No Internet After Malware Removal (Malwarebytes Delta-homes)

A

Almuelto

New Member
Thread author
Mar 12, 2015
1
Hi,

I got no internet connection on computer. Its running Windows XP 32bit. Im having a problem uploading the files from another computer so Ill just paste the Logs here.


Thanks in advance.

Scan result of Farbar Recovery Scan Tool (FRST) (x86) Version: 11-03-2015
Ran by laboratorio (administrator) on CMT140 on 12-03-2015 19:01:41
Running from C:\Documents and Settings\laboratorio\Escritorio
Loaded Profiles: laboratorio (Available profiles: laboratorio & Administrador & Administrador)
Platform: Microsoft Windows XP Professional Service Pack 3 (X86) OS Language: Español (alfabetización internacional)
Internet Explorer Version 8 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(Foxit Software Inc.) C:\Archivos de programa\Foxit Software\Foxit Reader\Foxit Cloud\FCUpdateService.exe
(Kaspersky Lab ZAO) C:\Archivos de programa\Kaspersky Lab\NetworkAgent\klnagent.exe
(National Instruments Corporation) C:\WINDOWS\system32\lkads.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\MAX\nimxs.exe
(National Instruments Corporation) C:\WINDOWS\system32\nipalsm.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\Security\nidmsrv.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\NI WebServer\SystemWebServer.exe
(TeamViewer GmbH) C:\Archivos de programa\TeamViewer\Version9\TeamViewer_Service.exe
(Kaspersky Lab ZAO) C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\avp.exe
(National Instruments, Inc.) C:\WINDOWS\system32\lkcitdl.exe
(National Instruments Corporation) C:\WINDOWS\system32\lktsrv.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe
(National Instruments Corporation) C:\WINDOWS\system32\nipxism.exe
(National Instruments Corporation) C:\Archivos de programa\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe
(TeamViewer GmbH) C:\Archivos de programa\TeamViewer\Version9\TeamViewer.exe
(Analog Devices, Inc.) C:\Archivos de programa\Analog Devices\Core\smax4pnp.exe
(Analog Devices, Inc.) C:\Archivos de programa\Analog Devices\SoundMAX\SMax4.exe
(S3 Graphics, Inc.) C:\WINDOWS\system32\VTTimer.exe
(S3 Graphics Co., Ltd.) C:\WINDOWS\system32\S3Trayp.exe
(Kaspersky Lab ZAO) C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\avp.exe
(TeamViewer GmbH) C:\Archivos de programa\TeamViewer\Version9\tv_w32.exe
(National Instruments Corporation) C:\Archivos de programa\National Instruments\Shared\NI Error Reporting\nierserver.exe
(Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
(Microsoft Corporation) C:\WINDOWS\system32\proquota.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [JMB36X Configure] => C:\WINDOWS\system32\JMRaidTool.exe [352256 2006-08-14] (JMicron Technology Corp.)
HKLM\...\Run: [SoundMAXPnP] => C:\Archivos de programa\Analog Devices\Core\smax4pnp.exe [925696 2005-05-20] (Analog Devices, Inc.)
HKLM\...\Run: [SoundMAX] => C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe [716800 2005-09-07] (Analog Devices, Inc.)
HKLM\...\Run: [VTTimer] => C:\WINDOWS\system32\VTTimer.exe [53248 2006-08-03] (S3 Graphics, Inc.)
HKLM\...\Run: [S3Trayp] => C:\WINDOWS\system32\S3trayp.exe [176128 2006-07-10] (S3 Graphics Co., Ltd.)
HKLM\...\Run: [AVP] => C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\avp.exe [490696 2011-09-29] (Kaspersky Lab ZAO)
HKLM\...\Run: [NI Update Service] => C:\Archivos de programa\National Instruments\Shared\Update Service\NIUpdateService.exe [853640 2012-11-16] (National Instruments)
Winlogon\Notify\klogon: C:\WINDOWS\system32\klogon.dll (Kaspersky Lab ZAO)
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [HideLogonScripts] 1
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [EnableProfileQuota] 1
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [ProfileQuotaMessage] Ha excedido su espacio de almacenamiento de perfiles. Antes de poder cerrar sesión tiene que mover algunos elementos a la red o al almacenamiento local.
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [MaxProfileSize] 2000000
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [WarnUser] 1
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\Policies\system: [WarnUserTimeout] 30
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\MountPoints2: {9342a6b8-c7c4-11e4-93ee-001bfc96b7a5} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Index.html
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\MountPoints2: {a5be376b-5db7-11e4-b249-001bfc96b7a5} - D:\shellexe.exe data\Index.htm
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\MountPoints2: {a6e46f9d-68b7-11e4-8679-001bfc96b7a5} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Index.html
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\...\MountPoints2: {a6e46fa3-68b7-11e4-8679-001bfc96b7a5} - C:\WINDOWS\system32\RunDLL32.EXE Shell32.DLL,ShellExec_RunDLL Index.html
HKU\S-1-5-18\...\Run: [Driver Pro] => C:\Archivos de programa\Driver Pro\DPLauncher.exe
Startup: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\NI Error Reporting.lnk
ShortcutTarget: NI Error Reporting.lnk -> C:\Archivos de programa\National Instruments\Shared\NI Error Reporting\nierserver.exe (National Instruments Corporation)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

ProxyEnable: [S-1-5-21-1103701530-3577185989-290766578-1358] => Internet Explorer proxy is enabled.
ProxyServer: [S-1-5-21-1103701530-3577185989-290766578-1358] => http=127.0.0.1:8080;https=127.0.0.1:8080
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKU\S-1-5-21-1103701530-3577185989-290766578-1358\Software\Microsoft\Internet Explorer\Main,Search Page = http://search.delta-homes.com/web/?type=ds&ts=1415171414&from=wpm11053&uid=_&q={searchTerms}
SearchScopes: HKU\.DEFAULT -> DefaultScope {9bb2c1cc-4a7d-4cd5-bce9-0ca5f9ff8391} URL =
SearchScopes: HKU\S-1-5-19 -> DefaultScope {9bb2c1cc-4a7d-4cd5-bce9-0ca5f9ff8391} URL =
SearchScopes: HKU\S-1-5-20 -> DefaultScope {9bb2c1cc-4a7d-4cd5-bce9-0ca5f9ff8391} URL =
DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} http://windowsupdate.microsoft.com/...ls/en/x86/client/wuweb_site.cab?1409743558355
Handler: http\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: http\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: https\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: https\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: ipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: ms-help - {314111c7-a502-11d2-bbca-00c04f8ec294} - C:\Archivos de programa\Archivos comunes\Microsoft Shared\Help\hxds.dll [2006-10-26] (Microsoft Corporation)
Handler: msdaipp\0x00000001 - {E1D2BF42-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Handler: msdaipp\oledb - {E1D2BF40-A96B-11d1-9C6B-0000F875AC61} - C:\Archivos de programa\Archivos comunes\System\Ole DB\MSDAIPP.DLL [2006-10-26] (Microsoft Corporation)
Winsock: Catalog5 04 C:\Archivos de programa\National Instruments\Shared\mDNS Responder\nimdnsNSP.dll [24320] (National Instruments Corporation)
Tcpip\Parameters: [DhcpNameServer] 158.42.250.195 158.42.250.65

