Searchqu virus?

Some days ago my internet home page and my searches changed and were always redirected to searchqu. I managed to change them back and it seemed to work BUT I still think that I have a virus or something.

Everytime I run my computer, it always appears the same rundll error

There was a problem starting
C:UsersPatriciaAppDataLocalTempSRASSE~1.DLL
The specified module could not be found."


and I don't know how to get rid of it because my virus scanner did not pick anything up.

I have tried everything that I have seen on the internet with no success. Can someone PLEASE help me??

Here are the results of OTL:

OTL


OTL logfile created on: 09/04/2012 19:04:58 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:UsersPatriciaDesktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

3,86 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 45,35% Memory free
7,71 Gb Paging File | 5,28 Gb Available in Paging File | 68,51% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 683,04 Gb Total Space | 578,47 Gb Free Space | 84,69% Space Free | Partition Type: NTFS

Computer Name: PATRICIA-PC | User Name: Patricia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:UsersPatriciaDesktopOTL.exe (OldTimer Tools)
PRC - C:WindowsSysWOW64MacromedFlashFlashUtil32_11_2_202_228_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:Archivos de programaAVAST SoftwareAvastAvastUI.exe (AVAST Software)
PRC - C:Archivos de programaAVAST SoftwareAvastAvastSvc.exe (AVAST Software)
PRC - C:Program Files (x86)Emsisoft Anti-Malwarea2guard.exe (Emsi Software GmbH)
PRC - C:Program Files (x86)Emsisoft Anti-Malwarea2service.exe (Emsi Software GmbH)
PRC - C:Program Files (x86)NTIPackard Bell MyBackupIScheduleSvc.exe (NTI Corporation)
PRC - C:Program Files (x86)NTIPackard Bell MyBackupBackupManagerTray.exe (NTI Corporation)
PRC - C:Program Files (x86)MicrosoftBingBarSeaPort.EXE (Microsoft Corporation)
PRC - C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe (Intel Corporation)
PRC - C:Program Files (x86)NVIDIA CorporationNVIDIA Updatusdaemonu.exe (NVIDIA Corporation)
PRC - C:Program Files (x86)Launch ManagerLManager.exe (Dritek System Inc.)
PRC - C:Program Files (x86)Launch Managerdsiwmis.exe (Dritek System Inc.)
PRC - C:Program Files (x86)Launch ManagerLMworker.exe (Dritek System Inc.)
PRC - C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe (Intel Corporation)
PRC - C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe (Renesas Electronics Corporation)
PRC - C:Archivos de programaPackard BellPackard Bell UpdaterUpdaterService.exe (Acer Group)
PRC - C:Program Files (x86)Packard BellRegistrationGREGsvc.exe (Acer Incorporated)
PRC - c:Program Files (x86)AdobeElements Organizer 8.0PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - C:Program Files (x86)Spybot - Search & DestroyTeaTimer.exe (Safer Networking Limited)
PRC - C:Program Files (x86)Spybot - Search & DestroySDWinSec.exe (Safer Networking Ltd.)


========== Modules (No Company Name) ==========

MOD - C:WindowsassemblyNativeImages_v2.0.50727_32IAStorUtilc6b914d595e5b00ae54000
4a71c6c3a2IAStorUtil.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32System.Runtime.Remo#a1c4a635721f
85bef0ea4194b888b871System.Runtime.Remoting.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32System.Windows.Forms6c51e152e740
4188914c9fa4d8503ff9System.Windows.Forms.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32System.Drawingab87129c2b603f218e
4aa5300c9b1bddSystem.Drawing.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32WindowsBase47b9e7f070271ff50f988
f75ea68fa3eWindowsBase.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32System.Xml9866d1f6178e1cde25642f
1ac293ff8dSystem.Xml.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32System.Configuratione620323cacb5
b6bfd93fd28d263440e4System.Configuration.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32Systemfaf4e8730ecbd07570111bb7c3
b20565System.ni.dll ()
MOD - C:Program Files (x86)NTIPackard Bell MyBackupsqlite3.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32IAStorCommonebfad289d9759034cd3a
887802fadb5bIAStorCommon.ni.dll ()
MOD - C:WindowsassemblyNativeImages_v2.0.50727_32mscorliba1a82db68b3badc7c27ea1f6
579d22c5mscorlib.ni.dll ()
MOD - C:WindowsassemblyGAC_MSILSystem.Runtime.Remoting.resources2.0.0.0_es_b77a5c
561934e089System.Runtime.Remoting.resources.dll ()
MOD - C:WindowsassemblyGAC_MSILmscorlib.resources2.0.0.0_es_b77a5c561934e089msco
rlib.resources.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Firewall) – C:Program FilesAVAST SoftwareAvastafwServ.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) – C:WindowsSysWOW64MacromedFlashFlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) – C:Archivos de programaAVAST SoftwareAvastAvastSvc.exe (AVAST Software)
SRV - (a2AntiMalware) – C:Program Files (x86)Emsisoft Anti-Malwarea2service.exe (Emsi Software GmbH)
SRV - (NTI IScheduleSvc) – C:Program Files (x86)NTIPackard Bell MyBackupIScheduleSvc.exe (NTI Corporation)
SRV - (Sony Ericsson PCCompanion) – C:Program Files (x86)Sony EricssonSony Ericsson PC CompanionPCCService.exe (Avanquest Software)
SRV - (FLEXnet Licensing Service) – C:Program Files (x86)Common FilesMacrovision SharedFLEXnet PublisherFNPLicensingService.exe (Acresso Software Inc.)
SRV - (BBSvc) – C:Program Files (x86)MicrosoftBingBarBBSvc.EXE (Microsoft Corporation.)
SRV - (wlidsvc) – C:Archivos de programaCommon FilesMicrosoft SharedWindows LiveWLIDSVC.EXE (Microsoft Corp.)
SRV - (SeaPort) – C:Program Files (x86)MicrosoftBingBarSeaPort.EXE (Microsoft Corporation)
SRV - (UNS) Intel® – C:Program Files (x86)IntelIntel® Management Engine ComponentsUNSUNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:Program Files (x86)IntelIntel® Management Engine ComponentsLMSLMS.exe (Intel Corporation)
SRV - (nvUpdatusService) – C:Program Files (x86)NVIDIA CorporationNVIDIA Updatusdaemonu.exe (NVIDIA Corporation)
SRV - (ePowerSvc) – C:Archivos de programaPackard BellPackard Bell Power ManagementePowerSvc.exe (Acer Incorporated)
SRV - (DsiWMIService) – C:Program Files (x86)Launch Managerdsiwmis.exe (Dritek System Inc.)
SRV - (GamesAppService) – C:Program Files (x86)WildTangent GamesAppGamesAppService.exe (WildTangent, Inc.)
SRV - (TurboBoost) Intel® – C:Archivos de programaIntelTurboBoostTurboBoost.exe (Intel® Corporation)
SRV - (wlcrasvc) – C:Archivos de programaWindows LiveMeshwlcrasvc.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) Intel® – C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorDataMgrSvc.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:WindowsMicrosoft.NETFrameworkv4.0.30319mscorsvw.exe (Microsoft Corporation)
SRV - (Updater Service) – C:Archivos de programaPackard BellPackard Bell UpdaterUpdaterService.exe (Acer Group)
SRV - (Nero BackItUp Scheduler 4.0) – C:Program Files (x86)Common FilesNeroNero BackItUp 4NBService.exe (Nero AG)
SRV - (osppsvc) – C:Archivos de programaCommon FilesMicrosoft SharedOfficeSoftwareProtectionPlatformOSPPSVC.EXE (Microsoft Corporation)
SRV - (GREGService) – C:Program Files (x86)Packard BellRegistrationGREGsvc.exe (Acer Incorporated)
SRV - (AdobeActiveFileMonitor8.0) – c:Program Files (x86)AdobeElements Organizer 8.0PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) – C:WindowsMicrosoft.NETFrameworkv2.0.50727mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSnx) – C:WindowsSysNativedriversaswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) – C:WindowsSysNativedriversaswSP.sys (AVAST Software)
DRV:64bit: - (aswKbd) – C:WindowsSysNativedriversaswKbd.sys (AVAST Software)
DRV:64bit: - (aswRdr) – C:WindowsSysNativedriversaswRdr2.sys (AVAST Software)
DRV:64bit: - (aswTdi) – C:WindowsSysNativedriversaswTdi.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) – C:WindowsSysNativedriversaswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) – C:WindowsSysNativedriversaswFsBlk.sys (AVAST Software)
DRV:64bit: - (ggsemc) – C:WindowsSysNativedriversggsemc.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (ggflt) – C:WindowsSysNativedriversggflt.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (fssfltr) – C:WindowsSysNativedriversfssfltr.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:WindowsSysNativedriversamdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:WindowsSysNativedriversamdxata.sys (Advanced Micro Devices)
DRV:64bit: - (igfx) – C:WindowsSysNativedriversigdkmd64.sys (Intel Corporation)
DRV:64bit: - (bScsiMSa) – C:WindowsSysNativedriversbScsiMSa.sys (Broadcom Corporation)
DRV:64bit: - (nvpciflt) – C:WindowsSysNativedriversnvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (bScsiSDa) – C:WindowsSysNativedriversbScsiSDa.sys (Broadcom Corporation)
DRV:64bit: - (b57xdmp) – C:WindowsSysNativedriversb57xdmp.sys (Broadcom Corporation)
DRV:64bit: - (b57xdbd) – C:WindowsSysNativedriversb57xdbd.sys (Broadcom Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink ™ – C:WindowsSysNativedriversk57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (PCTCore) – C:WindowsSysNativedriversPCTCore64.sys (PC Tools)
DRV:64bit: - (HpSAMD) – C:WindowsSysNativedriversHpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:WindowsSysNativedriversTsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (usbser) – C:WindowsSysNativedriversusbser.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:WindowsSysNativedriverssdbus.sys (Microsoft Corporation)
DRV:64bit: - (ETD) – C:WindowsSysNativedriversETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (athr) – C:WindowsSysNativedriversathrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (MEIx64) Intel® – C:WindowsSysNativedriversHECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) Sonido Intel® – C:WindowsSysNativedriversIntcDAud.sys (Intel® Corporation)
DRV:64bit: - (TurboB) – C:WindowsSysNativedriversTurboB.sys (Intel® Corporation)
DRV:64bit: - (nusb3xhc) – C:WindowsSysNativedriversnusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) – C:WindowsSysNativedriversnusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (iaStor) – C:WindowsSysNativedriversiaStor.sys (Intel Corporation)
DRV:64bit: - (pctEFA) – C:WindowsSysNativedriverspctEFA64.sys (PC Tools)
DRV:64bit: - (pctDS) – C:WindowsSysNativedriverspctDS64.sys (PC Tools)
DRV:64bit: - (Revoflt) – C:WindowsSysNativedriversrevoflt.sys (VS Revo Group)
DRV:64bit: - (amdsbs) – C:WindowsSysNativedriversamdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:WindowsSysNativedriverslsi_sas2.sys (LSI Corporation)
DRV:64bit: - (Fs_Rec) – C:WindowsSysNativedriversfs_rec.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) – C:WindowsSysNativedriversstexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:WindowsSysNativedriversevbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:WindowsSysNativedriversbxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:WindowsSysNativedriversb57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:WindowsSysNativedrivershcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (NTIDrvr) – C:WindowsSysNativedriversNTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:64bit: - (UBHelper) – C:WindowsSysNativedriversUBHelper.sys (NewTech Infosystems Corporation)
DRV:64bit: - (PxHlpa64) – C:WindowsSysNativedriversPxHlpa64.sys (Sonic Solutions)
DRV - (a2injectiondriver) – C:Program Files (x86)Emsisoft Anti-Malwarea2dix64.sys (Emsi Software GmbH)
DRV - (a2acc) – C:Program Files (x86)Emsisoft Anti-Malwarea2accx64.sys (Emsi Software GmbH)
DRV - (A2DDA) – C:Program Files (x86)Emsisoft Anti-Malwarea2ddax64.sys (Emsi Software GmbH)
DRV - (a2util) – C:Program Files (x86)Emsisoft Anti-Malwarea2util64.sys (Emsi Software GmbH)
DRV - (WIMMount) – C:WindowsSysWOW64driverswimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://packardbell.msn.com
IE:64bit: - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://packardbell.msn.com
IE:64bit: - HKLM..SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE:64bit: - HKLM..SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE:64bit: - HKLM..SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://packardbell.msn.com
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Local Page = C:WindowsSysWOW64blank.htm
IE - HKLMSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://packardbell.msn.com
IE - HKLM..SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM..SearchScopes{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM..SearchScopes{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM..SearchScopes{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}

IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Default_Page_URL = http://packardbell.msn.com
IE - HKCUSOFTWAREMicrosoftInternet ExplorerMain,Start Page = http://www.yahoo.es/
IE - HKCU..URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
IE - HKCU..SearchScopes,DefaultScope = {E4BEADF6-17DD-4BC9-9793-B06BEE4E453B}
IE - HKCU..SearchScopes{E4BEADF6-17DD-4BC9-9793-B06BEE4E453B}: "URL" = http://www.google.com/search?hl=en&q;={…1I7FDUM_esES477
IE - HKCUSoftwareMicrosoftWindowsCurrentVersionInternet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - user.js - File not found

FF:64bit: - [removed]/FlashPlayer: C:Windowssystem32MacromedFlashNPSWF64_11_2_202_228.dll File not found
FF:64bit: - [removed]/GENUINE: disabled File not found
FF:64bit: - [removed]/OfficeAuthz,version=14.0: C:PROGRA~1MICROS~2Office14NPAUTHZ.DLL (Microsoft Corporation)
FF - [removed]/FlashPlayer: C:WindowsSysWOW64MacromedFlashNPSWF32_11_2_202_228.dll ()
FF - [removed]/JavaPlugin: C:Program Files (x86)Javajre6binnew_pluginnpjp2.dll (Sun Microsystems, Inc.)
FF - [removed]/GENUINE: disabled File not found
FF - [removed]/NpCtrl,version=1.0: c:Program Files (x86)Microsoft Silverlight4.1.10111.0npctrl.dll ( Microsoft Corporation)
FF - [removed]/OfficeAuthz,version=14.0: C:PROGRA~2MICROS~3Office14NPAUTHZ.DLL (Microsoft Corporation)
FF - [removed]/SharePoint,version=14.0: C:PROGRA~2MICROS~3Office14NPSPWRAP.DLL (Microsoft Corporation)
FF - [removed]/WLPG,version=15.4.3502.0922: C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll (Microsoft Corporation)
FF - [removed]/WLPG,version=15.4.3538.0513: C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll (Microsoft Corporation)
FF - [removed]/PsndlCheck,version=1.00: C:Program Files (x86)SonyPLAYSTATION Network Downloadernppsndl.dll (Sony Computer Entertainment Inc.)
FF - [removed]/Media Go,version=1.0: C:Program Files (x86)SonyMedia Gonpmediago.dll (Sony Network Entertainment International LLC)
FF - [removed]/Google Update;version=3: C:Program Files (x86)GoogleUpdate1.3.21.111npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/Google Update;version=9: C:Program Files (x86)GoogleUpdate1.3.21.111npGoogleUpdate3.dll (Google Inc.)
FF - [removed]/GamesAppPresenceDetector,Version=1.0: C:Program Files (x86)WildTangent GamesAppBrowserIntegrationRegistered1NP_wtapp.dll ()
FF - HKLMSoftwareMozillaPluginsAdobe Reader: C:Program Files (x86)AdobeReader 9.0ReaderAIRnppdf32.dll (Adobe Systems Inc.)
FF - HKCUSoftwareMozillaPlugins@Skype Limited.com/Facebook Video Calling Plugin: C:UsersPatriciaAppDataLocalFacebookVideoSkypenpFacebookVideoCalling.dll (Skype Limited)

FF - [removed]: C:Program FilesAVAST SoftwareAvastWebRepFF [2012/03/10 20:04:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 11.0extensionsComponents: C:Program Files (x86)Mozilla Firefoxcomponents [2012/04/05 11:54:06 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINEsoftwaremozillaMozilla Firefox 11.0extensionsPlugins: C:Program Files (x86)Mozilla Firefoxplugins

