K
KorbenStone
Guest
hola tengo problema con pop up, que me salta siempre que habro el Google. y algúna vez mas de forma aleatoria. no consigo samerlo de encima.
aquí os dejo mi log para ver si podéis ayudarme. gracias.
Running Processes:
-----------------
#1: [smss.exe]
File Path: C:\WINDOWS\System32\smss.exe
ProcessID: 656
Priority: Normal
File Size: 44 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Windows NT Session Manager
Internal Name: smss.exe
Original Filename: smss.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:15
Last modified: 09/09/2002 12:51:38
#2: [winlogon.exe]
File Path: C:\WINDOWS\system32\winlogon.exe
ProcessID: 744
Priority: High
File Size: 507 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Aplicación de inicio de sesión de Windows NT
Internal Name: winlogon
Original Filename: WINLOGON.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 17/11/2004 2:59:12
Last modified: 09/09/2002 12:51:42
#3: [services.exe]
File Path: C:\WINDOWS\system32\services.exe
ProcessID: 788
Priority: Normal
File Size: 99 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: Copyright © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Aplicación de servicios y controlador
Internal Name: services.exe
Original Filename: services.exe
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:18
Last modified: 24/08/2001 11:00:00
#4: [lsass.exe]
File Path: C:\WINDOWS\system32\lsass.exe
ProcessID: 800
Priority: Normal
File Size: 11 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: LSA Shell (Export Version)
Internal Name: lsass.exe
Original Filename: lsass.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:18
Last modified: 09/09/2002 12:51:32
#5: [svchost.exe]
File Path: C:\WINDOWS\system32\svchost.exe
ProcessID: 976
Priority: Normal
File Size: 12 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Generic Host Process for Win32 Services
Internal Name: svchost.exe
Original Filename: svchost.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:19
Last modified: 24/08/2001 11:00:00
#6: [svchost.exe]
File Path: C:\WINDOWS\System32\svchost.exe
ProcessID: 1000
Priority: Normal
File Size: 12 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Generic Host Process for Win32 Services
Internal Name: svchost.exe
Original Filename: svchost.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 17/11/2004 3:16:30
Last modified: 24/08/2001 11:00:00
#7: [spoolsv.exe]
File Path: C:\WINDOWS\system32\spoolsv.exe
ProcessID: 1340
Priority: Normal
File Size: 50 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (XPClient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Spooler SubSystem App
Internal Name: spoolsv.exe
Original Filename: spoolsv.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:19
Last modified: 24/08/2001 11:00:00
#8: [nvsvc32.exe]
File Path: C:\WINDOWS\System32\nvsvc32.exe
ProcessID: 1488
Priority: Normal
File Size: 80 KB
Version: 6.14.10.5216
File Version: 6.14.10.5216
Product Version: 6.14.10.5216
Copyright: © NVIDIA Corporation. All rights reserved.
Company Name: NVIDIA Corporation
File Description: NVIDIA Driver Helper Service, Version 52.16
Internal Name: NVSVC
Original Filename: nvsvc32.exe
Product Name: NVIDIA Driver Helper Service, Version 52.16
Created on: 06/10/2003 14:16:00
Last accessed: 16/11/2004 13:46:20
Last modified: 06/10/2003 14:16:00
#9: [hubak.dll:jsiut]
File Path: C:\WINDOWS\hubak.dll:jsiut
ProcessID: 1532
Priority: Normal
File Size: 10 KB
Created on: 25/10/2004 23:01:54
Last accessed: 17/11/2004 3:15:35
Last modified: 25/10/2004 23:01:54
#10: [PAVSRV51.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\PAVSRV51.EXE
ProcessID: 1560
Priority: High
File Size: 256 KB
Version: 6.3.0.101
File Version: 6.03.0.101
Product Version: 6.03
Copyright: Copyright © Panda Software 2001
Company Name: Panda Software
File Description: Panda Antivirus Service for Windows NT/2000
Internal Name: pavsrv
Original Filename: pavsrv.exe