FireFox:
========
FF ProfilePath: C:\Documents and Settings\laboratorio\Datos de programa\Mozilla\Firefox\Profiles\n7fqfjmj.default
FF Homepage: about:home
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Archivos de programa\Microsoft Silverlight\5.1.10411.0\npctrl.dll [2012-04-11] ( Microsoft Corporation)
FF Plugin: @microsoft.com/WPF,version=3.5 -> C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\NPWPF.dll [2008-07-29] (Microsoft Corporation)
FF Plugin ProgramFiles/Appdata: C:\Archivos de programa\mozilla firefox\plugins\nplv2011win32.dll [2012-07-13] (National Instruments)
FF Plugin ProgramFiles/Appdata: C:\Archivos de programa\mozilla firefox\plugins\nplv90win32.dll [2011-05-12] (National Instruments)
FF Extension: Adblock Plus - C:\Documents and Settings\laboratorio\Datos de programa\Mozilla\Firefox\Profiles\n7fqfjmj.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-10-13]
FF HKLM\...\Firefox\Extensions: [{20a82645-c095-46ed-80e3-08825760534b}] - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension
FF Extension: Microsoft .NET Framework Assistant - C:\WINDOWS\Microsoft.NET\Framework\v3.5\Windows Presentation Foundation\DotNetAssistantExtension [2014-09-18]
FF HKLM\...\Firefox\Extensions: [{8167E8F2-A770-4EFB-BA53-8A511051CD9B}] - C:\Archivos de programa\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-8A511051CD9B}
FF Extension: EZ YouTube Video Downloader - C:\Archivos de programa\EZ YouTube Video Downloader\{8167E8F2-A770-4EFB-BA53-8A511051CD9B} [2014-09-30]
FF HKLM\...\Firefox\Extensions: [detgdp@gmail.com] - C:\Documents and Settings\laboratorio\Datos de programa\Mozilla\Firefox\Profiles\n7fqfjmj.default\extensions\detgdp@gmail.com

========================== Services (Whitelisted) =================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R2 AVP; C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\avp.exe [490696 2011-09-29] (Kaspersky Lab ZAO)
R2 FoxitCloudUpdateService; C:\ARCHIVOS DE PROGRAMA\FOXIT SOFTWARE\FOXIT READER\Foxit Cloud\FCUpdateService.exe [242912 2014-09-11] (Foxit Software Inc.)
R2 klnagent; C:\Archivos de programa\Kaspersky Lab\NetworkAgent\klnagent.exe [124088 2011-09-28] (Kaspersky Lab ZAO)
R2 LkCitadelServer; C:\WINDOWS\system32\lkcitdl.exe [695136 2010-10-27] (National Instruments, Inc.)
R2 lkClassAds; C:\WINDOWS\system32\lkads.exe [46192 2011-06-14] (National Instruments Corporation)
R2 lkTimeSync; C:\WINDOWS\system32\lktsrv.exe [56952 2011-06-14] (National Instruments Corporation)
S3 MozillaMaintenance; C:\Archivos de programa\Mozilla Maintenance Service\maintenanceservice.exe [148080 2015-03-10] (Mozilla Foundation)
R2 mxssvr; C:\Archivos de programa\National Instruments\MAX\nimxs.exe [51360 2012-11-21] (National Instruments Corporation)
R2 ni488enumsvc; C:\WINDOWS\system32\nipalsm.exe [12696 2012-01-12] (National Instruments Corporation)
R2 NIApplicationWebServer; C:\Archivos de programa\National Instruments\Shared\NI WebServer\ApplicationWebServer.exe [53960 2012-05-22] (National Instruments Corporation)
R2 NIDomainService; C:\Archivos de programa\National Instruments\Shared\Security\nidmsrv.exe [362104 2011-06-14] (National Instruments Corporation)
R2 niLXIDiscovery; C:\Archivos de programa\IVI Foundation\VISA\WinNT\NIvisa\niLxiDiscovery.exe [236768 2012-11-07] (National Instruments Corporation)
R2 nimDNSResponder; C:\Archivos de programa\National Instruments\Shared\mDNS Responder\nimdnsResponder.exe [258776 2012-09-26] (National Instruments Corporation)
R2 NINetworkDiscovery; C:\Archivos de programa\National Instruments\Shared\NI Network Discovery\niDiscSvc.exe [172344 2012-12-18] (National Instruments Corporation)
R2 nipxirmu; C:\WINDOWS\system32\nipxism.exe [19056 2013-01-17] (National Instruments Corporation)
R2 niSvcLoc; C:\Archivos de programa\National Instruments\Shared\NI WebServer\SystemWebServer.exe [53952 2012-05-22] (National Instruments Corporation)
S3 odserv; C:\Archivos de programa\Archivos comunes\Microsoft Shared\OFFICE12\ODSERV.EXE [441136 2006-10-26] (Microsoft Corporation)
S3 ose; C:\Archivos de programa\Archivos comunes\Microsoft Shared\Source Engine\OSE.EXE [145184 2006-10-26] (Microsoft Corporation)
R2 TeamViewer9; C:\Archivos de programa\TeamViewer\Version9\TeamViewer_Service.exe [4799760 2014-09-12] (TeamViewer GmbH)
S2 iSafeService; C:\Archivos de programa\Elex-tech\YAC\iSafeSvc.exe [X]

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, the service will be removed from the registry. The file will not be moved unless listed separately.)

R3 AEAudioService; C:\WINDOWS\System32\drivers\AEAudio.sys [127872 2005-03-04] (Andrea Electronics Corporation)
R2 cvintdrv; C:\WINDOWS\system32\Drivers\cvintdrv.sys [19552 2011-11-04] ()
R3 FTDIBUS; C:\WINDOWS\System32\drivers\ftdibus.sys [63464 2013-02-13] (FTDI Ltd.)
R0 JGOGO; C:\WINDOWS\System32\DRIVERS\JGOGO.sys [6912 2006-02-07] (JMicron )
R0 JRAID; C:\WINDOWS\System32\DRIVERS\jraid.sys [42752 2006-08-23] (JMicron Technology Corp.)
R0 KL1; C:\WINDOWS\System32\DRIVERS\kl1.sys [135984 2011-08-18] (Kaspersky Lab ZAO)
R1 kl2; C:\WINDOWS\System32\DRIVERS\kl2.sys [13104 2011-08-18] (Kaspersky Lab ZAO)
R1 KLFLTDEV; C:\WINDOWS\System32\DRIVERS\klfltdev.sys [50992 2011-08-31] (Kaspersky Lab)
R1 KLIF; C:\WINDOWS\System32\DRIVERS\klif.sys [584496 2014-09-04] (Kaspersky Lab)
R3 klim5; C:\WINDOWS\System32\DRIVERS\klim5.sys [37168 2011-09-01] (Kaspersky Lab ZAO)
R1 mbamchameleon; C:\WINDOWS\system32\drivers\mbamchameleon.sys [120024 2015-03-12] (Malwarebytes Corporation)
R3 MTsensor; C:\WINDOWS\System32\DRIVERS\ASACPI.sys [5810 2004-08-13] ()
S3 ni1006k; C:\WINDOWS\system32\drivers\ni1006k.sys [26192 2013-01-14] (National Instruments Corporation)
S3 ni1045k; C:\WINDOWS\system32\drivers\ni1045kl.sys [11960 2013-01-14] (National Instruments Corporation)
S3 ni1065k; C:\WINDOWS\system32\drivers\ni1065k.sys [23736 2013-01-14] (National Instruments Corporation)
R3 ni488k; C:\WINDOWS\System32\DRIVERS\ni488k.sys [222392 2012-10-26] (National Instruments Corporation)
S3 nidimk; C:\WINDOWS\system32\drivers\nidimkl.sys [11944 2012-01-27] (National Instruments Corporation)
R3 nimdbgk; C:\WINDOWS\system32\drivers\nimdbgkl.sys [11976 2012-06-28] (National Instruments Corporation)
R3 nimxdfk; C:\WINDOWS\system32\drivers\nimxdfkl.sys [11960 2012-06-28] (National Instruments Corporation)
S3 niorbk; C:\WINDOWS\system32\drivers\niorbkl.sys [11968 2012-06-28] (National Instruments Corporation)
S3 nipalfwedl; C:\WINDOWS\System32\drivers\nipalfwedl.sys [12600 2012-12-19] (National Instruments Corporation)
R0 NIPALK; C:\WINDOWS\System32\drivers\nipalk.sys [586000 2012-12-19] (National Instruments Corporation)
S3 nipalusbedl; C:\WINDOWS\System32\drivers\nipalusbedl.sys [12600 2012-12-19] (National Instruments Corporation)
R0 nipbcfk; C:\WINDOWS\System32\drivers\nipbcfk.sys [15448 2012-12-18] (National Instruments Corporation)
R0 nipxibaf; C:\WINDOWS\System32\drivers\nipxibaf.sys [62712 2013-01-14] (National Instruments Corporation)
R0 nipxibrc; C:\WINDOWS\System32\drivers\nipxibrc.sys [46344 2013-01-14] (National Instruments Corporation)
S3 nipxigpk; C:\WINDOWS\system32\drivers\nipxigpk.sys [21144 2011-08-09] (National Instruments Corporation)
R2 nipxirmk; C:\WINDOWS\system32\drivers\nipxirmkl.sys [12408 2013-01-17] (National Instruments Corporation)
S3 NiViPciK; C:\WINDOWS\System32\drivers\NiViPciKl.sys [12424 2013-01-29] (National Instruments Corporation)
R2 NiViPxiK; C:\WINDOWS\System32\drivers\NiViPxiKl.sys [12424 2013-01-29] (National Instruments Corporation)
R3 PICOPP; C:\WINDOWS\System32\Drivers\picopp.sys [88240 2011-07-28] (Pico Technology)
R3 S3GIGP; C:\WINDOWS\System32\DRIVERS\S3gIGPm.sys [659456 2006-09-12] (S3 Graphics Co., Ltd.)
R3 SenFiltService; C:\WINDOWS\System32\drivers\Senfilt.sys [393088 2005-08-11] (Sensaura)
R0 videX32; C:\WINDOWS\System32\DRIVERS\videX32.sys [9728 2006-02-23] (VIA Technologies, Inc.)
R0 xfilt; C:\WINDOWS\System32\DRIVERS\xfilt.sys [11264 2006-02-23] (VIA Technologies,Inc)
S4 IntelIde; No ImagePath
U1 WS2IFSL; No ImagePath