[2012/04/05 11:55:22 | 000,000,000 | —D | M] (No name found) – C:UsersPatriciaAppDataRoamingmozillaExtensions
[2012/04/05 11:54:06 | 000,000,000 | —D | M] (No name found) – C:Program Files (x86)Mozilla Firefoxextensions
[2012/03/13 06:38:06 | 000,097,208 | —- | M] (Mozilla Foundation) – C:Program Files (x86)mozilla firefoxcomponentsbrowsercomps.dll
[2012/03/13 07:06:36 | 000,002,252 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginsbing.xml
[2012/03/13 08:14:58 | 000,003,996 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginsdrae.xml
[2012/03/13 08:14:58 | 000,001,143 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginseBay-es.xml
[2012/03/30 18:56:18 | 000,002,519 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginsSearch_Results.xml
[2012/03/13 07:06:36 | 000,002,040 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginstwitter.xml
[2012/03/13 08:14:58 | 000,001,178 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginswikipedia-es.xml
[2012/03/13 08:14:58 | 000,001,102 | —- | M] () – C:Program Files (x86)mozilla firefoxsearchpluginsyahoo-es.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chr
o
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:Program Files (x86)GoogleChromeApplication18.0.1025.151ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:Program Files (x86)GoogleChromeApplication18.0.1025.151pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:Program Files (x86)GoogleChromeApplication18.0.1025.151gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:WindowsSysWOW64MacromedFlashNPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:Program Files (x86)AdobeReader 9.0ReaderBrowsernppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:Program Files (x86)Javajre6binnew_pluginnpdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U29 (Enabled) = C:Program Files (x86)Javajre6binnew_pluginnpjp2.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:PROGRA~2MICROS~3Office14NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:PROGRA~2MICROS~3Office14NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:Program Files (x86)GoogleUpdate1.3.21.99npGoogleUpdate3.dll
CHR - plugin: Media Go Detector (Enabled) = C:Program Files (x86)SonyMedia Gonpmediago.dll
CHR - plugin: PlayStation®Network Downloader Check Plug-in (Enabled) = C:Program Files (x86)SonyPLAYSTATION Network Downloadernppsndl.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:Program Files (x86)WildTangent GamesAppBrowserIntegrationRegistered1NP_wtapp.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:Program Files (x86)Windows LivePhoto GalleryNPWLPG.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:UsersPatriciaAppDataLocalFacebookVideoSkypenpFacebookVideoCalling.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:Program Files (x86)Microsoft Silverlight4.0.60831.0npctrl.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:UsersPatriciaAppDataLocalGoogleChromeUser DataDefaultExtensionsblpcfgokakmgnkcojhhkbfbldkacnbeo4.2.5_0
CHR - Extension: Bu00FAsqueda de Google = C:UsersPatriciaAppDataLocalGoogleChromeUser DataDefaultExtensionscoobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0
CHR - Extension: avast! WebRep = C:UsersPatriciaAppDataLocalGoogleChromeUser DataDefaultExtensionsicmlaeflemplmjndnaapfdbbnpncnbda7.0.1426_0
CHR - Extension: Gmail = C:UsersPatriciaAppDataLocalGoogleChromeUser DataDefaultExtensionspjkljhegncpnkpknbcohdijeoejaedia7_0

O1 HOSTS File: ([2009/06/10 23:00:26 | 000,000,824 | —- | M]) - C:WindowsSysNativedriversetchosts
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:Archivos de programaAVAST SoftwareAvastaswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:Archivos de programaCommon FilesMicrosoft SharedWindows LiveWindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:Archivos de programaMicrosoft OfficeOffice14URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:Program Files (x86)Spybot - Search & DestroySDHelper.dll (Safer Networking Limited)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Archivos de programaAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:Program Files (x86)MicrosoftBingBarBingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM..Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM..Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:Archivos de programaAVAST SoftwareAvastaswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM..Toolbar: (no name) - 10 - No CLSID value found.
O3:64bit: - HKLM..Toolbar: (no name) - Locked - No CLSID value found.
O3 - HKLM..Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:Program Files (x86)MicrosoftBingBarBingExt.dll (Microsoft Corporation.)
O3 - HKLM..Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:Archivos de programaAVAST SoftwareAvastaswWebRepIE.dll (AVAST Software)
O3 - HKLM..Toolbar: (no name) - {99079a25-328f-4bd4-be04-00955acaa0a7} - No CLSID value found.
O3 - HKLM..Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU..ToolbarWebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:Program Files (x86)GoogleGoogle ToolbarGoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..Run: [Acer ePower Management] C:Archivos de programaPackard BellPackard Bell Power ManagementePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..Run: [ETDCtrl] C:Archivos de programaElantechETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..Run: [HotKeysCmds] C:WindowsSysNativehkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..Run: [IgfxTray] C:WindowsSysNativeigfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:Program FilesIntelTurboBoostRunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..Run: [Persistence] C:WindowsSysNativeigfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..Run: [RtHDVCpl] C:Program FilesRealtekAudioHDARAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..Run: [avast] C:Program FilesAVAST SoftwareAvastavastUI.exe (AVAST Software)
O4 - HKLM..Run: [BackupManagerTray] C:Program Files (x86)NTIPackard Bell MyBackupBackupManagerTray.exe (NTI Corporation)
O4 - HKLM..Run: [emsisoft anti-malware] c:program files (x86)emsisoft anti-malwarea2guard.exe (Emsi Software GmbH)
O4 - HKLM..Run: [IAStorIcon] C:Program Files (x86)IntelIntel® Rapid Storage TechnologyIAStorIcon.exe (Intel Corporation)
O4 - HKLM..Run: [LManager] C:Program Files (x86)Launch ManagerLManager.exe (Dritek System Inc.)
O4 - HKLM..Run: [NUSB3MON] C:Program Files (x86)Renesas ElectronicsUSB 3.0 Host Controller DriverApplicationnusb3mon.exe (Renesas Electronics Corporation)
O4 - HKCU..Run: [SpybotSD TeaTimer] C:Program Files (x86)Spybot - Search & DestroyTeaTimer.exe (Safer Networking Limited)
O4 - HKCU..RunOnce: [!SearchquDSFF] C:Windowssystem32RUNDLL32.EXE C:UsersPatriciaAppDataLocalTempSRASSE~1.DLL,_SetFirefoxAssets Search Results,Search_Results,http://dts.search-results.com/sr?src=ffb&appid;=361&systemid;=406&sr;=0&q;=, File not found
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktop = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesExplorer: NoActiveDesktopChanges = 1
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorAdmin = 5
O6 - HKLMSOFTWAREMicrosoftWindowsCurrentVersionpoliciesSystem: ConsentPromptBehaviorUser = 3
O9:64bit: - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Archivos de programaMicrosoft OfficeOffice14ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : &Enviar; a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:Archivos de programaMicrosoft OfficeOffice14ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Notas &vinculadas; de OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Archivos de programaMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Notas &vinculadas; de OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:Archivos de programaMicrosoft OfficeOffice14ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:Program Files (x86)Spybot - Search & DestroySDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5Catalog_Entries64\000000000008 [] - C:Archivos de programaCommon FilesMicrosoft SharedWindows LiveWLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5Catalog_Entries64\000000000009 [] - C:Archivos de programaCommon FilesMicrosoft SharedWindows LiveWLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000001 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000002 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000003 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000004 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000005 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000006 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9Catalog_Entries64\000000000018 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp64.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000001 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000002 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000003 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000004 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000005 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000006 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9Catalog_Entries\000000000018 - C:Program Files (x86)Common FilesPC ToolsLspPCTLsp.dll (PC Tools Research Pty Ltd.)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLMSystemCCSServicesTcpipParameters: DhcpNameServer = 192.168.1.1
O17 - HKLMSystemCCSServicesTcpipParametersInterfaces{593EFE90-293B-4E32-874D-1FD5730986B5}: DhcpNameServer = 192.168.1.1
O18:64bit: - ProtocolHandlerlivecall - No CLSID value found
O18:64bit: - ProtocolHandlerms-help - No CLSID value found
O18:64bit: - ProtocolHandlermsnim - No CLSID value found
O18:64bit: - ProtocolHandlerwlmailhtml - No CLSID value found
O18:64bit: - ProtocolHandlerwlpg - No CLSID value found
O18:64bit: - ProtocolFiltertext/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:Archivos de programaCommon FilesMicrosoft SharedOFFICE14MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:Windowssystem32nvinitx.dll) - C:WindowsSysNativenvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:WindowsSysWOW64nvinit.dll) - C:WindowsSysWOW64nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:Windowsexplorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:Windowssystem32userinit.exe) - C:WindowsSysNativeuserinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:WindowsSysNativeSystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:WindowsSysWow64explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:WindowsSysWow64userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - WinlogonNotifyigfxcui: DllName - (igfxdev.dll) - C:WindowsSysNativeigfxdev.dll (Intel Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2{23c2b98c-66b6-11e1-9183-1c7508fa280c}Shell - "" = AutoRun
O33 - MountPoints2{23c2b98c-66b6-11e1-9183-1c7508fa280c}ShellAutoRuncommand - "" = E:starusb.exe
O33 - MountPoints2{2e3716e3-32ec-11e1-9827-1c7508fa280c}Shell - "" = AutoRun
O33 - MountPoints2{2e3716e3-32ec-11e1-9827-1c7508fa280c}ShellAutoRuncommand - "" = F:starusb.exe
O33 - MountPoints2{9d54b707-d2e6-11e0-9914-1c7508fa280c}Shell - "" = AutoRun
O33 - MountPoints2{9d54b707-d2e6-11e0-9914-1c7508fa280c}ShellAutoRuncommand - "" = E:Startme.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM..comfile [open] – "%1" %*
O35:64bit: - HKLM..exefile [open] – "%1" %*
O35 - HKLM..comfile [open] – "%1" %*
O35 - HKLM..exefile [open] – "%1" %*
O37:64bit: - HKLM…com [@ = comfile] – "%1" %*
O37:64bit: - HKLM…exe [@ = exefile] – "%1" %*
O37 - HKLM…com [@ = comfile] – "%1" %*
O37 - HKLM…exe [@ = exefile] – "%1" %*


Drivers32:64bit: msacm.l3acm - C:WindowsSystem32l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3acm - C:WindowsSysWOW64l3codeca.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: msacm.l3codecp - C:WindowsSysWow64l3codecp.acm (Fraunhofer Institut Integrierte Schaltungen IIS)
Drivers32: vidc.cvid - C:WindowsSysWow64iccvid.dll (Radius Inc.)

CREATERESTOREPOINT
Restore point Set: OTL Restore Point

========== Files/Folders - Created Within 30 Days ==========

[2012/04/09 19:01:03 | 000,593,920 | —- | C] (OldTimer Tools) – C:UsersPatriciaDesktopOTL.exe
[2012/04/09 16:46:32 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataRoamingVS Revo Group
[2012/04/09 16:10:54 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataLocalVS Revo Group
[2012/04/09 16:10:50 | 000,031,800 | —- | C] (VS Revo Group) – C:WindowsSysNativedriversrevoflt.sys
[2012/04/09 16:10:50 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsRevo Uninstaller Pro
[2012/04/09 16:10:45 | 000,000,000 | —D | C] – C:Program FilesVS Revo Group
[2012/04/08 12:04:06 | 000,816,016 | —- | C] (PC Tools) – C:WindowsSysNativedriverspctEFA64.sys
[2012/04/08 12:04:06 | 000,452,872 | —- | C] (PC Tools) – C:WindowsSysNativedriverspctDS64.sys
[2012/04/08 12:04:04 | 000,331,368 | —- | C] (PC Tools) – C:WindowsSysNativedriverspctgntdi64.sys
[2012/04/08 12:04:04 | 000,136,168 | —- | C] (PC Tools) – C:WindowsSysNativedriverspctwfpfilter64.sys
[2012/04/08 12:03:59 | 000,257,232 | —- | C] (PC Tools) – C:WindowsSysNativedriversPCTCore64.sys
[2012/04/08 12:03:38 | 000,092,896 | —- | C] (PC Tools) – C:WindowsSysNativedriverspctplsg64.sys
[2012/04/08 12:02:57 | 000,000,000 | —D | C] – C:Program Files (x86)Common FilesPC Tools
[2012/04/08 11:31:01 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataRoamingParetoLogic
[2012/04/08 11:31:01 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataRoamingDriverCure[2012/04/08 11:30:13 | 000,000,000 | —D | C] – C:ProgramDataParetoLogic
[2012/04/07 19:27:58 | 000,000,000 | —D | C] – C:ProgramData{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}
[2012/04/05 11:58:13 | 000,200,976 | —- | C] (Trend Micro Inc.) – C:WindowsSysWow64driverstmcomm.sys
[2012/04/05 11:54:50 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataRoamingMozilla
[2012/04/03 16:01:40 | 000,000,000 | —D | C] – C:ProgramDataCodecv
[2012/04/01 15:44:29 | 000,000,000 | —D | C] – C:Program FilesCCleaner
[2012/04/01 15:24:25 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsEmsisoft Anti-Malware
[2012/03/31 12:09:11 | 000,000,000 | —D | C] – C:UsersPatriciaAppDataRoamingGoogle
[2012/03/30 18:55:05 | 000,000,000 | —D | C] – C:ProgramDataDivX
[2012/03/30 18:50:16 | 000,000,000 | —D | C] – C:ProgramDataPremium
[2012/03/30 18:50:16 | 000,000,000 | —D | C] – C:ProgramDataInstallMate
[2012/03/30 11:11:31 | 008,738,464 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerInstaller.exe
[2012/03/30 10:34:55 | 000,418,464 | —- | C] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerApp.exe
[2012/03/15 13:40:02 | 005,559,152 | —- | C] (Microsoft Corporation) – C:WindowsSysNativentoskrnl.exe
[2012/03/15 13:40:01 | 003,968,368 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ntkrnlpa.exe
[2012/03/15 13:40:00 | 003,913,584 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64ntoskrnl.exe
[2012/03/14 23:58:55 | 000,000,000 | -HSD | C] – C:Config.Msi
[2012/03/14 12:39:02 | 001,544,192 | —- | C] (Microsoft Corporation) – C:WindowsSysNativeDWrite.dll
[2012/03/14 12:37:15 | 001,031,680 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpcore.dll
[2012/03/14 12:37:15 | 000,826,880 | —- | C] (Microsoft Corporation) – C:WindowsSysWow64rdpcore.dll
[2012/03/14 12:37:14 | 000,149,504 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpcorekmts.dll
[2012/03/14 12:37:14 | 000,009,216 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdrmemptylst.exe
[2012/03/14 12:37:13 | 000,077,312 | —- | C] (Microsoft Corporation) – C:WindowsSysNativerdpwsx.dll
[2012/03/14 12:11:39 | 000,000,000 | —D | C] – C:ProgramDataMicrosoftWindowsStart MenuProgramsavast! Free Antivirus
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/04/09 19:11:05 | 000,000,838 | —- | M] () – C:WindowstasksAdobe Flash Player Updater.job
[2012/04/09 18:46:00 | 000,001,104 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineUA.job
[2012/04/09 18:44:04 | 000,009,920 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/09 18:44:04 | 000,009,920 | -H– | M] () – C:WindowsSysNative7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/09 18:38:32 | 000,001,100 | —- | M] () – C:WindowstasksGoogleUpdateTaskMachineCore.job
[2012/04/09 18:35:56 | 000,000,206 | —- | M] () – C:WindowstasksAutoKMS.job
[2012/04/09 18:35:33 | 000,067,584 | –S- | M] () – C:Windowsbootstat.dat
[2012/04/09 16:58:07 | 3104,722,944 | -HS- | M] () – C:hiberfil.sys
[2012/04/09 16:55:08 | 000,593,920 | —- | M] (OldTimer Tools) – C:UsersPatriciaDesktopOTL.exe
[2012/04/09 16:10:51 | 000,001,089 | —- | M] () – C:UsersPublicDesktopRevo Uninstaller Pro.lnk
[2012/04/09 16:06:39 | 000,001,896 | —- | M] () – C:UsersPatriciaDocumentscc_20120409_160637.reg
[2012/04/09 16:06:22 | 000,002,764 | —- | M] () – C:UsersPatriciaDocumentscc_20120409_160620.reg
[2012/04/09 16:06:07 | 000,002,016 | —- | M] () – C:UsersPatriciaDocumentscc_20120409_160605.reg
[2012/04/09 16:05:44 | 000,010,338 | —- | M] () – C:UsersPatriciaDocumentscc_20120409_160540.reg
[2012/04/09 16:05:07 | 000,170,942 | —- | M] () – C:UsersPatriciaDocumentscc_20120409_160452.reg
[2012/04/09 15:47:40 | 000,001,853 | —- | M] () – C:UsersPublicDesktopavast! Free Antivirus.lnk
[2012/04/09 15:47:40 | 000,000,000 | —- | M] () – C:WindowsSysWow64config.nt
[2012/04/08 12:04:21 | 001,926,382 | —- | M] () – C:WindowsSysNativedriversCat.DB
[2012/04/08 11:18:36 | 000,001,274 | —- | M] () – C:UsersPatriciaAppDataRoamingMicrosoftWindowsStart MenuProgramsStartupRecorte de pantalla y Selector de OneNote 2010.lnk
[2012/04/07 19:58:02 | 000,000,940 | —- | M] () – C:WindowstasksFacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001UA.job
[2012/04/06 22:28:35 | 001,555,646 | —- | M] () – C:WindowsSysNativePerfStringBackup.INI
[2012/04/06 22:28:35 | 000,703,840 | —- | M] () – C:WindowsSysNativeperfh00A.dat
[2012/04/06 22:28:35 | 000,616,008 | —- | M] () – C:WindowsSysNativeperfh009.dat
[2012/04/06 22:28:35 | 000,137,806 | —- | M] () – C:WindowsSysNativeperfc00A.dat
[2012/04/06 22:28:35 | 000,106,388 | —- | M] () – C:WindowsSysNativeperfc009.dat
[2012/04/05 13:10:36 | 000,186,676 | —- | M] () – C:UsersPatriciaAppDataLocalcensus.cache
[2012/04/05 13:10:17 | 000,103,334 | —- | M] () – C:UsersPatriciaAppDataLocalars.cache
[2012/04/05 11:55:30 | 000,000,036 | —- | M] () – C:UsersPatriciaAppDataLocalhousecall.guid.cache
[2012/04/03 16:02:56 | 000,000,050 | —- | M] () – C:user.js
[2012/04/01 15:44:39 | 000,000,834 | —- | M] () – C:UsersPublicDesktopCCleaner.lnk
[2012/04/01 15:24:25 | 000,001,063 | —- | M] () – C:UsersPublicDesktopEmsisoft Anti-Malware.lnk
[2012/03/30 16:55:14 | 000,290,933 | —- | M] () – C:UsersPatriciaDesktopBeca%20Doctorado%20Grant_%202012.pdf
[2012/03/30 11:11:37 | 000,418,464 | —- | M] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerApp.exe
[2012/03/30 11:11:37 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerCPLApp.cpl
[2012/03/30 11:11:31 | 008,738,464 | —- | M] (Adobe Systems Incorporated) – C:WindowsSysWow64FlashPlayerInstaller.exe
[2012/03/29 13:49:27 | 000,000,060 | —- | M] () – C:Windowswpd99.drv
[2012/03/27 22:58:00 | 000,000,918 | —- | M] () – C:WindowstasksFacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001Core.job
[2012/03/15 17:12:44 | 000,000,510 | —- | M] () – C:settings.ini
[2012/03/15 14:35:21 | 000,436,872 | —- | M] () – C:WindowsSysNativeFNTCACHE.DAT
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/04/09 16:10:51 | 000,001,089 | —- | C] () – C:UsersPublicDesktopRevo Uninstaller Pro.lnk
[2012/04/09 16:06:39 | 000,001,896 | —- | C] () – C:UsersPatriciaDocumentscc_20120409_160637.reg
[2012/04/09 16:06:21 | 000,002,764 | —- | C] () – C:UsersPatriciaDocumentscc_20120409_160620.reg
[2012/04/09 16:06:06 | 000,002,016 | —- | C] () – C:UsersPatriciaDocumentscc_20120409_160605.reg
[2012/04/09 16:05:42 | 000,010,338 | —- | C] () – C:UsersPatriciaDocumentscc_20120409_160540.reg
[2012/04/09 16:04:56 | 000,170,942 | —- | C] () – C:UsersPatriciaDocumentscc_20120409_160452.reg
[2012/04/08 12:04:07 | 001,926,382 | —- | C] () – C:WindowsSysNativedriversCat.DB
[2012/04/05 13:10:36 | 000,186,676 | —- | C] () – C:UsersPatriciaAppDataLocalcensus.cache
[2012/04/05 13:10:17 | 000,103,334 | —- | C] () – C:UsersPatriciaAppDataLocalars.cache
[2012/04/05 11:55:30 | 000,000,036 | —- | C] () – C:UsersPatriciaAppDataLocalhousecall.guid.cache
[2012/04/05 11:54:09 | 000,001,114 | —- | C] () – C:ProgramDataMicrosoftWindowsStart MenuProgramsMozilla Firefox.lnk
[2012/04/03 16:02:56 | 000,000,050 | —- | C] () – C:user.js
[2012/04/01 15:44:39 | 000,000,834 | —- | C] () – C:UsersPublicDesktopCCleaner.lnk
[2012/04/01 15:24:25 | 000,001,063 | —- | C] () – C:UsersPublicDesktopEmsisoft Anti-Malware.lnk
[2012/03/30 16:55:14 | 000,290,933 | —- | C] () – C:UsersPatriciaDesktopBeca%20Doctorado%20Grant_%202012.pdf
[2012/03/30 10:34:57 | 000,000,838 | —- | C] () – C:WindowstasksAdobe Flash Player Updater.job
[2012/03/15 17:12:44 | 000,000,510 | —- | C] () – C:settings.ini
[2012/03/14 12:11:39 | 000,001,853 | —- | C] () – C:UsersPublicDesktopavast! Free Antivirus.lnk
[2011/10/01 16:10:15 | 000,000,496 | —- | C] () – C:Windowswininit.ini
[2011/10/01 12:35:16 | 000,001,466 | —- | C] () – C:WindowseReg.dat
[2011/08/30 13:20:24 | 000,077,824 | —- | C] () – C:WindowsSysWow64eautil.dll
[2011/08/29 16:43:41 | 000,000,028 | —- | C] () – C:Windowspdf995.ini
[2011/08/29 16:32:41 | 000,047,616 | —- | C] () – C:WindowsSysWow64pdf995mon64.dll
[2011/08/29 16:32:41 | 000,000,060 | —- | C] () – C:Windowswpd99.drv
[2011/08/22 19:01:48 | 000,000,135 | —- | C] () – C:WindowsAutoKMS.ini
[2011/01/06 06:09:23 | 000,960,940 | —- | C] () – C:WindowsSysWow64igkrng600.bin
[2011/01/06 06:09:21 | 000,207,376 | —- | C] () – C:WindowsSysWow64igfcg600m.bin
[2011/01/06 06:09:18 | 000,145,804 | —- | C] () – C:WindowsSysWow64igcompkrng600.bin

