búsqueda DNS del homólogo configurado manualmente "time.windows.com,0x1". NtpClient volverá a intentar la búsqueda DNS en 15 minutos. El error era: Se ha intentado una operación de socket en un host no accesible. (0x80072751)
23/08/2011 19:58:47, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:58:45, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:31:18, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:31:17, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:29:53, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:29:52, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:28:53, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 19:28:50, ERROR: Servicio de medios de almacenamiento extraíbles [111] - RSM no pudo cargar el medio en la unidad Unidad 0 de la biblioteca hp v135w USB Device.
23/08/2011 0:39:42, ERROR: Service Control Manager [7022] - El servicio Avira AntiVir Guard permanece en inicio.
23/08/2011 0:39:42, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 0:28:43, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 0:19:08, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir WebGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 0:19:08, ERROR: Service Control Manager [7001] - El servicio Avira AntiVir MailGuard depende del servicio Avira AntiVir Guard, el cual no pudo iniciarse debido al siguiente error: Después de iniciarse, el servicio ha quedado en un estado pendiente de inicio.
23/08/2011 0:03:42, ERROR: SideBySide [59] - Error en Resolve Partial Assembly para Microsoft.VC90.CRT. Mensaje de error referencia: El ensamblaje referido no está instalado en su sistema. .
23/08/2011 0:03:42, ERROR: SideBySide [59] - Error en Generate Activation Context para C:\DOCUME~1\Obelisco\CONFIG~1\Temp\RarSFX0\redist.dll. Mensaje de error referencia: La operación se ha completado correctamente. .
23/08/2011 0:03:42, ERROR: SideBySide [32] - No se encontró el ensamblaje dependiente Microsoft.VC90.CRT y el error final fue El ensamblaje referido no está instalado en su sistema.
22/08/2011 22:32:03, ERROR: W32Time [17] - El proveedor de tiempo NtpClient: ocurrió un error durante la búsqueda DNS del homólogo configurado manualmente "time.windows.com,0x1". NtpClient volverá a intentar la búsqueda DNS en 15 minutos. El error era: Se ha intentado una operación de socket en un host no accesible. (0x80072751)
22/08/2011 22:20:01, Información: Windows File Protection [64001] - Se intentó remplazar el archivo en el archivo de sistema protegido a3d.dll. Se restauró este archivo a su versión original para mantener la estabilidad del sistema. La versión del archivo erróneo es [removed]. La versión del archivo de sistema es [removed]
.
==== End Of File ===========================
Post #2
GMER Log:


GMER 1.0.15.15641 - http://www.gmer.net
Rootkit scan 2011-08-26 20:04:28
Windows 5.1.2600 Service Pack 3 Harddisk0\DR0 -> \Device\Ide\IdeDeviceP0T0L0-3 ST360021A rev.3.19
Running: hteiq853.exe; Driver: C:\DOCUME~1\Obelisco\CONFIG~1\Temp\kwgdrkob.sys


—- System - GMER 1.0.15 —-

SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwAdjustPrivilegesToken [0xF80E98B2]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwConnectPort [0xF80E8E48]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateFile [0xF80E9518]
SSDT FA07E38E ZwCreateKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreatePort [0xF80E8D28]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateSection [0xF80EC1E0]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwCreateSymbolicLinkObject [0xF80EC568]
SSDT FA07E384 ZwCreateThread
SSDT FA07E393 ZwDeleteKey
SSDT FA07E39D ZwDeleteValueKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwDuplicateObject [0xF80E851A]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateKey [0xF80EA864]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwEnumerateValueKey [0xF80EAABA]
SSDT FA07E3BB ZwLoadDriver
SSDT FA07E3A2 ZwLoadKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwMakeTemporaryObject [0xF80E9110]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenFile [0xF80E96F4]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenKey [0xF80EA116]
SSDT FA07E370 ZwOpenProcess
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwOpenSection [0xF80E93B4]
SSDT FA07E375 ZwOpenThread
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryKey [0xF80EACC8]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryMultipleValueKey [0xF80EB11C]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwQueryValueKey [0xF80EAEDA]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwRenameKey [0xF80EA67C]
SSDT FA07E3AC ZwReplaceKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwRequestWaitReplyPort [0xF80EB68C]
SSDT FA07E3A7 ZwRestoreKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSecureConnectPort [0xF80EB940]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSetSecurityObject [0xF80E9EEE]
SSDT FA07E3C0 ZwSetSystemInformation
SSDT FA07E398 ZwSetValueKey
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwShutdownSystem [0xF80E907A]
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwSystemDebugControl [0xF80E92A0]
SSDT FA07E37F ZwTerminateProcess
SSDT \SystemRoot\System32\DRIVERS\cmdguard.sys (COMODO Internet Security Sandbox Driver/COMODO) ZwTerminateThread [0xF80E8918]
SSDT FA07E37A ZwWriteVirtualMemory