==================== NetSvcs (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. Any associated file could be listed separately to be moved.)


==================== One Month Created Files and Folders ========

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-12 19:01 - 2015-03-12 19:01 - 00017501 _____ () C:\Documents and Settings\laboratorio\Escritorio\FRST.txt
2015-03-12 19:00 - 2015-03-12 18:59 - 01135104 _____ (Farbar) C:\Documents and Settings\laboratorio\Escritorio\FRST.exe
2015-03-12 18:38 - 2015-03-12 19:00 - 00000000 ____D () C:\Documents and Settings\All Users\Datos de programa\Malwarebytes' Anti-Malware (portable)
2015-03-12 18:38 - 2015-03-12 18:38 - 00120024 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-03-12 18:38 - 2015-03-12 18:38 - 00119512 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-03-12 18:38 - 2015-03-12 18:38 - 00000000 ____D () C:\Documents and Settings\laboratorio\Escritorio\Antiroot
2015-03-12 18:37 - 2015-03-12 18:37 - 00000000 ____D () C:\Documents and Settings\laboratorio\Mis documentos\Nueva carpeta
2015-03-12 18:32 - 2015-03-12 19:01 - 00000000 ____D () C:\FRST
2015-03-10 18:45 - 2015-03-12 17:50 - 00002275 _____ () C:\Documents and Settings\laboratorio\Escritorio\WinDIV.lnk
2015-03-10 18:45 - 2015-03-10 18:45 - 00000000 ____D () C:\Documents and Settings\laboratorio\Menú Inicio\Programas\EFS
2015-03-10 18:45 - 2015-03-10 18:45 - 00000000 ____D () C:\Archivos de programa\WinDiv
2015-03-10 18:35 - 2015-03-12 18:39 - 00000000 ____D () C:\Documents and Settings\All Users\Datos de programa\Malwarebytes
2015-03-10 16:47 - 2015-03-10 16:47 - 00000000 ____D () C:\Archivos de programa\Mozilla Firefox
2015-02-11 09:18 - 2015-02-11 18:22 - 00867989 _____ () C:\Documents and Settings\laboratorio\Escritorio\prueba1.PLW

==================== One Month Modified Files and Folders =======

(If an entry is included in the fixlist, the file\folder will be moved.)

2015-03-12 19:01 - 2014-09-04 07:37 - 00000000 ____D () C:\Documents and Settings\laboratorio\Escritorio
2015-03-12 18:38 - 2014-09-03 10:26 - 00000000 __RHD () C:\Documents and Settings\All Users\Datos de programa
2015-03-12 18:37 - 2014-09-04 07:37 - 00000000 ___RD () C:\Documents and Settings\laboratorio\Mis documentos
2015-03-12 18:18 - 2014-09-03 09:42 - 01729089 _____ () C:\WINDOWS\WindowsUpdate.log
2015-03-12 18:17 - 2014-09-03 10:27 - 00000000 ___RD () C:\Archivos de programa
2015-03-12 18:17 - 2014-09-03 10:26 - 00000000 ___RD () C:\Documents and Settings\All Users\Menú Inicio\Programas
2015-03-12 18:13 - 2014-09-03 10:26 - 00535531 _____ () C:\WINDOWS\setupapi.log
2015-03-12 18:00 - 2014-09-03 12:27 - 00000224 _____ () C:\WINDOWS\system32\config\netlogon.ftl
2015-03-12 15:31 - 2014-09-04 07:37 - 00000000 __RHD () C:\Documents and Settings\laboratorio\Reciente
2015-03-12 12:27 - 2014-10-23 08:14 - 00000260 _____ () C:\WINDOWS\Tasks\Loca.job
2015-03-12 12:27 - 2014-10-02 11:03 - 00000338 _____ () C:\WINDOWS\Tasks\DiskDiagnostic.job
2015-03-12 12:27 - 2014-09-04 08:34 - 00000000 ____D () C:\Documents and Settings\All Users\Datos de programa\Kaspersky Lab
2015-03-12 12:27 - 2014-09-03 16:10 - 00000238 _____ () C:\WINDOWS\Tasks\Notificación de inicio de sesión de fin de servicio de Microsoft Windows XP.job
2015-03-12 12:27 - 2008-04-14 04:00 - 00002206 _____ () C:\WINDOWS\system32\wpa.dbl
2015-03-12 10:46 - 2014-09-03 11:08 - 00000006 ____H () C:\WINDOWS\Tasks\SA.DAT
2015-03-12 10:44 - 2014-09-04 07:37 - 00000192 ___SH () C:\Documents and Settings\laboratorio\ntuser.ini
2015-03-12 10:44 - 2014-09-03 16:04 - 01114112 _____ () C:\WINDOWS\system32\config\kaspersk.evt
2015-03-12 10:44 - 2014-09-03 11:08 - 00032474 _____ () C:\WINDOWS\SchedLgU.Txt
2015-03-12 07:01 - 2014-09-03 11:19 - 00000000 ____D () C:\WINDOWS\security
2015-03-11 09:16 - 2014-09-30 10:55 - 00000000 ____D () C:\Archivos de programa\Security Updates Service
2015-03-11 09:16 - 2014-09-29 12:38 - 00000000 ____D () C:\Archivos de programa\SupTab
2015-03-11 09:00 - 2014-09-29 12:37 - 00000000 ____D () C:\Documents and Settings\laboratorio\Datos de programa\istartsurf
2015-03-11 08:59 - 2014-09-11 11:10 - 00000000 ____D () C:\Archivos de programa\Mozilla Maintenance Service
2015-03-10 18:45 - 2014-09-04 07:37 - 00000000 ___RD () C:\Documents and Settings\laboratorio\Menú Inicio\Programas
2015-03-10 18:45 - 2014-09-03 10:26 - 00000000 ____D () C:\Documents and Settings\All Users\Escritorio
2015-03-10 11:26 - 2015-01-26 10:21 - 02032503 _____ () C:\Documents and Settings\All Users\yvd_chrome_se.exe
2015-03-10 11:26 - 2015-01-26 10:21 - 01529534 _____ () C:\Documents and Settings\All Users\yvd_firefox_se.exe
2015-03-10 11:26 - 2015-01-26 10:21 - 00837536 _____ () C:\Documents and Settings\All Users\yvd_ie_se.exe
2015-03-09 11:24 - 2014-09-04 07:38 - 00017796 _____ () C:\WINDOWS\system32\OP5650.cah
2015-03-05 09:15 - 2014-10-23 08:14 - 00000000 ____D () C:\Archivos de programa\Loca
2015-02-27 13:54 - 2014-09-04 07:37 - 00000000 ____D () C:\Documents and Settings\laboratorio
2015-02-27 09:52 - 2014-09-04 07:37 - 00000000 ___RD () C:\Documents and Settings\laboratorio\Mis documentos\Mi música
2015-02-26 12:48 - 2014-09-04 07:37 - 00000000 ___HD () C:\Documents and Settings\laboratorio\Entorno de red
2015-02-19 18:33 - 2014-09-03 15:48 - 00000000 ____D () C:\WINDOWS\system32\MRT