========== LOP Check ==========

[2012/04/08 11:31:01 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingDriverCure
[2011/10/12 18:22:12 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingEasy MP3 Recorder
[2012/04/09 16:20:26 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingEasyJob Resume Builder
[2011/08/07 20:39:19 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingFloodLightGames
[2011/11/25 17:35:56 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingNokia
[2012/04/08 11:31:01 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingParetoLogic
[2011/08/29 16:43:41 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingpdf995
[2011/08/22 18:29:22 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingSNS
[2011/12/17 14:36:55 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingSony
[2012/04/07 11:44:04 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingSpotify
[2012/04/09 16:46:32 | 000,000,000 | —D | M] – C:UsersPatriciaAppDataRoamingVS Revo Group
[2012/04/09 18:35:56 | 000,000,206 | —- | M] () – C:WindowsTasksAutoKMS.job
[2012/03/27 22:58:00 | 000,000,918 | —- | M] () – C:WindowsTasksFacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001Core.job
[2012/04/07 19:58:02 | 000,000,940 | —- | M] () – C:WindowsTasksFacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001UA.job
[2012/02/13 15:52:26 | 000,032,534 | —- | M] () – C:WindowsTasksSCHEDLGU.TXT

========== Purity Check ==========



========== Custom Scans ==========

< %SYSTEMDRIVE%*.* >
[2010/12/03 12:35:52 | 000,008,192 | RHS- | M] () – C:BOOTSECT.BAK
[2012/04/09 16:58:07 | 3104,722,944 | -HS- | M] () – C:hiberfil.sys
[2012/04/09 18:35:23 | 4139,630,592 | -HS- | M] () – C:pagefile.sys
[2012/03/15 17:12:44 | 000,000,510 | —- | M] () – C:settings.ini
[2012/04/03 16:02:56 | 000,000,050 | —- | M] () – C:user.js

< %systemroot%Fonts*.com >
[2009/07/14 07:32:31 | 000,026,040 | —- | M] () – C:WindowsFontsGlobalMonospace.CompositeFont
[2009/07/14 07:32:31 | 000,026,489 | —- | M] () – C:WindowsFontsGlobalSansSerif.CompositeFont
[2009/07/14 07:32:31 | 000,029,779 | —- | M] () – C:WindowsFontsGlobalSerif.CompositeFont
[2009/07/14 07:32:31 | 000,043,318 | —- | M] () – C:WindowsFontsGlobalUserInterface.CompositeFont

< %systemroot%Fonts*.dll >

< %systemroot%Fonts*.ini >
[2009/06/10 22:49:50 | 000,000,065 | —- | M] () – C:WindowsFontsdesktop.ini

< %systemroot%Fonts*.ini2 >

< %systemroot%Fonts*.exe >

< %systemroot%system32spoolprtprocsw32x86*.* >

< %systemroot%REPAIR*.bak1 >

< %systemroot%REPAIR*.ini >

< %systemroot%system32*.jpg >

< %systemroot%*.jpg >

< %systemroot%*.png >

< %systemroot%*.scr >
[2012/03/07 02:15:19 | 000,041,184 | —- | M] (AVAST Software) – C:WindowsavastSS.scr
[2011/05/13 16:42:24 | 000,302,448 | —- | M] (Microsoft Corporation) – C:WindowsWLXPGSS.SCR
[1 C:Windows*.tmp files -> C:Windows*.tmp -> ]

< %systemroot%*._sy >

< %APPDATA%AdobeUpdate*.* >

< %ALLUSERSPROFILE%Favorites*.* >

< %APPDATA%Microsoft*.* >

< %PROGRAMFILES%*.* >
[2009/07/14 06:54:24 | 000,000,174 | -HS- | M] () – C:Program Files (x86)desktop.ini

< %APPDATA%Update*.* >

< %systemroot%*. /mp /s >

< %systemroot%System32config*.sav >

< %PROGRAMFILES%bak. /s >

< %systemroot%system32bak. /s >

< %ALLUSERSPROFILE%Start Menu*.lnk /x >

< %systemroot%system32configsystemprofile*.dat /x >

< %systemroot%*.config >

< %systemroot%system32*.db >

< %PROGRAMFILES%Internet Explorer*.dat >

< %APPDATA%MicrosoftInternet ExplorerQuick Launch*.lnk /x >
[2011/08/23 14:47:07 | 000,000,319 | -HS- | M] () – C:UsersPatriciaAppDataRoamingMicrosoftInternet ExplorerQuick Launchdesktop.ini

< %USERPROFILE%Desktop*.exe >
[2012/04/09 16:55:08 | 000,593,920 | —- | M] (OldTimer Tools) – C:UsersPatriciaDesktopOTL.exe

< %PROGRAMFILES%Common Files*.* >

< %systemroot%*.src >

< %systemroot%install*.* >

< %systemroot%system32DLL*.* >

< %systemroot%system32HelpFiles*.* >

< %systemroot%system32rundll*.* >

< %systemroot%winn32*.* >

< %systemroot%Java*.* >

< %systemroot%system32test*.* >

< %systemroot%system32Rundll32*.* >

< %systemroot%AppPatchCustom*.* >

< HKEY_LOCAL_MACHINESOFTWAREPoliciesMicrosoftWindowsWindowsUpdateAU >

< HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionWindowsUpdateAuto UpdateResultsInstall|LastSuccessTime /rs >

========== Alternate Data Streams ==========

@Alternate Data Stream - 171 bytes -> C:ProgramDataTemp:DFC5A2B2

< End of report >

EXTRAS


OTL Extras logfile created on: 09/04/2012 19:04:58 - Run 1
OTL by OldTimer - Version 3.2.39.2 Folder = C:UsersPatriciaDesktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

3,86 Gb Total Physical Memory | 1,75 Gb Available Physical Memory | 45,35% Memory free
7,71 Gb Paging File | 5,28 Gb Available in Paging File | 68,51% Paging File free
Paging file location(s): ?:pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:Windows | %ProgramFiles% = C:Program Files (x86)
Drive C: | 683,04 Gb Total Space | 578,47 Gb Free Space | 84,69% Space Free | Partition Type: NTFS

Computer Name: PATRICIA-PC | User Name: Patricia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Extra Registry (SafeList) ==========


========== File Associations ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREClasses]
.url[@ = InternetShortcut] – C:WindowsSysNativerundll32.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINESOFTWAREClasses]
.cpl [@ = cplfile] – C:WindowsSysWow64control.exe (Microsoft Corporation)

========== Shell Spawning ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] – "C:WindowsSystem32rundll32.exe" "C:WindowsSystem32mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)

[HKEY_LOCAL_MACHINESOFTWAREClassesshell[command]command]
batfile [open] – "%1" %*
cmdfile [open] – "%1" %*
comfile [open] – "%1" %*
cplfile [cplopen] – %SystemRoot%System32control.exe "%1",%* (Microsoft Corporation)
exefile [open] – "%1" %*
helpfile [open] – Reg Error: Key error.
inffile [install] – %SystemRoot%System32InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] – "%1" %*
regfile [merge] – Reg Error: Key error.
scrfile [config] – "%1"
scrfile [install] – rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] – "%1" /S
txtfile – Reg Error: Key error.
Unknown [openas] – %SystemRoot%system32rundll32.exe %SystemRoot%system32shell32.dll,OpenAs_RunDLL %1
Directory [AddToPlaylistVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –playlist-enqueue "%1" ()
Directory [cmd] – cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] – "C:Program Files (x86)VideoLANVLCvlc.exe" –started-from-file –no-playlist-enqueue "%1" ()
Folder [open] – %SystemRoot%Explorer.exe (Microsoft Corporation)
Folder [explore] – Reg Error: Value error.
Drive [find] – %SystemRoot%Explorer.exe (Microsoft Corporation)

========== Security Center Settings ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]
"cval" = 1

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterMonitoring]

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]
"VistaSp1" = 28 4D B2 76 41 04 CA 01 [binary data]
"AntiVirusOverride" = 0
"AntiSpywareOverride" = 0
"FirewallOverride" = 0

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvcVol]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity Center]

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftSecurity CenterSvc]

========== Firewall Settings ==========

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyDomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyStandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

[HKEY_LOCAL_MACHINESYSTEMCurrentControlSetServicesSharedAccessParametersFi
rewallPolicyPublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1

========== Authorized Applications List ==========


========== HKEY_LOCAL_MACHINE Uninstall List ==========

64bit: [HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{029A4933-3F36-4E4F-AEC3-2207AB26463D}" = Broadcom Gigabit NetLink Controller
"{180C8888-50F1-426B-A9DC-AB83A1989C65}" = Windows Live Language Selector
"{1ACC8FFB-9D84-4C05-A4DE-D28A9BC91698}" = Windows Live ID Sign-in Assistant
"{4710662C-8204-4334-A977-B1AC9E547819}" = Broadcom Card Reader Driver Installer
"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148
"{4D668D4F-FAA2-4726-834C-31F4614F312E}" = MSVC80_x64_v2
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{67579783-0FB7-4F7B-B881-E5BE47C9DBE0}_is1" = Revo Uninstaller Pro 2.5.7
"{680EDA59-9266-44B4-949E-0C24F65DFF82}" = Microsoft_VC100_CRT_SP1_x64
"{6DDCFF78-6F91-438C-9567-C5CAA9D7F56C}" = Windows Live Family Safety
"{8EB588BD-D398-40D0-ADF7-BE1CEEF7C116}" = Windows Live Remote Client Resources
"{90140000-002A-0000-1000-0000000FF1CE}" = Microsoft Office Office 64-bit Components 2010
"{90140000-002A-0C0A-1000-0000000FF1CE}" = Microsoft Office Shared 64-bit MUI (Spanish) 2010
"{95120000-00B9-0409-1000-0000000FF1CE}" = Microsoft Application Error Reporting
"{A679FBE4-BA2D-4514-8834-030982C8B31A}" = Windows Live Remote Service Resources
"{AB071C8B-873C-459F-ACA9-9EBE03C3E89B}" = MSVC90_x64
"{B2FE1952-0186-46c3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = Panel de control de NVIDIA 266.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Controlador de gráficos 266.19
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus 1.0.11
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NVIDIA.Update" = NVIDIA Update Components
"{B77EFA0B-9BD3-4122-9F9A-15A963B5EA24}" = Monitor de la tecnología Intel® Turbo Boost 2.0
"{C3C912BB-BF4B-3788-8A19-DA5B999CE0C6}" = Microsoft .NET Framework 4 Client Profile ESN Language Pack
"{CEA21F20-DBF4-464C-8B81-28B8508AFDDD}" = Windows Live Family Safety
"{DA54F80E-261C-41A2-A855-549A144F2F59}" = Windows Live MIME IFilter
"{DF6D988A-EEA0-4277-AAB8-158E086E439B}" = Windows Live Remote Client
"{E02A6548-6FDE-40E2-8ED9-119D7D7E641F}" = Windows Live Remote Service
"{F5B09CFD-F0B2-36AF-8DF4-1DF6B63FC7B4}" = Microsoft .NET Framework 4 Client Profile
"Adobe Flash Player ActiveX" = Adobe Flash Player 11 ActiveX 64-bit
"Adobe Flash Player Plugin" = Adobe Flash Player 11 Plugin 64-bit
"CCleaner" = CCleaner
"Elantech" = ETDWare PS/2-X64 8.0.6.0_WHQL
"Microsoft .NET Framework 4 Client Profile" = Microsoft .NET Framework 4 Client Profile
"Microsoft .NET Framework 4 Client Profile ESN Language Pack" = Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN
"WinRAR archiver" = WinRAR 4.01 (64-bit)