—- Kernel code sections - GMER 1.0.15 —-

.text ntoskrnl.exe!_abnormal_termination + 395 804E2A01 3 Bytes [B9, 0E, F8]

—- User code sections - GMER 1.0.15 —-

.text C:\WINDOWS\system32\ctfmon.exe[256] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\ctfmon.exe[256] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTray.exe[696] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avmailc.exe[784] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\AVWEBGRD.EXE[832] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ntdll.dll!NtReplyWaitReceivePort 7C91DA8E 5 Bytes JMP 10028AC0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ntdll.dll!NtReplyWaitReceivePortEx 7C91DA9E 5 Bytes JMP 10028860 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\services.exe[904] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\lsass.exe[916] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 0091CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 00925680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 0091CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 009226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 00923280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 0092DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 00921220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 00921B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 0092E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Creative\SBAudigy\TaskBar\CTLTask.exe[1036] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 0092E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1092] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1160] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe[1200] ntdll.dll!NtAllocateVirtualMemory 7C91CF6E 5 Bytes JMP 005190B0 C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe[1200] ntdll.dll!NtCreateFile 7C91D0AE 5 Bytes JMP 00531040 C:\Archivos de programa\COMODO\COMODO Internet Security\cmdagent.exe (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\svchost.exe[1228] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\alg.exe[1292] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtAllocateVirtualMemory 7C91CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtCreateFile 7C91D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtCreateFile + 6 7C91D0B4 4 Bytes [28, 00, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtCreateFile + B 7C91D0B9 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtCreateProcess 7C91D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtCreateProcessEx 7C91D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtDeleteFile 7C91D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtFreeVirtualMemory 7C91D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtLoadDriver 7C91D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtMapViewOfSection + 6 7C91D524 1 Byte [28]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtMapViewOfSection + 6 7C91D524 4 Bytes [28, 03, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtMapViewOfSection + B 7C91D529 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenFile 7C91D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenFile + 6 7C91D5A4 4 Bytes [68, 00, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenFile + B 7C91D5A9 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcess + 6 7C91D604 4 Bytes [A8, 01, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcess + B 7C91D609 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcessToken + 6 7C91D614 4 Bytes CALL 7B91EC1A
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcessToken + B 7C91D619 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcessTokenEx + 6 7C91D624 4 Bytes [A8, 02, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenProcessTokenEx + B 7C91D629 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThread + 6 7C91D664 4 Bytes [68, 01, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThread + B 7C91D669 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThreadToken + 6 7C91D674 4 Bytes [68, 02, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThreadToken + B 7C91D679 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThreadTokenEx + 6 7C91D684 4 Bytes CALL 7B91EC8B
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtOpenThreadTokenEx + B 7C91D689 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtProtectVirtualMemory 7C91D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtQueryAttributesFile + 6 7C91D714 4 Bytes [A8, 00, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtQueryAttributesFile + B 7C91D719 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtQueryFullAttributesFile + 6 7C91D7B4 4 Bytes CALL 7B91EDB9
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtQueryFullAttributesFile + B 7C91D7B9 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtSetInformationFile + 6 7C91DC64 4 Bytes [28, 01, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtSetInformationFile + B 7C91DC69 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtSetInformationProcess 7C91DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtSetInformationThread + 6 7C91DCB4 4 Bytes [28, 02, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtSetInformationThread + B 7C91DCB9 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtUnloadDriver 7C91DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtUnmapViewOfSection + 6 7C91DF14 1 Byte [68]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtUnmapViewOfSection + 6 7C91DF14 4 Bytes [68, 03, 16, 00]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtUnmapViewOfSection + B 7C91DF19 1 Byte [E2]