==================== Files in the root of some directories =======

2014-11-11 08:58 - 2014-11-10 12:38 - 0019706 _____ () C:\Archivos de programa\Wallpaper_Ubuntu_CMT 140.png
2014-09-11 11:14 - 2015-01-16 10:58 - 0006144 _____ () C:\Documents and Settings\laboratorio\Configuración local\Datos de programa\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-10-07 15:48 - 2014-12-23 09:48 - 0761485 _____ () C:\Documents and Settings\All Users\ChromeTabExtension.crx
2014-10-02 11:03 - 2014-10-02 11:03 - 0333312 _____ () C:\Documents and Settings\All Users\cryptoDrvUpdate.exe
2015-01-26 10:21 - 2015-03-10 11:26 - 2032503 _____ () C:\Documents and Settings\All Users\yvd_chrome_se.exe
2015-01-26 10:21 - 2015-03-10 11:26 - 1529534 _____ () C:\Documents and Settings\All Users\yvd_firefox_se.exe
2015-01-26 10:21 - 2015-03-10 11:26 - 0837536 _____ () C:\Documents and Settings\All Users\yvd_ie_se.exe

Files to move or delete:
====================
C:\Documents and Settings\All Users\cryptoDrvUpdate.exe
C:\Documents and Settings\All Users\yvd_chrome_se.exe
C:\Documents and Settings\All Users\yvd_firefox_se.exe
C:\Documents and Settings\All Users\yvd_ie_se.exe


Some content of TEMP:
====================
C:\Documents and Settings\laboratorio\Configuración local\Temp\10156_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\10814_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\1169_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\14272_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\15540_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\17108_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\17229_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\1817_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\19622_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\19923_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\20581_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\2126_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\21977_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\22269_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\23131_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\23783_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\25704_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\25978_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\26435_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\26699_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\28882_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\29488_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\29650_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\2b20f086-c3e6-45a1-8181-eb829cd96bb5.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\30693_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\32292_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\5574_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\5830_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\7763_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\8372_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\8599_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\8753_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\9981_offer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\drvprosetup.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\Foxit Reader Updater.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\Foxit Updater.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\npp.5.9.6.2.Installer.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\PrefJsonCpp.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\sqlite3.exe
C:\Documents and Settings\laboratorio\Configuración local\Temp\xmlUpdater.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\WINDOWS\explorer.exe => File is digitally signed
C:\WINDOWS\system32\winlogon.exe => File is digitally signed
C:\WINDOWS\system32\svchost.exe => File is digitally signed
C:\WINDOWS\system32\services.exe => File is digitally signed
C:\WINDOWS\system32\User32.dll => File is digitally signed
C:\WINDOWS\system32\userinit.exe => File is digitally signed
C:\WINDOWS\system32\rpcss.dll => File is digitally signed
C:\WINDOWS\system32\Drivers\volsnap.sys => File is digitally signed

==================== End Of Log ============================


Additional scan result of Farbar Recovery Scan Tool (x86) Version: 11-03-2015
Ran by laboratorio at 2015-03-12 19:02:13
Running from C:\Documents and Settings\laboratorio\Escritorio
Boot Mode: Normal
==========================================================


==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Kaspersky Endpoint Security 8 para Windows (Enabled - Out of date) {2C4D4BC6-0793-4956-A9F9-E252435469C0}
FW: Kaspersky Endpoint Security 8 para Windows (Disabled) {2C4D4BC6-0793-4956-A9F9-E252435469C0}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