[HKEY_LOCAL_MACHINESOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"{04668DF2-D32F-4555-9C7E-35523DCD6544}" = Control ActiveX de Windows Live Mesh para conexiones remotas
"{0B0F231F-CE6A-483D-AA23-77B364F75917}" = Windows Live Installer
"{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Backup Manager V3
"{0D261C88-454B-46FE-B43B-640E621BDA11}" = Windows Live Mail
"{0E532C84-4275-41B3-9D81-D4A1A20D8EE7}" = PlayStation®Store
"{167A1F6A-9BF2-4B24-83DB-C6D659F680EA}" = Media Go
"{17DFE37C-064E-4834-AD8F-A4B2B4DF68F8}" = Adobe Photoshop Elements 8.0
"{18455581-E099-4BA8-BC6B-F34B2F06600C}" = Google Toolbar for Internet Explorer
"{1A7F8DF6-5A3E-4CDF-BC82-BE26B407E21B}" = Los Sims Superstar
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{1F6AB0E7-8CDD-4B93-8A23-AA9EB2FEFCE4}" = Junk Mail filter update
"{200FEC62-3C34-4D60-9CE8-EC372E01C08F}" = Windows Live SOXE Definitions
"{20400DBD-E6DB-45B8-9B6B-1DD7033818EC}" = Nero InfoTool Help
"{2318C2B1-4965-11d4-9B18-009027A5CD4F}" = Google Toolbar for Internet Explorer
"{2348B586-C9AE-46CE-936C-A68E9426E214}" = Nero StartSmart Help
"{26A24AE4-039D-4CA4-87B4-2F83216029FF}" = Java™ 6 Update 29
"{287ECFA4-719A-2143-A09B-D6A12DE54E40}" = Acrobat.com
"{2FA94A64-C84E-49d1-97DD-7BF06C7BBFB2}.WildTangent Games App" = Update Installer for WildTangent Games App
"{3336F667-9049-4D46-98B6-4C743EEBC5B1}" = Windows Live Photo Gallery
"{33CF58F5-48D8-4575-83D6-96F574E4D83A}" = Nero DriveSpeed
"{3DB0448D-AD82-4923-B305-D001E521A964}" = Packard Bell Power Management
"{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}" = Intel® Rapid Storage Technology
"{449CE12D-E2C7-4B97-B19E-55D163EA9435}" = Bing Bar
"{48C0DC5E-820A-44F2-890E-29B68EDD3C78}" = Windows Live Writer
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4D43D635-6FDA-4FA5-AA9B-23CF73D058EA}" = Nero StartSmart OEM
"{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"{56C049BE-79E9-4502-BEA7-9754A3E60F9B}" = neroxml
"{595A3116-40BB-4E0F-A2E8-D7951DA56270}" = NeroExpress
"{5D273F60-0525-48BA-A5FB-D0CAA4A952AE}" = Windows Live Movie Maker
"{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"{65153EA5-8B6E-43B6-857B-C6E4FC25798A}" = Intel® Management Engine Components
"{682B3E4F-696A-42DE-A41C-4C07EA1678B4}" = Windows Live SOXE
"{6D3245B1-8DB8-4A23-9CD2-2C90F40ABAF6}" = MSVC80_x86_v2
"{70B446D1-E03B-4ab0-9B3C-0832142C9AA8}.WildTangent Games App-packardbell" = WildTangent Games App (Packard Bell Games)
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{77477AEA-5757-47D8-8B33-939F43D82218}" = Windows Live UX Platform Language Pack
"{7748AC8C-18E3-43BB-959B-088FAEA16FB2}" = Nero StartSmart
"{78A96B4C-A643-4D0F-98C2-A8E16A6669F9}" = Windows Live Messenger Companion Core
"{78DAE910-CA72-450E-AD22-772CB1A00678}" = Windows Live Mesh
"{7CAC6A44-C3DE-4153-ACA6-7524602C789E}" = Facebook Video Calling 1.2.0.159
"{7D1C7B9F-2744-4388-B128-5C75B8BCCC84}" = Windows Live Essentials
"{7F811A54-5A09-4579-90E1-C93498E230D9}" = Packard Bell Recovery Management
"{83202942-84B3-4C50-8622-B8C0AA2D2885}" = Nero Express Help
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{83C292B7-38A5-440B-A731-07070E81A64F}" = Windows Live PIMT Platform
"{869200DB-287A-4DC0-B02B-2B6787FBCD4C}" = Nero DiscSpeed
"{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}" = Microsoft Silverlight
"{8C6D6116-B724-4810-8F2D-D047E6B7D68E}" = Mesh Runtime
"{8DD46C6A-0056-4FEC-B70A-28BB16A1F11F}" = MSVCRT
"{8FF3891F-01B5-4A71-BFCD-20761890471C}" = Windows Live Messenger
"{90140000-0015-0C0A-0000-0000000FF1CE}" = Microsoft Office Access MUI (Spanish) 2010
"{90140000-0015-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0016-0C0A-0000-0000000FF1CE}" = Microsoft Office Excel MUI (Spanish) 2010
"{90140000-0016-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0018-0C0A-0000-0000000FF1CE}" = Microsoft Office PowerPoint MUI (Spanish) 2010
"{90140000-0018-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-0019-0C0A-0000-0000000FF1CE}" = Microsoft Office Publisher MUI (Spanish) 2010
"{90140000-0019-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook MUI (Spanish) 2010
"{90140000-001A-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001B-0C0A-0000-0000000FF1CE}" = Microsoft Office Word MUI (Spanish) 2010
"{90140000-001B-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0403-0000-0000000FF1CE}" = Microsoft Office Proof (Catalan) 2010
"{90140000-001F-0403-0000-0000000FF1CE}_Office14.SingleImage_{F030E098-C2CC-4056-971E-4D3AB0F55517}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0409-0000-0000000FF1CE}" = Microsoft Office Proof (English) 2010
"{90140000-001F-0409-0000-0000000FF1CE}_Office14.SingleImage_{99ACCA38-6DD3-48A8-96AE-A283C9759279}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-040C-0000-0000000FF1CE}" = Microsoft Office Proof (French) 2010
"{90140000-001F-040C-0000-0000000FF1CE}_Office14.SingleImage_{46298F6A-1E7E-4D4A-B5F5-106A4F0E48C6}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0416-0000-0000000FF1CE}" = Microsoft Office Proof (Portuguese (Brazil)) 2010
"{90140000-001F-0416-0000-0000000FF1CE}_Office14.SingleImage_{A7200E61-DC93-42E0-BB74-EE59021016EA}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-042D-0000-0000000FF1CE}" = Microsoft Office Proof (Basque) 2010
"{90140000-001F-042D-0000-0000000FF1CE}_Office14.SingleImage_{C6E07E58-897F-4686-A498-764B9D404F09}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0456-0000-0000000FF1CE}" = Microsoft Office Proof (Galician) 2010
"{90140000-001F-0456-0000-0000000FF1CE}_Office14.SingleImage_{6CA060C9-FAFB-4A51-B533-A6AEE1A325BE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-001F-0C0A-0000-0000000FF1CE}" = Microsoft Office Proof (Spanish) 2010
"{90140000-001F-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DEA87BE2-FFCC-4F33-9946-FCBE55A1E998}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0000-1000-0000000FF1CE}_Office14.SingleImage_{967EF02C-5C7E-4718-8FCB-BDC050190CCF}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002A-0C0A-1000-0000000FF1CE}_Office14.SingleImage_{ED7E1546-A5BC-407C-8321-94D6DAF9B5A7}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-002C-0C0A-0000-0000000FF1CE}" = Microsoft Office Proofing (Spanish) 2010
"{90140000-002C-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{DBE2E9A2-A47F-42A9-A1CF-3B6665A9714A}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-003D-0000-0000-0000000FF1CE}" = Microsoft Office Single Image 2010
"{90140000-003D-0000-0000-0000000FF1CE}_Office14.SingleImage_{047B0968-E622-4FAA-9B4B-121FA109EDDE}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-006E-0C0A-0000-0000000FF1CE}" = Microsoft Office Shared MUI (Spanish) 2010
"{90140000-006E-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{7FF53332-4A24-4F40-946E-C58B6326063C}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{90140000-00A1-0C0A-0000-0000000FF1CE}" = Microsoft Office OneNote MUI (Spanish) 2010
"{90140000-00A1-0C0A-0000-0000000FF1CE}_Office14.SingleImage_{AA321CAB-5896-46B1-B18E-3EE82C88ABF1}" = Microsoft Office 2010 Service Pack 1 (SP1)
"{92EA4134-10D1-418A-91E1-5A0453131A38}" = Windows Live Movie Maker
"{939C80FA-96C9-44A6-B318-8E7D8BD8481B}" = Messenger Companion
"{95140000-0070-0000-0000-0000000FF1CE}" = Microsoft Office 2010
"{95140000-007A-0C0A-0000-0000000FF1CE}" = Microsoft Office Outlook Connector
"{95140000-007D-0409-0000-0000000FF1CE}" = Microsoft Outlook Social Connector Provider for Windows Live Messenger 32-bit
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9D56775A-93F3-44A3-8092-840E3826DE30}" = Windows Live Mail
"{a0fe116e-9a8a-466f-aee0-625cb7c207e3}" = Microsoft Visual C++ 2005 Redistributable - KB2467175
"{A2BCA9F1-566C-4805-97D1-7FDC93386723}" = Adobe AIR
"{A41A708E-3BE6-4561-855D-44027C1CF0F8}" = Windows Live Photo Common
"{A726AE06-AAA3-43D1-87E3-70F510314F04}" = Windows Live Writer
"{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}" = ImagXpress
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{A9BDCA6B-3653-467B-AC83-94367DA3BFE3}" = Windows Live Photo Common
"{AA4BF92B-2AAF-11DA-9D78-000129760D75}" = HomeMedia
"{AAAFC670-569B-4A2F-82B4-42945E0DE3EF}" = Windows Live Writer
"{AC76BA86-7AD7-FFFF-7B44-A91000000001}" = Adobe Reader 9.5.0 MUI
"{AF111648-99A1-453E-81DD-80DBBF6DAD0D}" = MSVC90_x86
"{B2EC4A38-B545-4A00-8214-13FE0E915E6D}" = Advertising Center
"{B4092C6D-E886-4CB2-BA68-FE5A88D31DE6}_is1" = Spybot - Search & Destroy
"{B6659DD8-00A7-4A24-BBFB-C1F6982E5D66}" = PlayStation®Network Downloader
"{BC30E5E7-047D-4232-A7E8-F2CB7CC7B2E0}_is1" = Emsisoft Anti-Malware
"{BD5CA0DA-71AD-43DA-B19E-6EEE0C9ADC9A}" = Nero ControlCenter
"{C81A2FE0-3574-00A9-CED4-BDAA334CBE8E}" = Nero Online Upgrade
"{CC019E3F-59D2-4486-8D4B-878105B62A71}" = Nero DiscSpeed Help
"{CE95A79E-E4FC-4FFF-8A75-29F04B942FF2}" = Windows Live UX Platform
"{D0B44725-3666-492D-BEF6-587A14BD9BD9}" = MSVCRT_amd64
"{D103C4BA-F905-437A-8049-DB24763BBE36}" = Skype™ 4.1
"{D45240D3-B6B3-4FF9-B243-54ECE3E10066}" = Windows Live Communications Platform
"{DECDCB7C-58CC-4865-91AF-627F9798FE48}" = Windows Live Mesh
"{E09C4DB7-630C-4F06-A631-8EA7239923AF}" = D3DX10
"{E0B19DF7-B1C7-4937-82C4-0E4B1E346965}" = eBay Worldwide
"{E3B64CC5-C011-40C0-92BC-7316CD5E5688}" = Microsoft_VC100_CRT_SP1_x86
"{E5B21F11-6933-4E0B-A25C-7963E3C07D11}" = Windows Live Messenger
"{E5C7D048-F9B4-4219-B323-8BDB01A2563D}" = Nero DriveSpeed Help
"{E727A662-AF9F-4DEE-81C5-F4A1686F3DFC}" = Windows Live Writer Resources
"{E85A4EFC-82F2-4CEE-8A8E-62FDAD353A66}" = Galería fotográfica de Windows Live
"{E8A80433-302B-4FF1-815D-FCC8EAC482FF}" = Nero Installer
"{EE171732-BEB4-4576-887D-CB62727F01CA}" = Packard Bell Updater
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony Ericsson PC Companion 2.02.002
"{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}" = Microsoft SQL Server 2005 Compact Edition [ENU]
"{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}" = Intel® Processor Graphics
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{f3b75363-fa28-46b2-9d9f-112252157a7b}" = Nero 9 Essentials
"{F4041DCE-3FE1-4E18-8A9E-9DE65231EE36}" = Nero ControlCenter
"{F8A9085D-4C7A-41a9-8A77-C8998A96C421}" = Intel® Control Center
"{FBCDFD61-7DCF-4E71-9226-873BA0053139}" = Nero InfoTool
"Adobe AIR" = Adobe AIR
"Adobe Photoshop Elements 8.0" = Adobe Photoshop Elements 8.0
"avast" = avast! Free Antivirus
"Google Chrome" = Google Chrome
"Identity Card" = Identity Card
"InstallShield_{0B61BBD5-DA3C-409A-8730-0C3DC3B0F270}" = Packard Bell MyBackup
"InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}" = Renesas Electronics USB 3.0 Host Controller Driver
"InstallShield_{64EF903E-D00A-414C-94A4-FBA368FFCDC9}" = Packard Bell Social Networks
"LManager" = Launch Manager
"Mozilla Firefox 11.0 (x86 es-ES)" = Mozilla Firefox 11.0 (x86 es-ES)
"Office14.SingleImage" = Microsoft Office Professional 2010
"Packard Bell Registration" = Packard Bell Registration
"Packard Bell Screensaver" = Packard Bell ScreenSaver
"Packard Bell Welcome Center" = Welcome Center
"Pdf995" = Pdf995
"Spotify" = Spotify
"Switch" = Switch, convertidor de audio
"Update Engine" = Sony Ericsson Update Engine
"VLC media player" = VLC media player 1.1.11
"WildTangent packardbell Master Uninstall" = Packard Bell Games
"WinLiveSuite" = Windows Live Essentials
"WinRAR archiver" = WinRAR 4.01 (32-bit)
"WT088216" = Agatha Christie - Death on the Nile
"WT088226" = Bejeweled 2 Deluxe
"WT088228" = Build-a-lot 2
"WT088235" = Chuzzle Deluxe
"WT088238" = Diner Dash 2 Restaurant Rescue
"WT088260" = Farm Frenzy
"WT088268" = Insaniquarium Deluxe
"WT088269" = Jewel Quest Solitaire 2
"WT088283" = Plants vs. Zombies
"WT088416" = FATE
"WT088420" = Final Drive Nitro
"WT088448" = John Deere Drive Green
"WT088452" = Penguins!
"WT088456" = Polar Bowler
"WT088460" = Polar Golfer
"WT088508" = Virtual Villagers 4 - The Tree of Life
"WT088531" = Zuma's Revenge

========== HKEY_CURRENT_USER Uninstall List ==========

[HKEY_CURRENT_USERSOFTWAREMicrosoftWindowsCurrentVersionUninstall]
"Spotify" = Spotify

========== Last 10 Event Log Errors ==========

[ Application Events ]
Error - 15/03/2012 10:56:53 | Computer Name = Patricia-PC | Source = Application Error | ID = 1000
Description = Nombre de la aplicación con errores: iexplore.exe, versión: 9.0.8112.16421,
marca de tiempo: 0x4d76255d Nombre del módulo con errores: MSHTML.dll, versión:
9.0.8112.16441, marca de tiempo: 0x4ee81830 Código de excepción: 0xc0000005 Desplazamiento
de errores: 0x002bc833 Id. del proceso con errores: 0x18a8 Hora de inicio de la aplicación
con errores: 0x01cd02bbd95a4ca9 Ruta de acceso de la aplicación con errores: C:Program
Files (x86)Internet Exploreriexplore.exe Ruta de acceso del módulo con errores:
C:Windowssystem32MSHTML.dll Id. del informe: 19d35820-6eaf-11e1-880e-1c7508fa280c

Error - 19/03/2012 7:32:23 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:Program Files
(x86)Common FilesAdobe AIRVersions1.0Adobe AIR.dll". Error en el archivo de
manifiesto o directiva "c:Program Files (x86)Common FilesAdobe AIRVersions1.0Adobe
AIR.dll" en la línea 3. El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
del atributo "version" del elemento "assemblyIdentity" no es válido.

Error - 20/03/2012 6:01:48 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:Program Files
(x86)Common FilesAdobe AIRVersions1.0Adobe AIR.dll". Error en el archivo de
manifiesto o directiva "c:Program Files (x86)Common FilesAdobe AIRVersions1.0Adobe
AIR.dll" en la línea 3. El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
del atributo "version" del elemento "assemblyIdentity" no es válido.

Error - 20/03/2012 6:05:27 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:program files
(x86)spybot - search & destroyDelZip179.dll". Error en el archivo de manifiesto
o directiva "c:program files (x86)spybot - search & destroyDelZip179.dll" en
la línea 8. El valor "*" del atributo "language" del elemento "assemblyIdentity"
no es válido.

Error - 21/03/2012 6:40:41 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:Program Files
(x86)Common FilesAdobe AIRVersions1.0Adobe AIR.dll". Error en el archivo de
manifiesto o directiva "c:Program Files (x86)Common FilesAdobe AIRVersions1.0Adobe
AIR.dll" en la línea 3. El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
del atributo "version" del elemento "assemblyIdentity" no es válido.

Error - 26/03/2012 16:16:42 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:Program Files
(x86)Common FilesAdobe AIRVersions1.0Adobe AIR.dll". Error en el archivo de
manifiesto o directiva "c:Program Files (x86)Common FilesAdobe AIRVersions1.0Adobe
AIR.dll" en la línea 3. El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
del atributo "version" del elemento "assemblyIdentity" no es válido.