Product Name: Panda Antivirus
Created on: 20/01/2004 2:58:34
Last accessed: 16/11/2004 22:38:59
Last modified: 20/01/2004 2:58:33
#11: [AVENGINE.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
ProcessID: 1740
Priority: Normal
File Size: 108 KB
Version: 1.0.0.1
File Version: 6.03.0.100
Product Version: 6.03
Copyright: Copyright © Panda Software 2001
Company Name: Panda Software
File Description: Proceso análisis independiente
Internal Name: AVENGINE
Original Filename: AVENGINE.exe
Product Name: Panda Antivirus Windows NT/2000
Created on: 20/01/2004 2:58:34
Last accessed: 16/11/2004 22:38:58
Last modified: 07/03/2002 13:09:50
#12: [Explorer.EXE]
File Path: C:\WINDOWS\Explorer.EXE
ProcessID: 436
Priority: Normal
File Size: 983 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Explorador de Windows
Internal Name: explorer
Original Filename: EXPLORER.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:23
Last accessed: 16/11/2004 14:19:46
Last modified: 09/09/2002 12:51:28
#13: [CTHELPER.EXE]
File Path: C:\WINDOWS\System32\CTHELPER.EXE
ProcessID: 684
Priority: Normal
File Size: 24 KB
Version: 1.0.0.2
File Version: 1, 0, 0, 2
Product Version: 1, 0, 0, 2
Copyright: Copyright © 2002
Company Name: Creative Technology Ltd
File Description: CtHelper Application
Internal Name: CtHelper
Original Filename: CtHelper.EXE
Product Name: CtHelper Application
Created on: 19/01/2004 3:22:08
Last accessed: 16/11/2004 13:46:39
Last modified: 02/07/2002 17:56:00
#14: [jusched.exe]
File Path: C:\Archivos de programa\Java\j2re1.4.2_05\bin\jusched.exe
ProcessID: 708
Priority: Normal
File Size: 32 KB
Created on: 03/06/2068 21:05:12
Last accessed: 16/11/2004 13:46:35
Last modified: 03/06/2004 21:05:08
#15: [APVXDWIN.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE
ProcessID: 712
Priority: Normal
File Size: 124 KB
Version: 3.3.1.0
File Version: 3.03.01
Product Version: 2.04.07
Copyright:
Company Name: Panda Software International
File Description: ApVxdWin
Internal Name: ApVxdWin.exe
Original Filename: ApVxdWin.exe
Product Name: Panda Antivirus Titanium
Created on: 21/01/2004 17:31:41
Last accessed: 16/11/2004 22:39:00
Last modified: 11/03/2003 18:06:06
#16: [qttask.exe]
File Path: C:\Archivos de programa\QuickTime\qttask.exe
ProcessID: 764
Priority: Normal
File Size: 76 KB
Version: 6.4.0.29
File Version: 6.4
Product Version: QuickTime 6.4
Copyright: © Apple Computer, Inc. 2001-2003
Company Name: Apple Computer, Inc.
File Description:
Internal Name: QuickTime Task
Original Filename: QTTask.exe
Product Name: QuickTime
Created on: 19/01/2004 6:18:26
Last accessed: 16/11/2004 13:49:50
Last modified: 19/01/2004 6:18:26
#17: [fs20.exe]
File Path: C:\Archivos de programa\Free Surfer\fs20.exe
ProcessID: 904
Priority: Normal
File Size: 704 KB
Version: 2.1.0.26
File Version: 2.01.0026
Product Version: 2.01.0026
Copyright: EMS-Project, E.Muhonen 2002 ©
Company Name: EMS-Project 2002 ©
File Description:
Internal Name: fs20
Original Filename: fs20.exe
Product Name: Free Surfer mk II
Created on: 18/09/2002 19:25:30
Last accessed: 17/11/2004 3:00:02
Last modified: 18/09/2002 19:25:30
#18: [Remoterm.exe]
File Path: C:\Archivos de programa\Pinnacle\Pinnacle PCTV\Remote\Remoterm.exe
ProcessID: 900
Priority: Normal
File Size: 60 KB
Version: 2.0.0.39
File Version: 2.0.0.39
Product Version: 5, 0, 0, 0
Copyright: Copyright © 2002 Pinnacle Systems
Company Name: Pinnacle Systems
File Description: Remote Control Application
Internal Name: remoterm
Original Filename: remoterm.exe
Product Name: Pinnacle Systems Product Family
Created on: 20/01/2004 2:06:11
Last accessed: 16/11/2004 13:46:36
Last modified: 11/10/2002 14:40:34
#19: [ezSP_Px.exe]
File Path: C:\WINDOWS\System32\ezSP_Px.exe
ProcessID: 1032
Priority: Normal
File Size: 40 KB
Version: 1.0.0.0
File Version: 1, 0, 0, 0
Product Version: 1, 0, 0, 0
Copyright: Copyright © 2002 Easy Systems Japan Ltd.
Company Name: Easy Systems Japan Ltd.