7-Zip 9.20 (HKLM\...\7-Zip) (Version: - )
Actualización de seguridad para el Reproductor de Windows Media (KB2378111) (HKLM\...\KB2378111_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB2803821-v2) (HKLM\...\KB2803821-v2_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB952069) (HKLM\...\KB952069_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB954155) (HKLM\...\KB954155_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB973540) (HKLM\...\KB973540_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB975558) (HKLM\...\KB975558_WM8) (Version: - Microsoft Corporation)
Actualización de seguridad para el Reproductor de Windows Media (KB978695) (HKLM\...\KB978695_WM9) (Version: - Microsoft Corporation)
Actualización de seguridad para Microsoft Windows (KB2564958) (HKLM\...\KB2564958) (Version: - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2510531) (HKLM\...\KB2510531-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2862772) (HKLM\...\KB2862772-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2909210) (HKLM\...\KB2909210-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2909921) (HKLM\...\KB2909921-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2936068) (HKLM\...\KB2936068-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB2964358) (HKLM\...\KB2964358-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows Internet Explorer 8 (KB982381) (HKLM\...\KB982381-IE8) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2115168) (HKLM\...\KB2115168) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2229593) (HKLM\...\KB2229593) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2296011) (HKLM\...\KB2296011) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2347290) (HKLM\...\KB2347290) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2387149) (HKLM\...\KB2387149) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2393802) (HKLM\...\KB2393802) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2419632) (HKLM\...\KB2419632) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2423089) (HKLM\...\KB2423089) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2443105) (HKLM\...\KB2443105) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2478960) (HKLM\...\KB2478960) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2478971) (HKLM\...\KB2478971) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2479943) (HKLM\...\KB2479943) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2481109) (HKLM\...\KB2481109) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2483185) (HKLM\...\KB2483185) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2485663) (HKLM\...\KB2485663) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2506212) (HKLM\...\KB2506212) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2507938) (HKLM\...\KB2507938) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2508429) (HKLM\...\KB2508429) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2509553) (HKLM\...\KB2509553) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2510581) (Version: 1 - Microsoft Corporation) Hidden
Actualización de seguridad para Windows XP (KB2535512) (HKLM\...\KB2535512) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2536276-v2) (HKLM\...\KB2536276-v2) (Version: 2 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2544893-v2) (HKLM\...\KB2544893-v2) (Version: 2 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2566454) (HKLM\...\KB2566454) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2570947) (HKLM\...\KB2570947) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2584146) (HKLM\...\KB2584146) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2585542) (HKLM\...\KB2585542) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2592799) (HKLM\...\KB2592799) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2598479) (HKLM\...\KB2598479) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2603381) (HKLM\...\KB2603381) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2619339) (HKLM\...\KB2619339) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2620712) (HKLM\...\KB2620712) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2631813) (HKLM\...\KB2631813) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2653956) (HKLM\...\KB2653956) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2655992) (HKLM\...\KB2655992) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2659262) (HKLM\...\KB2659262) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2661637) (HKLM\...\KB2661637) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2676562) (HKLM\...\KB2676562) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2686509) (HKLM\...\KB2686509) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2691442) (HKLM\...\KB2691442) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2698365) (HKLM\...\KB2698365) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2705219-v2) (HKLM\...\KB2705219-v2) (Version: 2 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2712808) (HKLM\...\KB2712808) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2719985) (HKLM\...\KB2719985) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2723135-v2) (HKLM\...\KB2723135-v2) (Version: 2 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2727528) (HKLM\...\KB2727528) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2757638) (HKLM\...\KB2757638) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2770660) (HKLM\...\KB2770660) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2780091) (HKLM\...\KB2780091) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2802968) (HKLM\...\KB2802968) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2807986) (HKLM\...\KB2807986) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2813345) (HKLM\...\KB2813345) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2820917) (HKLM\...\KB2820917) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2834886) (HKLM\...\KB2834886) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2847311) (HKLM\...\KB2847311) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2850869) (HKLM\...\KB2850869) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2859537) (HKLM\...\KB2859537) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2862152) (HKLM\...\KB2862152) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2862330) (HKLM\...\KB2862330) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2862335) (HKLM\...\KB2862335) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2864063) (HKLM\...\KB2864063) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2868038) (HKLM\...\KB2868038) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2868626) (HKLM\...\KB2868626) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2876217) (HKLM\...\KB2876217) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2876331) (HKLM\...\KB2876331) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2892075) (HKLM\...\KB2892075) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2893294) (HKLM\...\KB2893294) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2898715) (HKLM\...\KB2898715) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2900986) (HKLM\...\KB2900986) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2909212) (HKLM\...\KB2909212) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2914368) (HKLM\...\KB2914368) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2916036) (HKLM\...\KB2916036) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2922229) (HKLM\...\KB2922229) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2929961) (HKLM\...\KB2929961) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2930275) (HKLM\...\KB2930275) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB2964358) (HKLM\...\KB2964358) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB923561) (HKLM\...\KB923561) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB923789) (HKLM\...\KB923789) (Version: - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB946648) (HKLM\...\KB946648) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB950762) (HKLM\...\KB950762) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB950974) (HKLM\...\KB950974) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB951376-v2) (HKLM\...\KB951376-v2) (Version: 2 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB952004) (HKLM\...\KB952004) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB952954) (HKLM\...\KB952954) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB956572) (HKLM\...\KB956572) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB956844) (HKLM\...\KB956844) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB959426) (HKLM\...\KB959426) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB960803) (HKLM\...\KB960803) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB960859) (HKLM\...\KB960859) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB969059) (HKLM\...\KB969059) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB970430) (HKLM\...\KB970430) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB971657) (HKLM\...\KB971657) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB972270) (HKLM\...\KB972270) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB973507) (HKLM\...\KB973507) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB973869) (HKLM\...\KB973869) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB973904) (HKLM\...\KB973904) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB974112) (HKLM\...\KB974112) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB974318) (HKLM\...\KB974318) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB974392) (HKLM\...\KB974392) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB974571) (HKLM\...\KB974571) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB975025) (HKLM\...\KB975025) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB975467) (HKLM\...\KB975467) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB975560) (HKLM\...\KB975560) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB975713) (Version: 1 - Microsoft Corporation) Hidden
Actualización de seguridad para Windows XP (KB977816) (HKLM\...\KB977816) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB977914) (HKLM\...\KB977914) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB978338) (HKLM\...\KB978338) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB978542) (HKLM\...\KB978542) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB978706) (HKLM\...\KB978706) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB979309) (HKLM\...\KB979309) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB979482) (HKLM\...\KB979482) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB979687) (HKLM\...\KB979687) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB981997) (HKLM\...\KB981997) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB982132) (HKLM\...\KB982132) (Version: 1 - Microsoft Corporation)
Actualización de seguridad para Windows XP (KB982665) (HKLM\...\KB982665) (Version: 1 - Microsoft Corporation)
Actualización para Windows Internet Explorer 8 (KB2598845) (HKLM\...\KB2598845-IE8) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB2345886) (HKLM\...\KB2345886) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB2467659) (HKLM\...\KB2467659) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB2749655) (HKLM\...\KB2749655) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB2904266) (HKLM\...\KB2904266) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB2934207) (HKLM\...\KB2934207) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB898461) (HKLM\...\KB898461) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB951978) (Version: 1 - Microsoft Corporation) Hidden