Error - 26/03/2012 16:20:32 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:program files
(x86)spybot - search & destroyDelZip179.dll". Error en el archivo de manifiesto
o directiva "c:program files (x86)spybot - search & destroyDelZip179.dll" en
la línea 8. El valor "*" del atributo "language" del elemento "assemblyIdentity"
no es válido.

Error - 28/03/2012 5:10:16 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:Program Files
(x86)Common FilesAdobe AIRVersions1.0Adobe AIR.dll". Error en el archivo de
manifiesto o directiva "c:Program Files (x86)Common FilesAdobe AIRVersions1.0Adobe
AIR.dll" en la línea 3. El valor "MAJOR_VERSION.MINOR_VERSION.BUILD_NUMBER_MAJOR.BUILD_NUMBER_MINOR"
del atributo "version" del elemento "assemblyIdentity" no es válido.

Error - 28/03/2012 5:13:57 | Computer Name = Patricia-PC | Source = SideBySide | ID = 16842815
Description = Error al generar el contexto de activación para "c:program files
(x86)spybot - search & destroyDelZip179.dll". Error en el archivo de manifiesto
o directiva "c:program files (x86)spybot - search & destroyDelZip179.dll" en
la línea 8. El valor "*" del atributo "language" del elemento "assemblyIdentity"
no es válido.

Error - 30/03/2012 11:01:42 | Computer Name = Patricia-PC | Source = Application Hang | ID = 1002
Description = El programa iexplore.exe, versión 9.0.8112.16421, dejó de interactuar
con Windows y se cerró. Para ver si hay más información disponible acerca del problema,
compruebe el historial de problemas en el panel de control Centro de actividades.

Identificador
de proceso: 1540 Hora de inicio: 01cd0e4fe907549d Hora de finalización: 44 Ruta de
acceso de la aplicación: C:Program Files (x86)Internet Exploreriexplore.exe Identificador
de informe:

[ System Events ]
Error - 02/12/2011 7:15:29 | Computer Name = Patricia-PC | Source = EventLog | ID = 6008
Description = El cierre anterior del sistema a las 12:13:43 del ?02/?12/?2011 resultó
inesperado.


< End of report >

Hi,

Please download aswMBR.exe and save it to your desktop.

• Double click aswMBR.exe to start the tool. (Vista/Windows 7 users - right click to run as administrator)
• Allow it to update where necessary
• Click Scan
  
  
• Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
• You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

===================================================

Please download TDSSKiller.zip and and extract it.

• Run TDSSKiller.exe.
• Click on Change Parameters
• Put a check in the box of Detect TDLFS file system
• Click Start scan.
• When it is finished the utility outputs a list of detected objects with description.
  The utility automatically selects an action (Cure or Delete) for malicious objects.
  The utility prompts the user to select an action to apply to suspicious objects (Skip, by default). Let the options as it is and click Continue
• Let reboot if needed and tell me if the tool needed a reboot.
• Click on Report and post the contents of the text file that will open.
  
  Note: By default, the utility outputs the log into system disk (it is usually the disk with installed operating system, C:\) root folder. The Log have a name like: TDSSKiller.Version_Date_Time_log.txt.

===================================================

On your next reply please post :
aswMBR log
TDSS Killer log


Please STOP and let me know if you have any problems in performing with the steps above or any questions you may have.

Good Day!

Here is the report!! ComboFix 12-04-12.01 - Patricia 12/04/2012 16:09:21.1.8 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.34.3082.18.3948.2110 [GMT 2:00] Running from: c:\users\[removed]\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {2B2D1395-420B-D5C9-657E-930FE358FC3C} AV: Emsisoft Anti-Malware *Disabled/Updated* {0ADC9F7D-20C1-240F-01E2-43466EBA893A} SP: avast! Antivirus *Disabled/Updated* {904CF271-6431-DA47-5FCE-A87D98DFB681} SP: Emsisoft Anti-Malware *Disabled/Updated* {B1BD7E99-06FB-2B81-3B52-7834153DC387} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} . . ((((((((((((((((((((((((( Files Created from 2012-03-12 to 2012-04-12 ))))))))))))))))))))))))))))))) . . 2012-04-12 14:16 . 2012-04-12 14:16 ——– d—–w- c:\users\UpdatusUser\AppData\Local\temp 2012-04-12 14:16 . 2012-04-12 14:16 ——– d—–w- c:\users\Invitado\AppData\Local\temp 2012-04-12 14:16 . 2012-04-12 14:16 ——– d—–w- c:\users\Default\AppData\Local\temp 2012-04-12 09:55 . 2012-04-12 09:55 69000 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{43422B1B-DA2A-4767-8779-683A2354DD6C}\offreg.dll 2012-04-10 11:04 . 2012-03-14 03:27 8669240 —-a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{43422B1B-DA2A-4767-8779-683A2354DD6C}\mpengine.dll 2012-04-09 14:46 . 2012-04-09 14:46 ——– d—–w- c:\users\Patricia\AppData\Roaming\VS Revo Group 2012-04-09 14:10 . 2012-04-09 14:10 ——– d—–w- c:\users\Patricia\AppData\Local\VS Revo Group 2012-04-09 14:10 . 2009-12-30 08:21 31800 —-a-w- c:\windows\system32\drivers\revoflt.sys 2012-04-09 14:10 . 2012-04-09 14:10 ——– d—–w- c:\program files\VS Revo Group 2012-04-08 10:04 . 2010-07-16 12:53 816016 —-a-w- c:\windows\system32\drivers\pctEFA64.sys 2012-04-08 10:04 . 2010-06-29 08:35 452872 —-a-w- c:\windows\system32\drivers\pctDS64.sys 2012-04-08 10:04 . 2010-11-17 08:20 331368 —-a-w- c:\windows\system32\drivers\pctgntdi64.sys 2012-04-08 10:04 . 2010-11-17 08:20 136168 —-a-w- c:\windows\system32\drivers\pctwfpfilter64.sys 2012-04-08 10:03 . 2010-11-25 08:43 257232 —-a-w- c:\windows\system32\drivers\PCTCore64.sys 2012-04-08 10:03 . 2010-11-25 08:42 92896 —-a-w- c:\windows\system32\drivers\pctplsg64.sys 2012-04-08 10:02 . 2012-04-09 13:45 ——– d—–w- c:\program files (x86)\Common Files\PC Tools 2012-04-08 09:31 . 2012-04-08 09:31 ——– d—–w- c:\users\Patricia\AppData\Roaming\ParetoLogic 2012-04-08 09:31 . 2012-04-08 09:31 ——– d—–w- c:\users\Patricia\AppData\Roaming\DriverCure 2012-04-08 09:30 . 2012-04-08 09:45 ——– d—–w- c:\programdata\ParetoLogic 2012-04-07 17:27 . 2012-04-07 17:27 ——– d—–w- c:\programdata\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46} 2012-04-05 09:58 . 2011-06-21 04:09 200976 —-a-w- c:\windows\SysWow64\drivers\tmcomm.sys 2012-04-03 14:02 . 2012-04-03 14:02 50 —-a-w- C:\user.js 2012-04-01 13:44 . 2012-04-01 13:44 ——– d—–w- c:\program files\CCleaner 2012-03-30 16:55 . 2012-03-30 16:55 ——– d—–w- c:\programdata\DivX 2012-03-30 16:50 . 2012-04-03 14:12 ——– d—–w- c:\programdata\InstallMate 2012-03-30 16:50 . 2012-03-30 16:50 ——– d—–w- c:\programdata\Premium 2012-03-30 09:11 . 2012-03-30 09:11 8738464 —-a-w- c:\windows\SysWow64\FlashPlayerInstaller.exe 2012-03-30 08:34 . 2012-03-30 09:11 418464 —-a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2012-03-15 11:40 . 2011-11-19 15:20 5559152 —-a-w- c:\windows\system32\ntoskrnl.exe 2012-03-15 11:40 . 2011-11-19 14:50 3968368 —-a-w- c:\windows\SysWow64\ntkrnlpa.exe 2012-03-15 11:40 . 2011-11-19 14:50 3913584 —-a-w- c:\windows\SysWow64\ntoskrnl.exe 2012-03-14 10:39 . 2012-02-03 04:34 3145728 —-a-w- c:\windows\system32\win32k.sys 2012-03-14 10:39 . 2012-02-10 06:36 1544192 —-a-w- c:\windows\system32\DWrite.dll 2012-03-14 10:39 . 2012-02-10 05:38 1077248 —-a-w- c:\windows\SysWow64\DWrite.dll 2012-03-14 10:37 . 2012-02-17 06:38 1031680 —-a-w- c:\windows\system32\rdpcore.dll 2012-03-14 10:37 . 2012-02-17 05:34 826880 —-a-w- c:\windows\SysWow64\rdpcore.dll 2012-03-14 10:37 . 2012-02-17 04:58 210944 —-a-w- c:\windows\system32\drivers\rdpwd.sys 2012-03-14 10:37 . 2012-02-17 04:57 23552 —-a-w- c:\windows\system32\drivers\tdtcp.sys 2012-03-14 10:37 . 2012-01-25 06:38 149504 —-a-w- c:\windows\system32\rdpcorekmts.dll 2012-03-14 10:37 . 2012-01-25 06:33 9216 —-a-w- c:\windows\system32\rdrmemptylst.exe 2012-03-14 10:37 . 2012-01-25 06:38 77312 —-a-w- c:\windows\system32\rdpwsx.dll . . . (((((((((((((((((((((((((((((((((((((((( Find3M Report )))))))))))))))))))))))))))))))))))))))))))))))))))) . 2012-03-30 09:11 . 2011-08-22 18:37 70304 —-a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2012-03-07 00:15 . 2011-09-23 17:33 41184 —-a-w- c:\windows\avastSS.scr 2012-03-07 00:15 . 2011-09-23 17:33 201352 —-a-w- c:\windows\SysWow64\aswBoot.exe 2012-03-07 00:15 . 2011-09-23 17:34 258520 —-a-w- c:\windows\system32\aswBoot.exe 2012-03-07 00:04 . 2011-09-23 17:34 819032 —-a-w- c:\windows\system32\drivers\aswSnx.sys 2012-03-07 00:04 . 2011-09-23 17:34 337240 —-a-w- c:\windows\system32\drivers\aswSP.sys 2012-03-07 00:02 . 2012-02-26 11:46 28504 —-a-w- c:\windows\system32\drivers\aswKbd.sys 2012-03-07 00:02 . 2012-02-26 11:46 53080 —-a-w- c:\windows\system32\drivers\aswRdr2.sys 2012-03-07 00:01 . 2011-09-23 17:34 59224 —-a-w- c:\windows\system32\drivers\aswTdi.sys 2012-03-07 00:01 . 2011-09-23 17:34 69976 —-a-w- c:\windows\system32\drivers\aswMonFlt.sys 2012-03-07 00:01 . 2011-09-23 17:34 24408 —-a-w- c:\windows\system32\drivers\aswFsBlk.sys 2012-02-23 07:18 . 2011-09-25 20:31 279656 ——w- c:\windows\system32\MpSigStub.exe . . ((((((((((((((((((((((((((((((((((((( Reg Loading Points )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Note* empty entries & legit default entries are not shown REGEDIT4 . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "SpybotSD TeaTimer"="c:\program files (x86)\Spybot - Search & Destroy\TeaTimer.exe" [2009-01-26 2144088] "Sidebar"="c:\program files\Windows Sidebar\sidebar.exe" [2010-11-20 1475584] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "IAStorIcon"="c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe" [2010-09-14 283160] "BackupManagerTray"="c:\program files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe" [2012-01-05 295448] "Adobe Reader Speed Launcher"="c:\program files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe" [2012-03-27 37296] "NUSB3MON"="c:\program files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe" [2010-04-27 113288] "LManager"="c:\program files (x86)\Launch Manager\LManager.exe" [2010-12-09 1025616] "avast"="c:\program files\AVAST Software\Avast\avastUI.exe" [2012-03-07 4241512] "Adobe ARM"="c:\program files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe" [2012-01-03 843712] "SunJavaUpdateSched"="c:\program files (x86)\Common Files\Java\Java Update\jusched.exe" [2011-06-09 254696] "emsisoft anti-malware"="c:\program files (x86)\emsisoft anti-malware\a2guard.exe" [2012-02-01 3357584] . c:\users\Patricia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\ Recorte de pantalla y Selector de OneNote 2010.lnk - c:\program files (x86)\Microsoft Office\Office14\ONENOTEM.EXE [2010-12-21 227712] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "AppInit_DLLs"=c:\windows\SysWOW64\nvinit.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\drivers32] "aux"=wdmaud.drv . [HKEY_LOCAL_MACHINE\system\currentcontrolset\control\lsa] Security Packages REG_MULTI_SZ kerberos msv1_0 schannel wdigest tspkg pku2u livessp . R2 clr_optimization_v4.0.30319_32;Microsoft .NET Framework NGEN v4.0.30319_X86;c:\windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe [2010-03-18 130384] R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [2010-03-18 138576] R2 gupdate;Servicio de Google Update (gupdate);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-03 136176] R3 AdobeFlashPlayerUpdateSvc;Adobe Flash Player Update Service;c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 253600] R3 BBSvc;Bing Bar Update Service;c:\program files (x86)\Microsoft\BingBar\BBSvc.EXE [2011-04-01 183560] R3 clwvd;CyberLink WebCam Virtual Driver;c:\windows\system32\DRIVERS\clwvd.sys [x] R3 GamesAppService;GamesAppService;c:\program files (x86)\WildTangent Games\App\GamesAppService.exe [2010-10-12 206072] R3 ggflt;SEMC USB Flash Driver Filter;c:\windows\system32\DRIVERS\ggflt.sys [x] R3 gupdatem;Servicio de Google Update (gupdatem);c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-03 136176] R3 Revoflt;Revoflt;c:\windows\system32\DRIVERS\revoflt.sys [x] R3 Sony Ericsson PCCompanion;Sony Ericsson PCCompanion;c:\program files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe [2011-06-29 155344] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [x] R3 TurboBoost;Intel® Turbo Boost Technology Monitor 2.0;c:\program files\Intel\TurboBoost\TurboBoost.exe [2010-10-08 150016] R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [x] R4 wlcrasvc;Windows Live Mesh remote connections service;c:\program files\Windows Live\Mesh\wlcrasvc.exe [2010-09-22 57184] S0 nvpciflt;nvpciflt;c:\windows\system32\DRIVERS\nvpciflt.sys [x] S0 PCTCore;PCTools KDS;c:\windows\system32\drivers\PCTCore64.sys [x] S0 pctDS;PC Tools Data Store;c:\windows\system32\drivers\pctDS64.sys [x] S0 pctEFA;PC Tools Extended File Attributes;c:\windows\system32\drivers\pctEFA64.sys [x] S0 PxHlpa64;PxHlpa64;c:\windows\System32\Drivers\PxHlpa64.sys [x] S1 A2DDA;A2 Direct Disk Access Support Driver;c:\program files (x86)\Emsisoft Anti-Malware\a2ddax64.sys [2011-05-19 23208] S1 a2injectiondriver;a2injectiondriver;c:\program files (x86)\Emsisoft Anti-Malware\a2dix64.sys [2011-11-02 41728] S1 a2util;a-squared Malware-IDS utility driver;c:\program files (x86)\Emsisoft Anti-Malware\a2util64.sys [2010-05-05 14720] S1 aswKbd;aswKbd; [x] S1 aswSnx;aswSnx; [x] S1 aswSP;aswSP; [x] S1 vwififlt;Virtual WiFi Filter Driver;c:\windows\system32\DRIVERS\vwififlt.sys [x] S2 a2AntiMalware;Emsisoft Anti-Malware 6.0 - Service;c:\program files (x86)\Emsisoft Anti-Malware\a2service.exe [2012-01-22 3025112] S2 AdobeActiveFileMonitor8.0;Adobe Active File Monitor V8;c:\program files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe [2009-10-09 169312] S2 aswFsBlk;aswFsBlk; [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [x] S2 DsiWMIService;Dritek WMI Service;c:\program files (x86)\Launch Manager\dsiwmis.exe [2010-12-09 311376] S2 ePowerSvc;Acer ePower Service;c:\program files\Packard Bell\Packard Bell Power Management\ePowerSvc.exe [2010-12-10 868224] S2 GREGService;GREGService;c:\program files (x86)\Packard Bell\Registration\GREGsvc.exe [2010-01-08 23584] S2 IAStorDataMgrSvc;Intel® Rapid Storage Technology;c:\program files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe [2010-09-14 13336] S2 NTI IScheduleSvc;NTI IScheduleSvc;c:\program files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe [2012-01-05 256536] S2 nvUpdatusService;NVIDIA Update Service Daemon;c:\program files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe [2010-12-12 1997416] S2 SBSDWSCService;SBSD Security Center Service;c:\program files (x86)\Spybot - Search & Destroy\SDWinSec.exe [2009-01-26 1153368] S2 TurboB;Turbo Boost UI Monitor driver;c:\windows\system32\DRIVERS\TurboB.sys [x] S2 UNS;Intel® Management and Security Application User Notification Service;c:\program files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe [2010-12-22 2656280] S2 Updater Service;Updater Service;c:\program files\Packard Bell\Packard Bell Updater\UpdaterService.exe [2010-01-29 243232] S3 a2acc;a2acc;c:\program files (x86)\EMSISOFT ANTI-MALWARE\a2accx64.sys [2011-11-02 63880] S3 b57xdbd;Broadcom xD Picture Bus Driver Service;c:\windows\system32\DRIVERS\b57xdbd.sys [x] S3 b57xdmp;Broadcom xD Picture vstorp client drv;c:\windows\system32\DRIVERS\b57xdmp.sys [x] S3 bScsiMSa;bScsiMSa;c:\windows\system32\DRIVERS\bScsiMSa.sys [x] S3 bScsiSDa;bScsiSDa;c:\windows\system32\DRIVERS\bScsiSDa.sys [x] S3 ETD;ELAN PS/2 Port Input Device;c:\windows\system32\DRIVERS\ETD.sys [x] S3 IntcDAud;Sonido Intel® para pantallas;c:\windows\system32\DRIVERS\IntcDAud.sys [x] S3 k57nd60a;Broadcom NetLink ™ Gigabit Ethernet - NDIS 6.0;c:\windows\system32\DRIVERS\k57nd60a.sys [x] S3 MEIx64;Intel® Management Engine Interface;c:\windows\system32\DRIVERS\HECIx64.sys [x] S3 nusb3hub;Renesas Electronics USB 3.0 Hub Driver;c:\windows\system32\DRIVERS\nusb3hub.sys [x] S3 nusb3xhc;Renesas Electronics USB 3.0 Host Controller Driver;c:\windows\system32\DRIVERS\nusb3xhc.sys [x] S3 osppsvc;Office Software Protection Platform;c:\program files\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE [2010-01-09 4925184] . . Contents of the 'Scheduled Tasks' folder . 2012-04-12 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2012-03-30 09:11] . 2012-03-27 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001Core.job - c:\users\Patricia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-12-05 21:52] . 2012-04-12 c:\windows\Tasks\FacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001UA.job - c:\users\Patricia\AppData\Local\Facebook\Update\FacebookUpdate.exe [2011-12-05 21:52] . 2012-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-03 12:35] . 2012-04-12 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job - c:\program files (x86)\Google\Update\GoogleUpdate.exe [2011-10-03 12:35] . . ——— x86-64 ———– . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2012-03-07 00:15 135408 —-a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "RtHDVCpl"="c:\program files\Realtek\Audio\HDA\RAVCpl64.exe" [2010-12-23 11725928] "Acer ePower Management"="c:\program files\Packard Bell\Packard Bell Power Management\ePowerTray.exe" [2010-12-10 860040] "IgfxTray"="c:\windows\system32\igfxtray.exe" [2010-12-30 167960] "HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2010-12-30 391704] "Persistence"="c:\windows\system32\igfxpers.exe" [2010-12-30 418328] "IntelTBRunOnce"="wscript.exe" [2009-07-14 168960] . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Windows] "LoadAppInit_DLLs"=0x1 "AppInit_DLLs"=c:\windows\System32\nvinitx.dll . ——- Supplementary Scan ——- . uStart Page = hxxp://www.yahoo.es/ uLocal Page = c:\windows\system32\blank.htm mStart Page = hxxp://packardbell.msn.com mLocal Page = c:\windows\SysWOW64\blank.htm IE: &Enviar a OneNote - c:\progra~2\MICROS~3\Office14\ONBttnIE.dll/105 IE: E&xportar a Microsoft Excel - c:\progra~2\MICROS~3\Office14\EXCEL.EXE/3000 LSP: c:\program files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll TCP: DhcpNameServer = 192.168.1.1 FF - ProfilePath - c:\users\Patricia\AppData\Roaming\Mozilla\Firefox\Profiles\82mg0io0.default\ . - - - - ORPHANS REMOVED - - - - . Toolbar-Locked - (no file) Toolbar-Locked - (no file) Toolbar-10 - (no file) HKLM-Run-ETDCtrl - c:\program files (x86)\Elantech\ETDCtrl.exe AddRemove-{09FF4DB8-7DE9-4D47-B7DB-915DB7D9A8CA} - c:\programdata\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}\bm_installer.exe . . . ——————— LOCKED REGISTRY KEYS ——————— . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}] @Denied: (A 2) (Everyone) @="FlashBroker" "LocalizedString"="@c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_228_ActiveX.exe,-101" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\Elevation] "Enabled"=dword:00000001 . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\LocalServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\FlashUtil32_11_2_202_228_ActiveX.exe" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{A483C63A-CDBC-426E-BF93-872502E8144E}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Shockwave Flash Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\MiscStatus] @="0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ProgID] @="ShockwaveFlash.ShockwaveFlash.11" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB6E-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="ShockwaveFlash.ShockwaveFlash" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}] @Denied: (A 2) (Everyone) @="Macromedia Flash Factory Object" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\InprocServer32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx" "ThreadingModel"="Apartment" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ProgID] @="FlashFactory.FlashFactory.1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\ToolboxBitmap32] @="c:\\Windows\\SysWOW64\\Macromed\\Flash\\Flash32_11_2_202_228.ocx, 1" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\TypeLib] @="{D27CDB6B-AE6D-11cf-96B8-444553540000}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\Version] @="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{D27CDB70-AE6D-11cf-96B8-444553540000}\VersionIndependentProgID] @="FlashFactory.FlashFactory" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}] @Denied: (A 2) (Everyone) @="IFlashBroker4" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\ProxyStubClsid32] @="{00020424-0000-0000-C000-000000000046}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{E3F2C3CB-5EB8-4A04-B22C-7E3B4B6AF30F}\TypeLib] @="{FAB3E735-69C7-453B-A446-B6823C6DF1C9}" "Version"="1.0" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Office\Common\Smart Tag\Actions\{B7EFF951-E52F-45CC-9EF7-57124F2177CC}] @Denied: (A) (Everyone) "Solution"="{15727DE6-F92D-4E46-ACB4-0E2C58B31A18}" . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3] @Denied: (A) (Everyone) . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Schema Library\ActionsPane3\0] "Key"="ActionsPane3" "Location"="c:\\Program Files (x86)\\Common Files\\Microsoft Shared\\VSTO\\ActionsPane3.xsd" . [HKEY_LOCAL_MACHINE\SYSTEM\ControlSet002\Control\PCW\Security] @Denied: (Full) (Everyone) . Completion time: 2012-04-12 16:19:23 ComboFix-quarantined-files.txt 2012-04-12 14:19 . Pre-Run: 605.552.033.792 bytes libres Post-Run: 605.434.658.816 bytes libres . - - End Of File - - 067022967224B45AB1D613F8A7C39E33