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!NtWriteVirtualMemory 7C91DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!KiUserExceptionDispatcher 7C91E47C 7 Bytes JMP 100277A0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!RtlAllocateHeap 7C9200C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ntdll.dll!LdrGetProcedureAddress 7C927CF0 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!WinExec 7C86250D 2 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!WinExec + 3 7C862510 2 Bytes [7C, 93] {JL 0xffffffffffffff95}
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] SHELL32.dll!ShellExecuteExW 7E6E2EB3 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] SHELL32.dll!ShellExecuteEx 7E720DFD 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] SHELL32.dll!ShellExecuteA 7E721128 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1356] SHELL32.dll!ShellExecuteW 7E795D80 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Update\GoogleUpdate.exe[1400] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1436] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1460] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\spoolsv.exe[1532] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\sched.exe[1580] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\svchost.exe[1620] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avfwsvc.exe[1700] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avguard.exe[1716] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 0085CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 00865680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 0085CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 008626F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 00863280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 00861220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 00861B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 0086DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 0086E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO System-Cleaner\Cleaner_Validator.exe[1748] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 0086E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTsvcCDA.exe[1772] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtAllocateVirtualMemory 7C91CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtCreateFile 7C91D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtCreateProcess 7C91D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtCreateProcessEx 7C91D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtDeleteFile 7C91D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtFreeVirtualMemory 7C91D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtLoadDriver 7C91D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtOpenFile 7C91D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtProtectVirtualMemory 7C91D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtSetInformationProcess 7C91DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtUnloadDriver 7C91DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!NtWriteVirtualMemory 7C91DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!KiUserExceptionDispatcher 7C91E47C 7 Bytes JMP 100277A0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!RtlAllocateHeap 7C9200C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ntdll.dll!LdrGetProcedureAddress 7C927CF0 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!WinExec 7C86250D 2 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!WinExec + 3 7C862510 2 Bytes [7C, 93] {JL 0xffffffffffffff95}
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] SHELL32.dll!ShellExecuteExW 7E6E2EB3 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] SHELL32.dll!ShellExecuteEx 7E720DFD 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] SHELL32.dll!ShellExecuteA 7E721128 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[1820] SHELL32.dll!ShellExecuteW 7E795D80 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\MsPMSPSv.exe[1844] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avshadow.exe[1892] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Mis documentos\Downloads\hteiq853.exe[2012] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\dllhost.exe[2280] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\System32\msdtc.exe[2580] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\Explorer.EXE[3452] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtAllocateVirtualMemory 7C91CF6E 5 Bytes JMP 10027E50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtCreateFile 7C91D0AE 5 Bytes JMP 10027E10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtCreateProcess 7C91D14E 5 Bytes JMP 10027ED0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtCreateProcessEx 7C91D15E 5 Bytes JMP 10027EB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtDeleteFile 7C91D23E 5 Bytes JMP 10027E70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtFreeVirtualMemory 7C91D38E 5 Bytes JMP 100274E0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtLoadDriver 7C91D46E 5 Bytes JMP 10027E30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtOpenFile 7C91D59E 5 Bytes JMP 