Actualización para Windows XP (KB955759) (HKLM\...\KB955759) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB968389) (HKLM\...\KB968389) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB971029) (HKLM\...\KB971029) (Version: 1 - Microsoft Corporation)
Actualización para Windows XP (KB973815) (HKLM\...\KB973815) (Version: 1 - Microsoft Corporation)
Agente de red de Kaspersky Security Center (HKLM\...\InstallWIX_{F03982CF-1C5C-4E12-9F9E-D36C35E62402}) (Version: 9.0.2786 - Kaspersky Lab)
Agente de red de Kaspersky Security Center (Version: 9.0.2786 - Kaspersky Lab) Hidden
CCleaner (HKLM\...\CCleaner) (Version: 4.13 - Piriform)
EZ YouTube Video Downloader (HKLM\...\EZ YouTube Video Downloader) (Version: 1.2.6 - XtensionPlus) <==== ATTENTION
Foxit Cloud (HKLM\...\{41914D8B-9D6E-4764-A1F9-BC43FB6782C1}_is1) (Version: 2.1.32.905 - Foxit Software Inc.)
Foxit Reader (HKLM\...\Foxit Reader_is1) (Version: 7.0.3.916 - Foxit Software Inc.)
GonVisor 2.31.01 (HKLM\...\GonVisor_is1) (Version: - G.A.A.)
JMB36X Raid Configurer (HKLM\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0000 - JMICRON Technology Corp.)
Kaspersky Endpoint Security 8 para Windows (HKLM\...\{D72DD679-A3EC-4FCF-AFAF-12E2552450B6}) (Version: 8.1.0.646 - Kaspersky Lab)
Microsoft .NET Framework 2.0 Service Pack 2 (HKLM\...\{C09FB3CD-3D0C-3F2D-899A-6A1D67F2073F}) (Version: 2.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.0 Service Pack 2 (HKLM\...\{A3051CD0-2F64-3813-A88D-B8DCCDE8F8C7}) (Version: 3.2.30729 - Microsoft Corporation)
Microsoft .NET Framework 3.5 SP1 (HKLM\...\Microsoft .NET Framework 3.5 SP1) (Version: - Microsoft Corporation)
Microsoft .NET Framework 4 Client Profile (HKLM\...\Microsoft .NET Framework 4 Client Profile) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft .NET Framework 4 Extended (HKLM\...\Microsoft .NET Framework 4 Extended) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Office Professional Plus 2007 (HKLM\...\PROPLUS) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.10411.0 - Microsoft Corporation)
Mozilla Firefox 36.0.1 (x86 es-ES) (HKLM\...\Mozilla Firefox 36.0.1 (x86 es-ES)) (Version: 36.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 32.0 - Mozilla)
NI .NET Framework 4.0 (Version: 4.01.49152 - National Instruments) Hidden
NI Atomic PXIe Peripheral Module Driver 2.3.0 (Version: 2.30.49152 - National Instruments) Hidden
NI Authentication 12.0.0 (Version: 12.0.367.0 - National Instruments) Hidden
NI Certificates Deployment Support (Version: 1.03.49152 - National Instruments) Hidden
NI Curl 12.0.0 (Version: 12.0.412.0 - National Instruments) Hidden
NI Error Reporting 2011 SP1 (Version: 11.0.191.0 - National Instruments) Hidden
NI EulaDepot (Version: 3.11.177 - National Instruments) Hidden
NI GMP Windows 32-bit Installer 12.0.0 (Version: 12.0.46.0 - National Instruments) Hidden
NI Help Assistant (Version: 1.0.11 - National Instruments) Hidden
NI IO Trace 3.0.2 (Version: 3.2.768 - National Instruments) Hidden
NI LabVIEW 2009 SP1 Run-Time Engine Web Services (Version: 9.0.234.0 - National Instruments) Hidden
NI LabVIEW 2011 Deployment Framework (Version: 11.0.64.0 - National Instruments) Hidden
NI LabVIEW 2011 Real-Time NBFifo (Version: 11.0.250.0 - National Instruments) Hidden
NI LabVIEW 2012 Real-Time Error Dialog (Version: 12.0.71.0 - National Instruments) Hidden
NI LabVIEW Real-Time NBFifo (Version: 9.0.319.0 - National Instruments) Hidden
NI LabVIEW Run-Time Engine 2009 SP1 (Version: 9.0.1089.0 - National Instruments) Hidden
NI LabVIEW Run-Time Engine 2011 SP1 (Version: 11.0.448.0 - National Instruments) Hidden
NI LabVIEW Run-Time Engine Interop 2009 (Version: 9.0.160.0 - National Instruments) Hidden
NI LabVIEW Run-Time Engine Interop 2011 (Version: 11.0.449.0 - National Instruments) Hidden
NI LabVIEW Web Server for Run-Time Engine (Version: 11.0.375.0 - National Instruments) Hidden
NI LabVIEW Web Server for Run-Time Engine (Version: 9.0.185.0 - National Instruments) Hidden
NI LabWindows/CVI 2010 SP1 Analysis Library (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI 2010 SP1 Low-Level Driver (Original) (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI 2010 SP1 Low-Level Driver (Updated) (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI 2010 SP1 Network Variable Library (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI 2010 SP1 TDM Streaming Library (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI Run-Time Engine 2010 SP1 (Updated) (Version: 10.0.1434 - National Instruments) Hidden
NI LabWindows/CVI Run-Time Engine 2010 SP1 (Version: 10.0.1434 - National Instruments) Hidden
NI Launcher (Version: 3.11.177 - National Instruments) Hidden
NI Logos 5.3.0 (Version: 5.3.223.0 - National Instruments) Hidden
NI Logos XT Support (Version: 5.3.222.0 - National Instruments) Hidden
NI Math Kernel Libraries (Version: 1.0.10.0 - National Instruments) Hidden
NI Math Kernel Libraries (Version: 1.0.28.0 - National Instruments) Hidden
NI MAX Remote Configuration Installer 5.4 (Version: 5.40.49152 - National Instruments) Hidden
NI MDF Support (Version: 3.11.177 - National Instruments) Hidden
NI mDNS Responder 2.1.1 (Version: 2.11.49152 - National Instruments) Hidden
NI Measurement & Automation Explorer 5.4.0 (Version: 5.40.49152 - National Instruments) Hidden
NI MetaSuite Installer (Version: 3.11.177 - National Instruments) Hidden
NI MXS 5.4.0 (Version: 5.40.49152 - National Instruments) Hidden
NI Network Browser 5.4.0 (Version: 5.40.70.0 - National Instruments) Hidden
NI Network Discovery 5.4 (Version: 5.40.49152 - National Instruments) Hidden
NI NI LabVIEW 2011 SP1 Run-Time Engine Non-English Support (Version: 11.0.302.0 - National Instruments) Hidden
NI Portable Configuration 5.3.0 (Version: 5.30.49152 - National Instruments) Hidden
NI PXI Platform Framework 1.6.2 (Version: 1.62.49152 - National Instruments) Hidden
NI PXI Platform Services 3.2.1 (Version: 3.21.49152 - National Instruments) Hidden
NI PXI Platform Services 3.2.1 Configuration Support (Version: 3.21.49152 - National Instruments) Hidden
NI PXI Platform Services 3.2.1 Expert (Version: 3.21.49152 - National Instruments) Hidden
NI PXI SystemAPI Expert 3.2.1 (Version: 3.21.49152 - National Instruments) Hidden
NI Registration Wizard (Version: 1.3.94.0 - National Instruments) Hidden
NI Remote Provider for MAX 5.4.0 (Version: 5.40.49152 - National Instruments) Hidden
NI Remote PXI Provider for MAX 5.3.0 (Version: 5.30.49152 - National Instruments) Hidden
NI Software Provider for MAX 5.3.0 (Version: 5.30.49152 - National Instruments) Hidden
NI SSL Support (Version: 12.0.408.0 - National Instruments) Hidden
NI System API Web-Servce 32-bit 5.4.0 (Version: 5.40.236.0 - National Instruments) Hidden
NI System API Windows 32-bit 5.4.0 (Version: 5.40.220.0 - National Instruments) Hidden
NI System Configuration Runtime 5.4.0 (Version: 5.40.108.0 - National Instruments) Hidden
NI System Monitor 3.2.1 (Version: 3.21.49152 - National Instruments) Hidden
NI System State Publisher (Version: 12.0.358.0 - National Instruments) Hidden
NI System Web Server 12.0 (Version: 12.0.414.0 - National Instruments) Hidden
NI System Web Server Base 12.0.0 (Version: 12.0.407.0 - National Instruments) Hidden
NI TDMS (Version: 2.3.175.0 - National Instruments) Hidden
NI Trace Engine (Version: 12.0.401.0 - National Instruments) Hidden
NI Uninstaller (Version: 3.11.177 - National Instruments) Hidden
NI Update Service 2.2.5 (Version: 2.25.79 - National Instruments) Hidden
NI VC2005MSMs x86 (Version: 8.05.0 - National Instruments) Hidden
NI VC2008MSMs x86 (Version: 9.0.401 - National Instruments) Hidden
NI VC2010SP1MSMs x86 (Version: 10.0.100 - National Instruments) Hidden
NI Web Application Server 12.0 (Version: 12.0.422.0 - National Instruments) Hidden
NI Xalan Delay Load 1.10.2 (Version: 1.10.72.0 - National Instruments) Hidden
NI Xerces Delay Load 2.7.3 (Version: 2.7.180.0 - National Instruments) Hidden
NI-488.2 3.1.1 (Version: 3.11.49152 - National Instruments) Hidden
NI-488.2 3.1.1 Development Support (Version: 3.11.49152 - National Instruments) Hidden
NI-488.2 Provider for MAX version 3.1.1 (Version: 3.11.49152 - National Instruments) Hidden
NI-APAL 2.2.1 Error Files (Version: 2.21.49152 - National Instruments) Hidden
NI-APAL 2.2.1 Error Files for LabVIEW RT (Version: 2.21.49152 - National Instruments) Hidden
NI-DIM 1.13.0f0 (Version: 1.130.49152 - National Instruments) Hidden
NI-MDBG 3.0.0f0 (Version: 3.00.49152 - National Instruments) Hidden
NI-Mesa (Version: 11.0.11.0 - National Instruments) Hidden
NI-MXDF 3.0.0f0 (Version: 3.00.49152 - National Instruments) Hidden
NI-ORB 3.0 (Version: 3.00.49152 - National Instruments) Hidden
NI-PAL 2.9.1 Error Files (Version: 2.91.49152 - National Instruments) Hidden
NI-PAL 2.9.1f0 (Version: 10.101.49152 - National Instruments) Hidden
NI-RPC 4.3.0f0 (Version: 4.30.49152 - National Instruments) Hidden
NI-RPC 4.3.0f0 for Phar Lap ETS (Version: 4.30.49152 - National Instruments) Hidden
NI-VISA 5.2.0 MAX Provider (Version: 5.20.49152 - National Instruments) Hidden
NI-VISA 5.3.0 (Version: 5.30.49152 - National Instruments) Hidden
NI-VISA Runtime 5.3.0 (Version: 5.30.49152 - National Instruments) Hidden
Notepad++ (HKLM\...\Notepad++) (Version: 5.9.6.2 - )
Paquete de idioma de Microsoft .NET Framework 4 Client Profile ESN (HKLM\...\Microsoft .NET Framework 4 Client Profile ESN Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
Paquete de idioma de Microsoft .NET Framework 4 Extended ESN (HKLM\...\Microsoft .NET Framework 4 Extended ESN Language Pack) (Version: 4.0.30319 - Microsoft Corporation)
PicoLog (HKLM\...\{b099aca1-107a-423f-be77-aae5e0f584a5}) (Version: 5.22.9 - Nombre de su organización)
PicoScope 6 (HKLM\...\{7087d20e-8c7f-43f0-bf32-2dfdacc48603}) (Version: 6.9.18 - Pico Technology)
PL-2303 USB-to-Serial (HKLM\...\{ECC3713C-08A4-40E3-95F1-7D0704F1CE5E}) (Version: - )
Platform (Version: 1.21 - VIA Technologies, Inc.) Hidden
REALTEK GbE & FE Ethernet PCI NIC Driver (HKLM\...\{ACCA20B0-C4D1-4BF5-BF21-0A0EB5EF9730}) (Version: 1.02.0000 - Realtek)
Reset NI Config 5.0.0 (Version: 5.0.146.0 - National Instruments) Hidden
Revisión para Windows XP (KB952287) (HKLM\...\KB952287) (Version: 1 - Microsoft Corporation)
Revisión para Windows XP (KB961118) (HKLM\...\KB961118) (Version: 1 - Microsoft Corporation)
Software de National Instruments (HKLM\...\NI Uninstaller) (Version: - National Instruments)
SoundMAX (HKLM\...\{F0A37341-D692-11D4-A984-009027EC0A9C}) (Version: 5.10.01.4151 - Analog Devices)
TeamViewer 9 (HKLM\...\TeamViewer 9) (Version: 9.0.32494 - TeamViewer)
VIA Platform Device Manager (HKLM\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.21 - VIA Technologies, Inc.)
VIA/S3G Display Driver 6.14.10.0071 (HKLM\...\VIA Chrome9 HC IGP Display) (Version: - )
VISA Shared Components (HKLM\...\VISASharedComponents) (Version: 1.5 - IVI Foundation)
VISA Shared Components (Version: 1.5.0 - IVI Foundation) Hidden
WebFldrs XP (Version: 9.50.7523 - Microsoft Corporation) Hidden
WinDiv (HKLM\...\{091B2C49-9AD6-4F4B-92E6-7229EA3A2315}) (Version: 1.5.0.0 - EFS SAS)
Windows Genuine Advantage Notifications (KB905474) (HKLM\...\WgaNotify) (Version: 1.9.0040.0 - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\KB892130) (Version: - Microsoft Corporation)
Windows Genuine Advantage Validation Tool (KB892130) (HKLM\...\WGA) (Version: 1.7.0069.2 - Microsoft Corporation)
Windows Internet Explorer 8 (HKLM\...\ie8) (Version: 20090308.140743 - Microsoft Corporation)
Yoko DL716 BETA (C:\Archivos de programa\Yoko\) (HKLM\...\ST6UNST #2) (Version: - )
Yoko DL716 BETA (HKLM\...\ST6UNST #1) (Version: - )