Impossible to delete it!!! Don't know why :S I tried it several times and it remains the same. I copy here both reports. In the first one it is said that it was worked, but in the second one the dayam !SearchquDSFF appears again!!

Fix


All processes killed
========== OTL ==========
Registry value HKEY_CURRENT_USER\Software\Microsoft\Windows\CurrentVersion\RunOnce\\!SearchquDSFF deleted successfully.
========== COMMANDS ==========

[EMPTYFLASH]

User: All Users

User: Default

User: Default User

User: Invitado
->Flash cache emptied: 0 bytes

User: Patricia
->Flash cache emptied: 945 bytes

User: Public

User: UpdatusUser

Total Flash Files Cleaned = 0,00 mb


[EMPTYTEMP]

User: All Users

User: Default
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Default User
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

User: Invitado
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Patricia
->Temp folder emptied: 1055354 bytes
->Temporary Internet Files folder emptied: 45693913 bytes
->Java cache emptied: 0 bytes
->FireFox cache emptied: 0 bytes
->Google Chrome cache emptied: 0 bytes
->Flash cache emptied: 0 bytes

User: Public
->Temp folder emptied: 0 bytes

User: UpdatusUser
->Temp folder emptied: 0 bytes
->Temporary Internet Files folder emptied: 0 bytes

%systemdrive% .tmp files removed: 0 bytes
%systemroot% .tmp files removed: 0 bytes
%systemroot%\System32 .tmp files removed: 0 bytes
%systemroot%\System32 (64bit) .tmp files removed: 0 bytes
%systemroot%\System32\drivers .tmp files removed: 0 bytes
Windows Temp folder emptied: 3171467 bytes
%systemroot%\sysnative\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files folder emptied: 49554 bytes
RecycleBin emptied: 0 bytes

Total Files Cleaned = 48,00 mb

C:\Windows\System32\drivers\etc\Hosts moved successfully.
HOSTS file reset successfully
Restore point Set: OTL Restore Point

OTL by OldTimer - Version 3.2.39.2 log created on 04132012_152056

Files\Folders moved on Reboot…
C:\Users\Patricia\AppData\Local\Temp\FXSAPIDebugLogFile.txt moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\XZJX7KXE\iframe[1].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QC9M8LUB\index[3].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QC9M8LUB\mail[2].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\QC9M8LUB\mail[5].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\2REM035M\bind[1].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\2REM035M\bind[3].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\2REM035M\Blank[1].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\Content.IE5\2REM035M\translate_google_com[1].htm moved successfully.
C:\Users\Patricia\AppData\Local\Microsoft\Windows\Temporary Internet Files\Low\MSIMGSIZ.DAT moved successfully.
File move failed. C:\Windows\temp\_avast_\Webshlock.txt scheduled to be moved on reboot.
File move failed. C:\Windows\temp\dsiwmis.log scheduled to be moved on reboot.

Registry entries deleted on Reboot…

Scan

OTL logfile created on: 13/04/2012 16:23:19 - Run 5
OTL by OldTimer - Version 3.2.39.2 Folder = C:\Users\Patricia\Desktop
64bit- Home Premium Edition Service Pack 1 (Version = 6.1.7601) - Type = NTWorkstation
Internet Explorer (Version = 9.0.8112.16421)
Locale: 00000c0a | Country: España | Language: ESN | Date Format: dd/MM/yyyy

3,86 Gb Total Physical Memory | 1,93 Gb Available Physical Memory | 50,11% Memory free
7,71 Gb Paging File | 5,45 Gb Available in Paging File | 70,67% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 683,04 Gb Total Space | 576,74 Gb Free Space | 84,44% Space Free | Partition Type: NTFS

Computer Name: PATRICIA-PC | User Name: Patricia | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - C:\Users\Patricia\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_11_2_202_228_ActiveX.exe (Adobe Systems Incorporated)
PRC - C:\Archivos de programa\AVAST Software\Avast\AvastUI.exe (AVAST Software)
PRC - C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
PRC - C:\Program Files (x86)\Emsisoft Anti-Malware\a2guard.exe (Emsi Software GmbH)
PRC - C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsi Software GmbH)
PRC - C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe (NTI Corporation)
PRC - C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe (NTI Corporation)
PRC - C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Launch Manager\LMworker.exe (Dritek System Inc.)
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
PRC - C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
PRC - C:\Archivos de programa\Packard Bell\Packard Bell Updater\UpdaterService.exe (Acer Group)
PRC - C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe (Acer Incorporated)
PRC - c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
PRC - C:\Program Files (x86)\Spybot - Search & Destroy\SDWinSec.exe (Safer Networking Ltd.)


========== Modules (No Company Name) ==========

MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorUtil\39cf4f0f0e6adca3403df6c641a73e15\IAStorUtil.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Windows.Forms\262285b3d0afafc5059f3fe9be69bff5\System.Windows.Forms.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Drawing\8177623eac8f15cf95b587625439eac7\System.Drawing.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Runtime.Remo#\a1c4a635721f85bef0ea4194b888b871\System.Runtime.Remoting.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\WindowsBase\47b9e7f070271ff50f988f75ea68fa3e\WindowsBase.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Xml\9866d1f6178e1cde25642f1ac293ff8d\System.Xml.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System.Configuration\e620323cacb5b6bfd93fd28d263440e4\System.Configuration.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\System\faf4e8730ecbd07570111bb7c3b20565\System.ni.dll ()
MOD - C:\Program Files (x86)\NTI\Packard Bell MyBackup\sqlite3.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\IAStorCommon\ebfad289d9759034cd3a887802fadb5b\IAStorCommon.ni.dll ()
MOD - C:\Windows\assembly\NativeImages_v2.0.50727_32\mscorlib\a1a82db68b3badc7c27ea1f6579d22c5\mscorlib.ni.dll ()
MOD - C:\Windows\assembly\GAC_MSIL\System.Runtime.Remoting.resources\2.0.0.0_es_b77a5c561934e089\System.Runtime.Remoting.resources.dll ()
MOD - C:\Program Files (x86)\Common Files\microsoft shared\OFFICE14\Cultures\OFFICE.ODF ()
MOD - C:\Windows\assembly\GAC_MSIL\mscorlib.resources\2.0.0.0_es_b77a5c561934e089\mscorlib.resources.dll ()


========== Win32 Services (SafeList) ==========

SRV:64bit: - (avast! Firewall) – C:\Program Files\AVAST Software\Avast\afwServ.exe File not found
SRV - (AdobeFlashPlayerUpdateSvc) – C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) – C:\Archivos de programa\AVAST Software\Avast\AvastSvc.exe (AVAST Software)
SRV - (a2AntiMalware) – C:\Program Files (x86)\Emsisoft Anti-Malware\a2service.exe (Emsi Software GmbH)
SRV - (NTI IScheduleSvc) – C:\Program Files (x86)\NTI\Packard Bell MyBackup\IScheduleSvc.exe (NTI Corporation)
SRV - (Sony Ericsson PCCompanion) – C:\Program Files (x86)\Sony Ericsson\Sony Ericsson PC Companion\PCCService.exe (Avanquest Software)
SRV - (FLEXnet Licensing Service) – C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe (Acresso Software Inc.)
SRV - (BBSvc) – C:\Program Files (x86)\Microsoft\BingBar\BBSvc.EXE (Microsoft Corporation.)
SRV - (wlidsvc) – C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Microsoft Corp.)
SRV - (SeaPort) – C:\Program Files (x86)\Microsoft\BingBar\SeaPort.EXE (Microsoft Corporation)
SRV - (UNS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\UNS\UNS.exe (Intel Corporation)
SRV - (LMS) Intel® – C:\Program Files (x86)\Intel\Intel® Management Engine Components\LMS\LMS.exe (Intel Corporation)
SRV - (nvUpdatusService) – C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Updatus\daemonu.exe (NVIDIA Corporation)
SRV - (ePowerSvc) – C:\Archivos de programa\Packard Bell\Packard Bell Power Management\ePowerSvc.exe (Acer Incorporated)
SRV - (DsiWMIService) – C:\Program Files (x86)\Launch Manager\dsiwmis.exe (Dritek System Inc.)
SRV - (GamesAppService) – C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe (WildTangent, Inc.)
SRV - (TurboBoost) Intel® – C:\Archivos de programa\Intel\TurboBoost\TurboBoost.exe (Intel® Corporation)
SRV - (wlcrasvc) – C:\Archivos de programa\Windows Live\Mesh\wlcrasvc.exe (Microsoft Corporation)
SRV - (IAStorDataMgrSvc) Intel® – C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorDataMgrSvc.exe (Intel Corporation)
SRV - (clr_optimization_v4.0.30319_32) – C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe (Microsoft Corporation)
SRV - (Updater Service) – C:\Archivos de programa\Packard Bell\Packard Bell Updater\UpdaterService.exe (Acer Group)
SRV - (Nero BackItUp Scheduler 4.0) – C:\Program Files (x86)\Common Files\Nero\Nero BackItUp 4\NBService.exe (Nero AG)
SRV - (osppsvc) – C:\Archivos de programa\Common Files\Microsoft Shared\OfficeSoftwareProtectionPlatform\OSPPSVC.EXE (Microsoft Corporation)
SRV - (GREGService) – C:\Program Files (x86)\Packard Bell\Registration\GREGsvc.exe (Acer Incorporated)
SRV - (AdobeActiveFileMonitor8.0) – c:\Program Files (x86)\Adobe\Elements Organizer 8.0\PhotoshopElementsFileAgent.exe (Adobe Systems Incorporated)
SRV - (clr_optimization_v2.0.50727_32) – C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe (Microsoft Corporation)