10027DF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtProtectVirtualMemory 7C91D6EE 5 Bytes JMP 10027490 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtSetInformationProcess 7C91DC9E 5 Bytes JMP 10027DB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtUnloadDriver 7C91DEBE 5 Bytes JMP 10027DD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!NtWriteVirtualMemory 7C91DFAE 5 Bytes JMP 10027E90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!KiUserExceptionDispatcher 7C91E47C 7 Bytes JMP 100277A0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!RtlAllocateHeap 7C9200C4 5 Bytes JMP 10027530 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ntdll.dll!LdrGetProcedureAddress 7C927CF0 5 Bytes JMP 10027D90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CreateFileA 7C801A28 5 Bytes JMP 10027CD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!VirtualProtect 7C801AD4 5 Bytes JMP 10027A70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!LoadLibraryExW 7C801AF5 7 Bytes JMP 10027D10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!LoadLibraryExA 7C801D53 5 Bytes JMP 10027D30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!LoadLibraryA 7C801D7B 5 Bytes JMP 10027AD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!GetProcAddress 7C80AE40 5 Bytes JMP 10027D70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!LoadLibraryW 7C80AEEB 5 Bytes JMP 10027AB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!GetModuleHandleA 7C80B741 5 Bytes JMP 10027B10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!GetModuleHandleW 7C80E4DD 5 Bytes JMP 10027AF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CreateFileW 7C810800 5 Bytes JMP 10027CB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileWithProgressW 7C81F72E 5 Bytes JMP 10027B70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileW 7C821261 5 Bytes JMP 10027BF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!OpenFile 7C821982 5 Bytes JMP 10027CF0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CopyFileExW 7C827B32 7 Bytes JMP 10027C30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CopyFileA 7C8286EE 5 Bytes JMP 10027C90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CopyFileW 7C82F87B 5 Bytes JMP 10027C70 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!DeleteFileA 7C831EDD 5 Bytes JMP 10027B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!DeleteFileW 7C831F63 5 Bytes JMP 10027B30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileExW 7C83568B 5 Bytes JMP 10027BB0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileA 7C835EBF 5 Bytes JMP 10027C10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileWithProgressA 7C835EDE 5 Bytes JMP 10027B90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!MoveFileExA 7C85E49B 5 Bytes JMP 10027BD0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!CopyFileExA 7C85F39C 5 Bytes JMP 10027C50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!WinExec 7C86250D 2 Bytes JMP 10027A90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!WinExec + 3 7C862510 2 Bytes [7C, 93] {JL 0xffffffffffffff95}
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] kernel32.dll!LoadModule 7C86261E 5 Bytes JMP 10027D50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] SHELL32.dll!ShellExecuteExW 7E6E2EB3 5 Bytes JMP 100279F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] SHELL32.dll!ShellExecuteEx 7E720DFD 5 Bytes JMP 10027A10 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] SHELL32.dll!ShellExecuteA 7E721128 5 Bytes JMP 10027A50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Documents and Settings\Obelisco\Configuración local\Datos de programa\Google\Chrome\Application\chrome.exe[3524] SHELL32.dll!ShellExecuteW 7E795D80 5 Bytes JMP 10027A30 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\NOTEPAD.EXE[3560] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\wuauclt.exe[3644] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe[3952] ntdll.dll!NtAllocateVirtualMemory 7C91CF6E 5 Bytes JMP 0074CB10 C:\Archivos de programa\COMODO\COMODO Internet Security\cfp.exe (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\WINDOWS\system32\CTHELPER.EXE[3964] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ntdll.dll!NtClose 7C91CFEE 5 Bytes JMP 1001CE40 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ntdll.dll!LdrLoadDll 7C92632D 5 Bytes JMP 10025680 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ntdll.dll!LdrUnloadDll 7C9271CD 5 Bytes JMP 1001CF60 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] kernel32.dll!CreateProcessW 7C802336 5 Bytes JMP 100226F0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] kernel32.dll!CreateProcessA 7C80236B 5 Bytes JMP 10023280 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] USER32.dll!EndTask 7E3DA0A5 5 Bytes JMP 1002DF90 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ADVAPI32.dll!CreateProcessAsUserW 77DBA8A9 5 Bytes JMP 10021220 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ADVAPI32.dll!CreateProcessAsUserA 77DE0CE8 5 Bytes JMP 10021B50 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ole32.dll!CoCreateInstanceEx 774D0526 5 Bytes JMP 1002E410 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)
.text C:\Archivos de programa\Avira\AntiVir Desktop\avgnt.exe[4012] ole32.dll!CoGetClassObject 774E56C5 5 Bytes JMP 1002E1D0 C:\WINDOWS\system32\guard32.dll (COMODO Internet Security/COMODO)