==================== Custom CLSID (selected items): ==========================

(If an entry is included in the fixlist, it will be removed from registry. Any eventual file will not be moved.)

CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0000002F-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020420-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020421-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020422-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020423-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020424-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00020425-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0002E005-0000-0000-C000-000000000046}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{00B7E0AB-817A-44AD-A04B-D1148D524136}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0BE35200-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0BE35201-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0BE35202-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0BE35203-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{0BE35204-8F91-11CE-9DE3-00AA004BB851}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{3C4F3BE3-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{3C4F3BE5-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{3C4F3BE7-47EB-101B-A3C9-08002B2F49FB}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{46763EE0-CAB2-11CE-8C20-00AA0051E5D4}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{7629CFA2-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{7629CFA4-3FE5-101B-A3C9-08002B2F49FB}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{7C6E29BC-8B8B-4C3D-859E-AF6CD158BE0F}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C0-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C1-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C2-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C3-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C4-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C5-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C8-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969C9-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969CA-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{88D969D6-F192-11D4-A65F-0040963251E5}\InprocServer32 -> C:\WINDOWS\system32\msxml4.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{B196B286-BAB4-101A-B69C-00AA00341D07}\InprocServer32 -> No File Path
CustomCLSID: HKU\S-1-5-21-1103701530-3577185989-290766578-1358_Classes\CLSID\{F9043C85-F6F2-101A-A3C9-08002B2F49FB}\InprocServer32 -> No File Path

==================== Restore Points =========================

15-12-2014 11:33:53 Punto de control del sistema
16-12-2014 13:51:51 Punto de control del sistema
17-12-2014 14:01:55 Punto de control del sistema
18-12-2014 15:49:28 Punto de control del sistema
19-12-2014 15:49:55 Punto de control del sistema
20-12-2014 17:01:56 Punto de control del sistema
21-12-2014 17:49:55 Punto de control del sistema
22-12-2014 19:21:02 Punto de control del sistema
07-01-2015 12:35:45 Punto de control del sistema
08-01-2015 14:28:23 Punto de control del sistema
12-01-2015 15:47:17 Punto de control del sistema
13-01-2015 18:43:13 Punto de control del sistema
14-01-2015 19:18:47 Punto de control del sistema
15-01-2015 20:29:42 Punto de control del sistema
16-01-2015 21:17:42 Punto de control del sistema
17-01-2015 22:17:41 Punto de control del sistema
18-01-2015 23:29:41 Punto de control del sistema
20-01-2015 00:17:41 Punto de control del sistema
21-01-2015 01:17:37 Punto de control del sistema
26-01-2015 10:59:50 Punto de control del sistema
29-01-2015 11:15:23 Punto de control del sistema
30-01-2015 11:28:25 Punto de control del sistema
31-01-2015 12:16:26 Punto de control del sistema
01-02-2015 13:16:25 Punto de control del sistema
02-02-2015 14:16:24 Punto de control del sistema
03-02-2015 14:28:26 Punto de control del sistema
04-02-2015 15:28:23 Punto de control del sistema
05-02-2015 16:16:23 Punto de control del sistema
06-02-2015 17:16:22 Punto de control del sistema
07-02-2015 18:16:22 Punto de control del sistema
08-02-2015 18:28:21 Punto de control del sistema
09-02-2015 19:16:20 Punto de control del sistema
10-02-2015 19:28:20 Punto de control del sistema
11-02-2015 20:28:20 Punto de control del sistema
12-02-2015 21:28:19 Punto de control del sistema
13-02-2015 22:16:19 Punto de control del sistema
14-02-2015 23:16:19 Punto de control del sistema
16-02-2015 00:16:19 Punto de control del sistema
17-02-2015 00:28:18 Punto de control del sistema
18-02-2015 01:16:19 Punto de control del sistema
19-02-2015 02:16:18 Punto de control del sistema
19-02-2015 18:29:46 Software Distribution Service 3.0
23-02-2015 11:49:45 Punto de control del sistema
24-02-2015 14:14:08 Punto de control del sistema
25-02-2015 14:15:49 Punto de control del sistema
26-02-2015 14:26:38 Punto de control del sistema
02-03-2015 10:28:25 Punto de control del sistema
03-03-2015 11:20:29 Punto de control del sistema
04-03-2015 13:51:30 Punto de control del sistema
05-03-2015 14:28:58 Punto de control del sistema
09-03-2015 11:56:19 Punto de control del sistema
10-03-2015 12:28:46 Punto de control del sistema
10-03-2015 18:45:24 Instalado WinDiv
11-03-2015 19:06:08 Punto de control del sistema

==================== Hosts content: ==========================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2008-04-14 04:00 - 2008-04-14 04:00 - 00000792 ____A C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 localhost

==================== Scheduled Tasks (whitelisted) =============

(If an entry is included in the fixlist, the task (.job) file will be moved. The file which is running by the task will not be moved.)

Task: C:\WINDOWS\Tasks\DiskDiagnostic.job => C:\Archivos de programa\DiskDiagnostic\DiskDiagnostic.exe
Task: C:\WINDOWS\Tasks\Loca.job => C:\Archivos de programa\Loca\bin\LocaProxy.exe
Task: C:\WINDOWS\Tasks\Microsoft-Windows-HashDiagnostic.job => C:\Archivos de programa\hela\hela.exe
Task: C:\WINDOWS\Tasks\Notificación de inicio de sesión de fin de servicio de Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe
Task: C:\WINDOWS\Tasks\Notificación mensual de fin de servicio de Microsoft Windows XP.job => C:\WINDOWS\system32\xp_eos.exe

==================== Loaded Modules (whitelisted) ==============

2011-09-29 21:25 - 2014-09-04 08:34 - 00311696 _____ () C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\network_services.dll
2011-09-29 21:24 - 2011-09-29 21:24 - 00283024 _____ () C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\am_facade.dll
2011-09-29 21:26 - 2011-09-29 21:26 - 00463248 _____ () C:\Archivos de programa\Kaspersky Lab\Kaspersky Endpoint Security 8 para Windows\WebControlTask.ppl
2008-04-14 04:00 - 2008-04-14 04:00 - 00014336 _____ () C:\WINDOWS\system32\msdmo.dll
2011-10-17 23:46 - 2011-10-17 23:46 - 01967104 _____ () C:\Archivos de programa\National Instruments\Shared\NI Error Reporting\niwsrp.dll

==================== Alternate Data Streams (whitelisted) =========

(If an entry is included in the fixlist, only the Alternate Data Streams will be removed.)