========== Driver Services (SafeList) ==========

DRV:64bit: - (aswSnx) – C:\Windows\SysNative\drivers\aswSnx.sys (AVAST Software)
DRV:64bit: - (aswSP) – C:\Windows\SysNative\drivers\aswSP.sys (AVAST Software)
DRV:64bit: - (aswKbd) – C:\Windows\SysNative\drivers\aswKbd.sys (AVAST Software)
DRV:64bit: - (aswRdr) – C:\Windows\SysNative\drivers\aswRdr2.sys (AVAST Software)
DRV:64bit: - (aswTdi) – C:\Windows\SysNative\drivers\aswTdi.sys (AVAST Software)
DRV:64bit: - (aswMonFlt) – C:\Windows\SysNative\drivers\aswMonFlt.sys (AVAST Software)
DRV:64bit: - (aswFsBlk) – C:\Windows\SysNative\drivers\aswFsBlk.sys (AVAST Software)
DRV:64bit: - (Fs_Rec) – C:\Windows\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (ggsemc) – C:\Windows\SysNative\drivers\ggsemc.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (ggflt) – C:\Windows\SysNative\drivers\ggflt.sys (Sony Ericsson Mobile Communications)
DRV:64bit: - (fssfltr) – C:\Windows\SysNative\drivers\fssfltr.sys (Microsoft Corporation)
DRV:64bit: - (amdsata) – C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) – C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (igfx) – C:\Windows\SysNative\drivers\igdkmd64.sys (Intel Corporation)
DRV:64bit: - (bScsiMSa) – C:\Windows\SysNative\drivers\bScsiMSa.sys (Broadcom Corporation)
DRV:64bit: - (nvpciflt) – C:\Windows\SysNative\drivers\nvpciflt.sys (NVIDIA Corporation)
DRV:64bit: - (bScsiSDa) – C:\Windows\SysNative\drivers\bScsiSDa.sys (Broadcom Corporation)
DRV:64bit: - (b57xdmp) – C:\Windows\SysNative\drivers\b57xdmp.sys (Broadcom Corporation)
DRV:64bit: - (b57xdbd) – C:\Windows\SysNative\drivers\b57xdbd.sys (Broadcom Corporation)
DRV:64bit: - (k57nd60a) Broadcom NetLink ™ – C:\Windows\SysNative\drivers\k57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (PCTCore) – C:\Windows\SysNative\drivers\PCTCore64.sys (PC Tools)
DRV:64bit: - (HpSAMD) – C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (TsUsbFlt) – C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (usbser) – C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) – C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (ETD) – C:\Windows\SysNative\drivers\ETD.sys (ELAN Microelectronics Corp.)
DRV:64bit: - (athr) – C:\Windows\SysNative\drivers\athrx.sys (Atheros Communications, Inc.)
DRV:64bit: - (MEIx64) Intel® – C:\Windows\SysNative\drivers\HECIx64.sys (Intel Corporation)
DRV:64bit: - (IntcDAud) Sonido Intel® – C:\Windows\SysNative\drivers\IntcDAud.sys (Intel® Corporation)
DRV:64bit: - (TurboB) – C:\Windows\SysNative\drivers\TurboB.sys (Intel® Corporation)
DRV:64bit: - (nusb3xhc) – C:\Windows\SysNative\drivers\nusb3xhc.sys (Renesas Electronics Corporation)
DRV:64bit: - (nusb3hub) – C:\Windows\SysNative\drivers\nusb3hub.sys (Renesas Electronics Corporation)
DRV:64bit: - (iaStor) – C:\Windows\SysNative\drivers\iaStor.sys (Intel Corporation)
DRV:64bit: - (pctEFA) – C:\Windows\SysNative\drivers\pctEFA64.sys (PC Tools)
DRV:64bit: - (pctDS) – C:\Windows\SysNative\drivers\pctDS64.sys (PC Tools)
DRV:64bit: - (Revoflt) – C:\Windows\SysNative\drivers\revoflt.sys (VS Revo Group)
DRV:64bit: - (amdsbs) – C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (LSI_SAS2) – C:\Windows\SysNative\drivers\lsi_sas2.sys (LSI Corporation)
DRV:64bit: - (stexstor) – C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology)
DRV:64bit: - (ebdrv) – C:\Windows\SysNative\drivers\evbda.sys (Broadcom Corporation)
DRV:64bit: - (b06bdrv) – C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (b57nd60a) – C:\Windows\SysNative\drivers\b57nd60a.sys (Broadcom Corporation)
DRV:64bit: - (hcw85cir) – C:\Windows\SysNative\drivers\hcw85cir.sys (Hauppauge Computer Works, Inc.)
DRV:64bit: - (NTIDrvr) – C:\Windows\SysNative\drivers\NTIDrvr.sys (NewTech Infosystems, Inc.)
DRV:64bit: - (UBHelper) – C:\Windows\SysNative\drivers\UBHelper.sys (NewTech Infosystems Corporation)
DRV:64bit: - (PxHlpa64) – C:\Windows\SysNative\drivers\PxHlpa64.sys (Sonic Solutions)
DRV - (a2injectiondriver) – C:\Program Files (x86)\Emsisoft Anti-Malware\a2dix64.sys (Emsi Software GmbH)
DRV - (a2acc) – C:\Program Files (x86)\Emsisoft Anti-Malware\a2accx64.sys (Emsi Software GmbH)
DRV - (A2DDA) – C:\Program Files (x86)\Emsisoft Anti-Malware\a2ddax64.sys (Emsi Software GmbH)
DRV - (a2util) – C:\Program Files (x86)\Emsisoft Anti-Malware\a2util64.sys (Emsi Software GmbH)
DRV - (WIMMount) – C:\Windows\SysWOW64\drivers\wimmount.sys (Microsoft Corporation)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE:64bit: - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE:64bit: - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://packardbell.msn.com
IE - HKLM\..\SearchScopes,DefaultScope = {6A1806CD-94D4-4689-BA73-E35EA1EA9990}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}…rc=IE-SearchBox
IE - HKLM\..\SearchScopes\{6A1806CD-94D4-4689-BA73-E35EA1EA9990}: "URL" = http://www.google.com/search?q={searchTerm…mp;sourceid=ie7
IE - HKLM\..\SearchScopes\{9BB47C17-9C68-4BB3-B188-DD9AF0FD2406}: "URL" = http://dts.search-results.com/sr?src=ieb&a;…q={searchTerms}

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://www.yahoo.es/
IE - HKCU\..\URLSearchHook: {472734EA-242A-422b-ADF8-83D1E48CC825} - No CLSID value found
IE - HKCU\..\SearchScopes,DefaultScope = {E4BEADF6-17DD-4BC9-9793-B06BEE4E453B}
IE - HKCU\..\SearchScopes\{E4BEADF6-17DD-4BC9-9793-B06BEE4E453B}: "URL" = http://www.google.com/search?hl=en&q;={…1I7FDUM_esES477
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

========== FireFox ==========

FF - user.js - File not found

FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\system32\Macromed\Flash\NPSWF64_11_2_202_228.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~1\MICROS~2\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_11_2_202_228.dll ()
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin: C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll (Sun Microsystems, Inc.)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@Microsoft.com/NpCtrl,version=1.0: c:\Program Files (x86)\Microsoft Silverlight\4.1.10111.0\npctrl.dll ( Microsoft Corporation)FF - HKLM\Software\MozillaPlugins\@microsoft.com/OfficeAuthz,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3502.0922: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@microsoft.com/WLPG,version=15.4.3538.0513: C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll (Microsoft Corporation)
FF - HKLM\Software\MozillaPlugins\@playstation.com/PsndlCheck,version=1.00: C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll (Sony Computer Entertainment Inc.)
FF - HKLM\Software\MozillaPlugins\@SonyCreativeSoftware.com/Media Go,version=1.0: C:\Program Files (x86)\Sony\Media Go\npmediago.dll (Sony Network Entertainment International LLC)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@WildTangent.com/GamesAppPresenceDetector,Version=1.0: C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll ()
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Reader 9.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\@Skype Limited.com/Facebook Video Calling Plugin: C:\Users\Patricia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll (Skype Limited)

FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\[removed]: C:\Program Files\AVAST Software\Avast\WebRep\FF [2012/03/10 20:04:59 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components [2012/04/05 11:54:06 | 000,000,000 | —D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 11.0\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins

[2012/04/05 11:55:22 | 000,000,000 | —D | M] (No name found) – C:\Users\Patricia\AppData\Roaming\mozilla\Extensions
[2012/04/05 11:54:06 | 000,000,000 | —D | M] (No name found) – C:\Program Files (x86)\Mozilla Firefox\extensions
[2012/03/13 06:38:06 | 000,097,208 | —- | M] (Mozilla Foundation) – C:\Program Files (x86)\mozilla firefox\components\browsercomps.dll
[2012/03/13 07:06:36 | 000,002,252 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\bing.xml
[2012/03/13 08:14:58 | 000,003,996 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\drae.xml
[2012/03/13 08:14:58 | 000,001,143 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\eBay-es.xml
[2012/03/30 18:56:18 | 000,002,519 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\Search_Results.xml
[2012/03/13 07:06:36 | 000,002,040 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\twitter.xml
[2012/03/13 08:14:58 | 000,001,178 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\wikipedia-es.xml
[2012/03/13 08:14:58 | 000,001,102 | —- | M] () – C:\Program Files (x86)\mozilla firefox\searchplugins\yahoo-es.xml

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{googl
e:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chro
me&ie;={inputEncoding}&q;={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client
=chrome&hl;={language}&q;={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.151\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.151\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Program Files (x86)\Google\Chrome\Application\18.0.1025.151\gcswf32.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Adobe Acrobat (Enabled) = C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Browser\nppdf32.dll
CHR - plugin: Java Deployment Toolkit 6.0.290.11 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npdeployJava1.dll
CHR - plugin: Java™ Platform SE 6 U29 (Enabled) = C:\Program Files (x86)\Java\jre6\bin\new_plugin\npjp2.dll
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPAUTHZ.DLL
CHR - plugin: Microsoft Office 2010 (Enabled) = C:\PROGRA~2\MICROS~3\Office14\NPSPWRAP.DLL
CHR - plugin: Google Update (Enabled) = C:\Program Files (x86)\Google\Update\1.3.21.99\npGoogleUpdate3.dll
CHR - plugin: Media Go Detector (Enabled) = C:\Program Files (x86)\Sony\Media Go\npmediago.dll
CHR - plugin: PlayStation®Network Downloader Check Plug-in (Enabled) = C:\Program Files (x86)\Sony\PLAYSTATION Network Downloader\nppsndl.dll
CHR - plugin: WildTangent Games App Presence Detector (Enabled) = C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\1\NP_wtapp.dll
CHR - plugin: Windows Live Photo Gallery (Enabled) = C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll
CHR - plugin: Facebook Video Calling Plugin (Enabled) = C:\Users\Patricia\AppData\Local\Facebook\Video\Skype\npFacebookVideoCalling.dll
CHR - plugin: Silverlight Plug-In (Enabled) = c:\Program Files (x86)\Microsoft Silverlight\4.0.60831.0\npctrl.dll
CHR - plugin: Default Plug-in (Enabled) = default_plugin
CHR - Extension: YouTube = C:\Users\Patricia\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: B\u00FAsqueda de Google = C:\Users\Patricia\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: avast! WebRep = C:\Users\Patricia\AppData\Local\Google\Chrome\User Data\Default\Extensions\icmlaeflemplmjndnaapfdbbnpncnbda\7.0.1426_0\
CHR - Extension: Gmail = C:\Users\Patricia\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

O1 HOSTS File: ([2012/04/13 16:07:38 | 000,000,098 | —- | M]) - C:\Windows\SysNative\drivers\etc\Hosts
O1 - Hosts: 127.0.0.1 localhost
O1 - Hosts: ::1 localhost
O2:64bit: - BHO: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O2:64bit: - BHO: (Windows Live ID Sign-in Helper) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll (Microsoft Corp.)
O2:64bit: - BHO: (Google Toolbar Helper) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O2:64bit: - BHO: (Office Document Cache Handler) - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\Archivos de programa\Microsoft Office\Office14\URLREDIR.DLL (Microsoft Corporation)
O2 - BHO: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O2 - BHO: (Spybot-S&D; IE Protection) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O2 - BHO: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O2 - BHO: (Bing Bar Helper) - {d2ce3e00-f94a-4740-988e-03dc2f38c34f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3:64bit: - HKLM\..\Toolbar: (Google Toolbar) - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O3:64bit: - HKLM\..\Toolbar: (avast! WebRep) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE64.dll (AVAST Software)
O3:64bit: - HKLM\..\Toolbar: (no name) - 10 - No CLSID value found.
O3 - HKLM\..\Toolbar: (Bing Bar) - {8dcb7100-df86-4384-8842-8fa844297b3f} - C:\Program Files (x86)\Microsoft\BingBar\BingExt.dll (Microsoft Corporation.)
O3 - HKLM\..\Toolbar: (avast! WebRep) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Archivos de programa\AVAST Software\Avast\aswWebRepIE.dll (AVAST Software)
O3 - HKLM\..\Toolbar: (no name) - Locked - No CLSID value found.
O3:64bit: - HKCU\..\Toolbar\WebBrowser: (Google Toolbar) - {2318C2B1-4965-11D4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll (Google Inc.)
O4:64bit: - HKLM..\Run: [Acer ePower Management] C:\Archivos de programa\Packard Bell\Packard Bell Power Management\ePowerTray.exe (Acer Incorporated)
O4:64bit: - HKLM..\Run: [ETDCtrl] C:\Archivos de programa\Elantech\ETDCtrl.exe (ELAN Microelectronics Corp.)
O4:64bit: - HKLM..\Run: [HotKeysCmds] C:\Windows\SysNative\hkcmd.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IgfxTray] C:\Windows\SysNative\igfxtray.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [IntelTBRunOnce] wscript.exe //b //nologo "C:\Program Files\Intel\TurboBoost\RunTBGadgetOnce.vbs" File not found
O4:64bit: - HKLM..\Run: [Persistence] C:\Windows\SysNative\igfxpers.exe (Intel Corporation)
O4:64bit: - HKLM..\Run: [RtHDVCpl] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4 - HKLM..\Run: [avast] C:\Program Files\AVAST Software\Avast\avastUI.exe (AVAST Software)
O4 - HKLM..\Run: [BackupManagerTray] C:\Program Files (x86)\NTI\Packard Bell MyBackup\BackupManagerTray.exe (NTI Corporation)
O4 - HKLM..\Run: [emsisoft anti-malware] c:\program files (x86)\emsisoft anti-malware\a2guard.exe (Emsi Software GmbH)
O4 - HKLM..\Run: [IAStorIcon] C:\Program Files (x86)\Intel\Intel® Rapid Storage Technology\IAStorIcon.exe (Intel Corporation)
O4 - HKLM..\Run: [LManager] C:\Program Files (x86)\Launch Manager\LManager.exe (Dritek System Inc.)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\Renesas Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (Renesas Electronics Corporation)
O4 - HKCU..\Run: [SpybotSD TeaTimer] C:\Program Files (x86)\Spybot - Search & Destroy\TeaTimer.exe (Safer Networking Limited)
O4 - HKCU..\RunOnce: [!SearchquDSFF] C:\Windows\system32\RUNDLL32.EXE C:\Users\Patricia\AppData\Local\Temp\SRASSE~1.DLL,_SetFirefoxAssets Search Results,Search_Results,http://dts.search-results.com/sr?src=ffb&appid;=361&systemid;=406&sr;=0&q;=, File not found
O6 - HKLM\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O7 - HKCU\Software\Policies\Microsoft\Internet Explorer\Control Panel present
O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDrives = 0
O9:64bit: - Extra Button: Enviar a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : &Enviar; a OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Archivos de programa\Microsoft Office\Office14\ONBttnIE.dll (Microsoft Corporation)
O9:64bit: - Extra Button: Notas &vinculadas; de OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Archivos de programa\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9:64bit: - Extra 'Tools' menuitem : Notas &vinculadas; de OneNote - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Archivos de programa\Microsoft Office\Office14\ONBttnIELinkedNotes.dll (Microsoft Corporation)
O9 - Extra 'Tools' menuitem : Spybot - Search && Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\Program Files (x86)\Spybot - Search & Destroy\SDHelper.dll (Safer Networking Limited)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000008 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - NameSpace_Catalog5\Catalog_Entries64\000000000009 [] - C:\Archivos de programa\Common Files\Microsoft Shared\Windows Live\WLIDNSP.DLL (Microsoft Corp.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10:64bit: - Protocol_Catalog9\Catalog_Entries64\000000000018 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp64.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000001 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000002 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000003 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000004 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000005 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000006 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O10 - Protocol_Catalog9\Catalog_Entries\000000000018 - C:\Program Files (x86)\Common Files\PC Tools\Lsp\PCTLsp.dll (PC Tools Research Pty Ltd.)
O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} http://download.eset.com/special/eos/OnlineScanner.cab (Reg Error: Key error.)
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-0016-0000-0029-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} http://java.sun.com/update/1.6.0/jinstall-…indows-i586.cab (Java Plug-in 1.6.0_29)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 192.168.1.1
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{593EFE90-293B-4E32-874D-1FD5730986B5}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\wlmailhtml - No CLSID value found
O18:64bit: - Protocol\Handler\wlpg - No CLSID value found
O18:64bit: - Protocol\Filter\text/xml {807573E5-5146-11D5-A672-00B0D022E945} - C:\Archivos de programa\Common Files\Microsoft Shared\OFFICE14\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - AppInit_DLLs: (C:\Windows\System32\nvinitx.dll) - C:\Windows\SysNative\nvinitx.dll (NVIDIA Corporation)
O20 - AppInit_DLLs: (C:\Windows\SysWOW64\nvinit.dll) - C:\Windows\SysWOW64\nvinit.dll (NVIDIA Corporation)
O20:64bit: - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (Explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20:64bit: - Winlogon\Notify\igfxcui: DllName - (igfxdev.dll) - C:\Windows\SysNative\igfxdev.dll (Intel Corporation)
O32 - HKLM CDRom: AutoRun - 1
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] – "%1" %*
O35:64bit: - HKLM\..exefile [open] – "%1" %*
O35 - HKLM\..comfile [open] – "%1" %*
O35 - HKLM\..exefile [open] – "%1" %*
O37:64bit: - HKLM\…com [@ = ComFile] – "%1" %*
O37:64bit: - HKLM\…exe [@ = exefile] – "%1" %*
O37 - HKLM\…com [@ = ComFile] – "%1" %*
O37 - HKLM\…exe [@ = exefile] – "%1" %*