—- Devices - GMER 1.0.15 —-

AttachedDevice \Driver\Tcpip \Device\Ip cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Ip avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\Tcp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Tcp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\Udp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Udp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\RawIp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\RawIp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

—- EOF - GMER 1.0.15 —-

The last information is normal????

AttachedDevice \Driver\Tcpip \Device\Ip cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Ip avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\Tcp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Tcp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\Udp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\Udp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \Driver\Tcpip \Device\RawIp cmdhlp.sys (COMODO Internet Security Helper Driver/COMODO)
AttachedDevice \Driver\Tcpip \Device\RawIp avfwot.sys (TDI filtering kernel driver/Avira GmbH)
AttachedDevice \FileSystem\Fastfat \Fat fltmgr.sys (Microsoft Filesystem Filter Manager/Microsoft Corporation)

In the program say the same thing "Attached"..Is my computer normal or I am infected????

If you ask me why the programs is in spanish? It's because my native lenguage is spanish but understand english too.

This Log of avira antivirus but in specific this:

Comienza el análisis de existencia de objetos ocultos.
c:\documents and settings\obelisco\configuración local\archivos temporales de internet\content.ie5\index.dat
c:\documents and settings\obelisco\configuración local\archivos temporales de internet\content.ie5\index.dat
[NOTA] El fichero no es visible.
c:\documents and settings\obelisco\configuración local\historial\history.ie5\index.dat
c:\documents and settings\obelisco\configuración local\historial\history.ie5\index.dat
[NOTA] El fichero no es visible.
c:\windows\system32\ntmsdata\ntmsjrnl
c:\windows\system32\ntmsdata\ntmsjrnl
[NOTA] El fichero no es visible.
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
c:\archivos de programa\comodo\comodo system-cleaner\updater.exe
[NOTA] El proceso no es visible.

I am worry about it because always is the same thing. It's like another person will try to spy me or something like that. I Know that with Cclenar or similar program erase el index. dat in this case IE5 but when this thing repeat and again…I don't know..

This for example. It's something that I need to worry or not???

c:\windows\system32\ntmsdata\ntmsjrnl
c:\windows\system32\ntmsdata\ntmsjrnl

I think that another person trying to atack me but he can't. I don't know so I want your opinion respect my computer and if everything is fine because before I found 111 hidding object with avira on my computer and I decide to format the computer and when I see everything normal and scan again appears more hidding object and I took the determination of erase the hard drive and then I fix the computer and when I scan again I saw 0 hidding object and I was happy but since two days my browser look like strange so I found 4 hidding object and now I am here exposing my problem with you so another opinion will be great to resolve this problem. Thanks for the patiente to read my problem. I hope your answer very soon. Thanks…

PD: I need to use two post to expose the problem….
Post #3
Hi and welcome to What the Tech. :)

It appears your machine is using a Spanish version of the Windows XP Operating System…Whilst I am multi-lingual myself unfortunately Spannish is not one of my truly fluent languages I'm afraid so this would create some problems for myself being able to assist you correctly, plus primarily this forum is a English language based forum only.

My best advice would be to join this Spanish forum:-

http://www.forospyware.com/

Then read the appropite instructions in this part of the forum:-

http://www.forospyware.com/foro-de-virus-y-spywares/

Then create a new topic requesting assistance. By all means mention I advised you seek assistance in the aforementioned forum if you so wish. Good luck and stay safe!

Ask AI

AI can make mistakes. Check the cited posts. Archived advice can be out-of-date

Don't include personal information. Questions and selected public posts go to OpenAI. About Ask AI