==================== Safe Mode (whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)


==================== EXE Association (whitelisted) ===============

(If an entry is included in the fixlist, the default will be restored. None default entries will be removed.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-1103701530-3577185989-290766578-1358\Control Panel\Desktop\\Wallpaper -> C:\Documents and Settings\laboratorio\Configuración local\Datos de programa\Microsoft\Wallpaper1.bmp
DNS Servers: 158.42.250.195 - 158.42.250.65

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)


==================== Accounts: =============================

Administrador (S-1-5-21-1645522239-1708537768-1801674531-500 - Administrator - Enabled) => %SystemDrive%\Documents and Settings\Administrador
Asistente de ayuda (S-1-5-21-1645522239-1708537768-1801674531-1000 - Limited - Disabled)
ASPNET (S-1-5-21-1645522239-1708537768-1801674531-1005 - Limited - Enabled)
Invitado (S-1-5-21-1645522239-1708537768-1801674531-501 - Limited - Disabled)
SUPPORT_388945a0 (S-1-5-21-1645522239-1708537768-1801674531-1002 - Limited - Disabled)

==================== Faulty Device Manager Devices =============

Name: Adaptador para administración Intel(R) PRO/100+
Description: Adaptador para administración Intel(R) PRO/100+
Class Guid: {4D36E972-E325-11CE-BFC1-08002BE10318}
Manufacturer: Intel
Service: E100B
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Event log errors: =========================

Application errors:
==================
Error: (03/12/2015 10:46:16 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Tipo de evento: El Contrato de licencia ha sido infringido
Aplicación\Nombre: Kaspersky Endpoint Security 8 para Windows
Componente: Protección
Resultado\Descripción: La aplicación no está activada

Error: (03/11/2015 09:16:33 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Detectados: Packed.Win32.Krap.hc

Error: (03/11/2015 09:16:24 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Detectados: Packed.Win32.Krap.hc

Error: (03/11/2015 09:00:05 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Tipo de evento: El Contrato de licencia ha sido infringido
Aplicación\Nombre: Kaspersky Endpoint Security 8 para Windows
Componente: Protección
Resultado\Descripción: La aplicación no está activada

Error: (03/09/2015 11:22:59 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Tipo de evento: El Contrato de licencia ha sido infringido
Aplicación\Nombre: Kaspersky Endpoint Security 8 para Windows
Componente: Protección
Resultado\Descripción: La aplicación no está activada

Error: (03/09/2015 11:22:59 AM) (Source: LabVIEW) (EventID: 3299) (User: )
Description: LabVIEW information: Error: Can't listen for HTTP on :8080 .

Error: (03/09/2015 11:22:59 AM) (Source: LabVIEW) (EventID: 3299) (User: )
Description: LabVIEW information: Error: Can't open a socket on , port 8080 .

Error: (03/02/2015 09:14:43 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Tipo de evento: El Contrato de licencia ha sido infringido
Aplicación\Nombre: Kaspersky Endpoint Security 8 para Windows
Componente: Protección
Resultado\Descripción: La aplicación no está activada

Error: (02/23/2015 10:08:38 AM) (Source: Kaspersky Endpoint Security 8 for Windows) (EventID: 4660) (User: )
Description: Tipo de evento: El Contrato de licencia ha sido infringido
Aplicación\Nombre: Kaspersky Endpoint Security 8 para Windows
Componente: Protección
Resultado\Descripción: La aplicación no está activada

Error: (02/12/2015 05:04:12 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Aplicación que no responde: MagnetinjektorV2.exe, versión 1.1.5155.44265, módulo que no responde hungapp, versión 0.0.0.0, dirección que no responde 0x00000000.


System errors:
=============
Error: (03/12/2015 06:15:36 PM) (Source: Schannel) (EventID: 4108) (User: )
Description: El certificado recibido del servidor remoto no se ha validado correctamente. El
código de error es 0x80092013. Error en la solicitud de conexión SSL. Los datos adjuntos contienen
el certificado del servidor.

Error: (03/12/2015 00:27:29 PM) (Source: Schannel) (EventID: 4108) (User: )
Description: El certificado recibido del servidor remoto no se ha validado correctamente. El
código de error es 0x80092013. Error en la solicitud de conexión SSL. Los datos adjuntos contienen
el certificado del servidor.

Error: (03/12/2015 10:47:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: El controlador de inicialización siguiente no se cargó correctamente:
PCIIde
ViaIde

Error: (03/12/2015 10:47:36 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio YAC Service no pudo iniciarse debido al siguiente error:
%%2

Error: (03/12/2015 09:06:37 AM) (Source: Schannel) (EventID: 4108) (User: )
Description: El certificado recibido del servidor remoto no se ha validado correctamente. El
código de error es 0x80092013. Error en la solicitud de conexión SSL. Los datos adjuntos contienen
el certificado del servidor.

Error: (03/11/2015 06:09:11 PM) (Source: 0) (EventID: 8003) (User: )
Description: \Device\LanmanDatagramReceiverCMT133NetBT_Tcpip_{7A262003-680D-4E60-B3

Error: (03/11/2015 09:01:52 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio YAC Service no pudo iniciarse debido al siguiente error:
%%2

Error: (03/09/2015 11:24:24 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio YAC Service no pudo iniciarse debido al siguiente error:
%%2

Error: (03/04/2015 02:32:03 PM) (Source: 0) (EventID: 8003) (User: )
Description: \Device\LanmanDatagramReceiverCMT323NetBT_Tcpip_{7A262003-680D-4E60-B3

Error: (03/02/2015 09:16:27 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: El servicio YAC Service no pudo iniciarse debido al siguiente error:
%%2


Microsoft Office Sessions:
=========================

==================== Memory info ===========================

Processor: Intel(R) Core(TM)2 Duo CPU E6550 @ 2.33GHz
Percentage of memory in use: 16%
Total physical RAM: 3198.42 MB
Available physical RAM: 2658.9 MB
Total Pagefile: 5077.5 MB
Available Pagefile: 4689.2 MB
Total Virtual: 2047.88 MB
Available Virtual: 1950.22 MB

==================== Drives ================================

Drive c: (SISTEMA) (Fixed) (Total:49.03 GB) (Free:35.43 GB) NTFS
Drive d: (THIESEL2014) (CDROM) (Total:0.06 GB) (Free:0 GB) CDFS
Drive e: (DATOS) (Fixed) (Total:100 GB) (Free:99.52 GB) NTFS ==>[Drive with boot components (Windows XP)]
Drive g: (USB DISK) (Removable) (Total:1.79 GB) (Free:1.68 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (Size: 149.1 GB) (Disk ID: DB1AB084)
Partition 1: (Not Active) - (Size=49 GB) - (Type=OF Extended)
Partition 2: (Active) - (Size=100 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 1.8 GB) (Disk ID: 00000000)

Partition: GPT Partition Type.

==================== End Of Log ============================
 

Similar threads

F
    • Like
  • Locked
Service Host: Network List Service...Virus?
Replies
11
Views
1,817
Windows Malware Removal Help & Support
nasdaq
nasdaq
J
  • Locked
I need help with a Malware Spanish logs
Replies
2
Views
1,821
Windows Malware Removal Help & Support
nasdaq
nasdaq
K
  • Locked
PowerShell/MaleficAms Powershell Infection Please Help
Replies
2
Views
1,961
Windows Malware Removal Help & Support
nasdaq
nasdaq

About us

  • MalwareTips is a community-driven platform providing the latest information and resources on malware and cyber threats. Our team of experienced professionals and passionate volunteers work to keep the internet safe and secure. We provide accurate, up-to-date information and strive to build a strong and supportive community dedicated to cybersecurity.

Quick Navigation

Forum Rules Warning System Welcome Guide Two-factor Authentication

User Menu

Login

Follow us

Follow us on Facebook or Twitter to know first about the latest cybersecurity incidents and malware threats.

Top