========== Files/Folders - Created Within 30 Days ==========

[2012/04/13 15:20:56 | 000,000,000 | —D | C] – C:\_OTL
[2012/04/13 12:29:20 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\Malwarebytes
[2012/04/13 12:29:12 | 000,000,000 | —D | C] – C:\ProgramData\Malwarebytes
[2012/04/13 12:27:57 | 010,063,000 | —- | C] (Malwarebytes Corporation ) – C:\Users\Patricia\Desktop\mbam-setup-1.61.0.1400.exe
[2012/04/13 10:34:23 | 000,446,464 | —- | C] (OldTimer Tools) – C:\Users\Patricia\Desktop\TFC.exe
[2012/04/12 17:44:02 | 000,000,000 | —D | C] – C:\32788R22FWJFW
[2012/04/12 17:06:49 | 000,000,000 | -HSD | C] – C:\$RECYCLE.BIN
[2012/04/12 16:53:11 | 000,096,256 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\mshtmled.dll
[2012/04/12 16:53:11 | 000,072,704 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\mshtmled.dll
[2012/04/12 16:53:05 | 002,311,168 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript9.dll
[2012/04/12 16:53:04 | 000,237,056 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\url.dll
[2012/04/12 16:53:04 | 000,231,936 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\url.dll
[2012/04/12 16:53:04 | 000,176,640 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ieui.dll
[2012/04/12 16:53:03 | 000,248,320 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ieui.dll
[2012/04/12 16:53:02 | 000,716,800 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\jscript.dll
[2012/04/12 16:53:01 | 000,818,688 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\jscript.dll
[2012/04/12 16:53:00 | 001,493,504 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\inetcpl.cpl
[2012/04/12 16:53:00 | 001,427,456 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\inetcpl.cpl
[2012/04/12 16:51:40 | 005,559,152 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\ntoskrnl.exe
[2012/04/12 16:51:39 | 003,968,368 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntkrnlpa.exe
[2012/04/12 16:51:38 | 003,913,072 | —- | C] (Microsoft Corporation) – C:\Windows\SysWow64\ntoskrnl.exe
[2012/04/12 16:48:49 | 000,081,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\imagehlp.dll
[2012/04/12 16:48:49 | 000,023,408 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\drivers\fs_rec.sys
[2012/04/12 16:48:46 | 000,220,672 | —- | C] (Microsoft Corporation) – C:\Windows\SysNative\wintrust.dll
[2012/04/12 16:06:05 | 004,460,006 | R— | C] (Swearware) – C:\Users\Patricia\Desktop\ComboFix.exe
[2012/04/12 12:01:34 | 000,518,144 | —- | C] (SteelWerX) – C:\Windows\SWREG.exe
[2012/04/12 12:01:34 | 000,406,528 | —- | C] (SteelWerX) – C:\Windows\SWSC.exe
[2012/04/12 12:01:34 | 000,060,416 | —- | C] (NirSoft) – C:\Windows\NIRCMD.exe
[2012/04/12 12:01:24 | 000,000,000 | —D | C] – C:\Windows\ERDNT
[2012/04/12 11:58:59 | 000,000,000 | —D | C] – C:\Qoobox
[2012/04/11 08:45:22 | 004,731,392 | —- | C] (AVAST Software) – C:\Users\Patricia\Desktop\aswMBR.exe
[2012/04/10 18:27:31 | 000,000,000 | —D | C] – C:\Windows\Minidump
[2012/04/09 19:01:03 | 000,593,920 | —- | C] (OldTimer Tools) – C:\Users\Patricia\Desktop\OTL.exe
[2012/04/09 16:46:32 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\VS Revo Group
[2012/04/09 16:10:54 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Local\VS Revo Group
[2012/04/09 16:10:50 | 000,031,800 | —- | C] (VS Revo Group) – C:\Windows\SysNative\drivers\revoflt.sys
[2012/04/09 16:10:50 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller Pro
[2012/04/09 16:10:45 | 000,000,000 | —D | C] – C:\Program Files\VS Revo Group
[2012/04/08 12:04:06 | 000,816,016 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctEFA64.sys
[2012/04/08 12:04:06 | 000,452,872 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctDS64.sys
[2012/04/08 12:04:04 | 000,331,368 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctgntdi64.sys
[2012/04/08 12:04:04 | 000,136,168 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctwfpfilter64.sys
[2012/04/08 12:03:59 | 000,257,232 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\PCTCore64.sys
[2012/04/08 12:03:38 | 000,092,896 | —- | C] (PC Tools) – C:\Windows\SysNative\drivers\pctplsg64.sys
[2012/04/08 12:02:57 | 000,000,000 | —D | C] – C:\Program Files (x86)\Common Files\PC Tools
[2012/04/08 11:31:01 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\ParetoLogic
[2012/04/08 11:31:01 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\DriverCure
[2012/04/08 11:30:13 | 000,000,000 | —D | C] – C:\ProgramData\ParetoLogic
[2012/04/07 19:27:58 | 000,000,000 | —D | C] – C:\ProgramData\{6AD8E59C-250C-4201-B5BA-56ADEF76FF46}
[2012/04/05 11:58:13 | 000,200,976 | —- | C] (Trend Micro Inc.) – C:\Windows\SysWow64\drivers\tmcomm.sys
[2012/04/05 11:54:50 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\Mozilla
[2012/04/01 15:44:29 | 000,000,000 | —D | C] – C:\Program Files\CCleaner
[2012/04/01 15:24:25 | 000,000,000 | —D | C] – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Emsisoft Anti-Malware
[2012/03/31 12:09:11 | 000,000,000 | —D | C] – C:\Users\Patricia\AppData\Roaming\Google
[2012/03/30 18:55:05 | 000,000,000 | —D | C] – C:\ProgramData\DivX
[2012/03/30 18:50:16 | 000,000,000 | —D | C] – C:\ProgramData\Premium
[2012/03/30 18:50:16 | 000,000,000 | —D | C] – C:\ProgramData\InstallMate
[2012/03/30 11:11:31 | 008,738,464 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2012/03/30 10:34:55 | 000,418,464 | —- | C] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/03/14 23:58:55 | 000,000,000 | —D | C] – C:\Config.Msi

========== Files - Modified Within 30 Days ==========

[2012/04/13 16:16:49 | 000,009,920 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/13 16:16:49 | 000,009,920 | -H– | M] () – C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/13 16:11:02 | 000,000,838 | —- | M] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/04/13 16:09:31 | 000,001,100 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineCore.job
[2012/04/13 16:09:08 | 000,067,584 | –S- | M] () – C:\Windows\bootstat.dat
[2012/04/13 16:08:59 | 3104,722,944 | -HS- | M] () – C:\hiberfil.sys
[2012/04/13 16:07:38 | 000,000,098 | —- | M] () – C:\Windows\SysNative\drivers\etc\Hosts
[2012/04/13 15:46:01 | 000,001,104 | —- | M] () – C:\Windows\tasks\GoogleUpdateTaskMachineUA.job
[2012/04/13 15:32:24 | 000,004,654 | —- | M] () – C:\Users\Patricia\Documents\cc_20120413_153221.reg
[2012/04/13 13:58:04 | 000,000,940 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001UA.job
[2012/04/13 12:28:45 | 010,063,000 | —- | M] (Malwarebytes Corporation ) – C:\Users\Patricia\Desktop\mbam-setup-1.61.0.1400.exe
[2012/04/13 10:34:27 | 000,446,464 | —- | M] (OldTimer Tools) – C:\Users\Patricia\Desktop\TFC.exe
[2012/04/12 22:58:02 | 000,000,918 | —- | M] () – C:\Windows\tasks\FacebookUpdateTaskUserS-1-5-21-1680525943-2408236732-211231575-1001Core.job
[2012/04/12 16:57:19 | 001,577,788 | —- | M] () – C:\Windows\SysNative\PerfStringBackup.INI
[2012/04/12 16:57:19 | 000,703,840 | —- | M] () – C:\Windows\SysNative\perfh00A.dat
[2012/04/12 16:57:19 | 000,616,008 | —- | M] () – C:\Windows\SysNative\perfh009.dat
[2012/04/12 16:57:19 | 000,137,806 | —- | M] () – C:\Windows\SysNative\perfc00A.dat
[2012/04/12 16:57:19 | 000,106,388 | —- | M] () – C:\Windows\SysNative\perfc009.dat
[2012/04/12 16:53:27 | 001,940,518 | —- | M] () – C:\Windows\SysNative\drivers\Cat.DB
[2012/04/12 16:06:27 | 004,460,006 | R— | M] (Swearware) – C:\Users\Patricia\Desktop\ComboFix.exe
[2012/04/12 13:42:04 | 000,000,060 | —- | M] () – C:\Windows\wpd99.drv
[2012/04/11 09:15:09 | 000,001,986 | —- | M] () – C:\Users\Public\Desktop\Adobe Reader 9.lnk
[2012/04/11 08:45:57 | 004,731,392 | —- | M] (AVAST Software) – C:\Users\Patricia\Desktop\aswMBR.exe
[2012/04/10 18:27:30 | 838,972,486 | —- | M] () – C:\Windows\MEMORY.DMP
[2012/04/10 10:44:30 | 000,002,670 | —- | M] () – C:\Users\Patricia\Documents\cc_20120410_104428.reg
[2012/04/10 10:44:12 | 000,013,084 | —- | M] () – C:\Users\Patricia\Documents\cc_20120410_104408.reg
[2012/04/09 16:55:08 | 000,593,920 | —- | M] (OldTimer Tools) – C:\Users\Patricia\Desktop\OTL.exe
[2012/04/09 16:10:51 | 000,001,089 | —- | M] () – C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012/04/09 16:06:39 | 000,001,896 | —- | M] () – C:\Users\Patricia\Documents\cc_20120409_160637.reg
[2012/04/09 16:06:22 | 000,002,764 | —- | M] () – C:\Users\Patricia\Documents\cc_20120409_160620.reg
[2012/04/09 16:06:07 | 000,002,016 | —- | M] () – C:\Users\Patricia\Documents\cc_20120409_160605.reg
[2012/04/09 16:05:44 | 000,010,338 | —- | M] () – C:\Users\Patricia\Documents\cc_20120409_160540.reg
[2012/04/09 16:05:07 | 000,170,942 | —- | M] () – C:\Users\Patricia\Documents\cc_20120409_160452.reg
[2012/04/09 15:47:40 | 000,001,853 | —- | M] () – C:\Users\Public\Desktop\avast! Free Antivirus.lnk
[2012/04/09 15:47:40 | 000,000,000 | —- | M] () – C:\Windows\SysWow64\config.nt
[2012/04/08 11:18:36 | 000,001,274 | —- | M] () – C:\Users\Patricia\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Recorte de pantalla y Selector de OneNote 2010.lnk
[2012/04/05 13:10:36 | 000,186,676 | —- | M] () – C:\Users\Patricia\AppData\Local\census.cache
[2012/04/05 13:10:17 | 000,103,334 | —- | M] () – C:\Users\Patricia\AppData\Local\ars.cache
[2012/04/05 11:55:30 | 000,000,036 | —- | M] () – C:\Users\Patricia\AppData\Local\housecall.guid.cache
[2012/04/03 16:02:56 | 000,000,050 | —- | M] () – C:\user.js
[2012/04/01 15:44:39 | 000,000,834 | —- | M] () – C:\Users\Public\Desktop\CCleaner.lnk
[2012/04/01 15:24:25 | 000,001,063 | —- | M] () – C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2012/03/30 16:55:14 | 000,290,933 | —- | M] () – C:\Users\Patricia\Desktop\Beca%20Doctorado%20Grant_%202012.pdf
[2012/03/30 11:11:37 | 000,418,464 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerApp.exe
[2012/03/30 11:11:37 | 000,070,304 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerCPLApp.cpl
[2012/03/30 11:11:31 | 008,738,464 | —- | M] (Adobe Systems Incorporated) – C:\Windows\SysWow64\FlashPlayerInstaller.exe
[2012/03/15 17:12:44 | 000,000,510 | —- | M] () – C:\settings.ini
[2012/03/15 14:35:21 | 000,436,872 | —- | M] () – C:\Windows\SysNative\FNTCACHE.DAT

========== Files Created - No Company Name ==========

[2012/04/13 15:32:23 | 000,004,654 | —- | C] () – C:\Users\Patricia\Documents\cc_20120413_153221.reg
[2012/04/12 12:01:34 | 000,256,000 | —- | C] () – C:\Windows\PEV.exe
[2012/04/12 12:01:34 | 000,208,896 | —- | C] () – C:\Windows\MBR.exe
[2012/04/12 12:01:34 | 000,098,816 | —- | C] () – C:\Windows\sed.exe
[2012/04/12 12:01:34 | 000,080,412 | —- | C] () – C:\Windows\grep.exe
[2012/04/12 12:01:34 | 000,068,096 | —- | C] () – C:\Windows\zip.exe
[2012/04/10 18:27:30 | 838,972,486 | —- | C] () – C:\Windows\MEMORY.DMP
[2012/04/10 10:44:29 | 000,002,670 | —- | C] () – C:\Users\Patricia\Documents\cc_20120410_104428.reg
[2012/04/10 10:44:10 | 000,013,084 | —- | C] () – C:\Users\Patricia\Documents\cc_20120410_104408.reg
[2012/04/09 16:10:51 | 000,001,089 | —- | C] () – C:\Users\Public\Desktop\Revo Uninstaller Pro.lnk
[2012/04/09 16:06:39 | 000,001,896 | —- | C] () – C:\Users\Patricia\Documents\cc_20120409_160637.reg
[2012/04/09 16:06:21 | 000,002,764 | —- | C] () – C:\Users\Patricia\Documents\cc_20120409_160620.reg
[2012/04/09 16:06:06 | 000,002,016 | —- | C] () – C:\Users\Patricia\Documents\cc_20120409_160605.reg
[2012/04/09 16:05:42 | 000,010,338 | —- | C] () – C:\Users\Patricia\Documents\cc_20120409_160540.reg
[2012/04/09 16:04:56 | 000,170,942 | —- | C] () – C:\Users\Patricia\Documents\cc_20120409_160452.reg
[2012/04/08 12:04:07 | 001,940,518 | —- | C] () – C:\Windows\SysNative\drivers\Cat.DB
[2012/04/05 13:10:36 | 000,186,676 | —- | C] () – C:\Users\Patricia\AppData\Local\census.cache
[2012/04/05 13:10:17 | 000,103,334 | —- | C] () – C:\Users\Patricia\AppData\Local\ars.cache
[2012/04/05 11:55:30 | 000,000,036 | —- | C] () – C:\Users\Patricia\AppData\Local\housecall.guid.cache
[2012/04/05 11:54:09 | 000,001,114 | —- | C] () – C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mozilla Firefox.lnk
[2012/04/03 16:02:56 | 000,000,050 | —- | C] () – C:\user.js
[2012/04/01 15:44:39 | 000,000,834 | —- | C] () – C:\Users\Public\Desktop\CCleaner.lnk
[2012/04/01 15:24:25 | 000,001,063 | —- | C] () – C:\Users\Public\Desktop\Emsisoft Anti-Malware.lnk
[2012/03/30 16:55:14 | 000,290,933 | —- | C] () – C:\Users\Patricia\Desktop\Beca%20Doctorado%20Grant_%202012.pdf
[2012/03/30 10:34:57 | 000,000,838 | —- | C] () – C:\Windows\tasks\Adobe Flash Player Updater.job
[2012/03/15 17:12:44 | 000,000,510 | —- | C] () – C:\settings.ini
[2011/10/01 16:10:15 | 000,000,496 | —- | C] () – C:\Windows\wininit.ini
[2011/10/01 12:35:16 | 000,001,466 | —- | C] () – C:\Windows\eReg.dat
[2011/08/30 13:20:24 | 000,077,824 | —- | C] () – C:\Windows\SysWow64\eautil.dll
[2011/08/29 16:43:41 | 000,000,028 | —- | C] () – C:\Windows\pdf995.ini
[2011/08/29 16:32:41 | 000,047,616 | —- | C] () – C:\Windows\SysWow64\pdf995mon64.dll
[2011/08/29 16:32:41 | 000,000,060 | —- | C] () – C:\Windows\wpd99.drv
[2011/08/22 19:01:48 | 000,000,135 | —- | C] () – C:\Windows\AutoKMS.ini
[2011/01/06 06:09:23 | 000,960,940 | —- | C] () – C:\Windows\SysWow64\igkrng600.bin
[2011/01/06 06:09:21 | 000,207,376 | —- | C] () – C:\Windows\SysWow64\igfcg600m.bin
[2011/01/06 06:09:18 | 000,145,804 | —- | C] () – C:\Windows\SysWow64\igcompkrng600.bin

========== Alternate Data Streams ==========

@Alternate Data Stream - 171 bytes -> C:\ProgramData\Temp:DFC5A2B2

< End of report >