File Description: ezSP_Px MFC Application
Internal Name: ezSP_Px
Original Filename: ezSP_Px.EXE
Product Name: ezSP_Px Application
Created on: 14/09/2004 12:55:58
Last accessed: 16/11/2004 13:46:36
Last modified: 20/08/2002 9:29:26
#20: [winampa.exe]
File Path: C:\Archivos de programa\Winamp\winampa.exe
ProcessID: 1164
Priority: Normal
File Size: 33 KB
Created on: 13/12/2003 1:50:34
Last accessed: 16/11/2004 13:46:37
Last modified: 13/12/2003 1:50:34
#21: [ctfmon.exe]
File Path: C:\WINDOWS\System32\ctfmon.exe
ProcessID: 1140
Priority: Normal
File Size: 13 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: CTF Loader
Internal Name: CTFMON
Original Filename: CTFMON.EXE
Product Name: Microsoft® Windows® Operating System
Created on: 08/06/2004 15:24:19
Last accessed: 16/11/2004 13:46:37
Last modified: 09/09/2002 12:51:26
#22: [RUNDLL32.EXE]
File Path: C:\WINDOWS\System32\RUNDLL32.EXE
ProcessID: 1176
Priority: Normal
File Size: 31 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Ejecutar un archivo DLL como una aplicación
Internal Name: rundll
Original Filename: RUNDLL.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 21:46:52
Last modified: 24/08/2001 11:00:00
#23: [PCLEScheduler.exe]
File Path: C:\Archivos de programa\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
ProcessID: 1452
Priority: Normal
File Size: 232 KB
Version: 1.0.1.6
File Version: 1.0.1.6
Product Version: 1.0.1.1
Copyright: Copyright © 2002 - 2003
Company Name: Pinnacle Systems GmbH, Braunschweig
File Description: Pinnacle Scheduler Application
Internal Name: PCLEScheduler
Original Filename: PCLEScheduler.exe
Product Name: Scheduler
Created on: 20/01/2004 2:05:52
Last accessed: 16/11/2004 21:53:55
Last modified: 31/03/2003 17:22:50
#24: [stickies.exe]
File Path: D:\Archivos de programa\stickies\stickies.exe
ProcessID: 1620
Priority: Normal
File Size: 248 KB
Version: 4.0.5.2
File Version: 4.5b
Product Version: 4.5b
Copyright: Copyright © Tom Revell 2003
Company Name:
File Description: Stickies 4.5b
Internal Name: Stickies
Original Filename: stickies.exe
Product Name: Stickies
Created on: 02/11/2003 15:38:01
Last accessed: 16/11/2004 13:46:45
Last modified: 02/11/2003 15:38:01
#25: [pavProxy.exe]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\pavProxy.exe
ProcessID: 1804
Priority: Normal
File Size: 104 KB
Created on: 20/01/2004 2:58:36
Last accessed: 16/11/2004 22:38:59
Last modified: 20/01/2004 2:58:33
#26: [d3uh.exe]
File Path: C:\WINDOWS\system32\d3uh.exe
ProcessID: 3092
Priority: Normal
File Size: 26 KB
Created on: 08/11/2004 1:12:24
Last accessed: 17/11/2004 3:16:16
Last modified: 08/11/2004 1:12:24
#27: [emule.exe]
File Path: C:\Archivos de programa\eMule\emule.exe
ProcessID: 3788
Priority: Normal
File Size: 4720 KB
Version: 0.44.1.38
File Version: 0.44.1 Unicode
Product Version: 0.44.1 Unicode
Copyright: Copyright © 2002-2004 Merkur - read license.txt for more infos
Company Name: http://www.emule-project.net
File Description: eMule
Internal Name: emule.exe
Original Filename: emule.exe
Product Name: eMule
Created on: 25/10/2004 3:26:36
Last accessed: 17/11/2004 2:53:00
Last modified: 24/10/2004 13:57:10
#28: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 452
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 2:59:13
Last modified: 09/09/2002 12:51:30
#29: [server.exe]
File Path: C:\ARCHIV~1\Pinnacle\SHARED~1\Filter\server.exe
ProcessID: 1660
Priority: Normal
File Size: 72 KB
Version: 2.0.0.9
File Version: 2, 0, 0, 9
Product Version: 24, 0, 0, 0
Copyright: Copyright © 1997-2003 Pinnacle Systems
Company Name: Pinnacle Systems
File Description: OOProcServer
Internal Name: server
Original Filename: server.exe
Product Name: Pinnacle STUDIO PCTV
Created on: 19/01/2004 3:23:32
Last accessed: 16/11/2004 21:53:52
Last modified: 09/04/2003 17:22:24
#30: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2712
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#31: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2300
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#32: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 3688
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#33: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2264
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#34: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 1476
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#35: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2324
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#36: [HiJack.exe]
File Path: C:\Archivos de programa\BulletProofSoft.com\SpywareRemover\HS\HiJack.exe
ProcessID: 2760
Priority: Normal
File Size: 392 KB
Version: 2.0.0.0
File Version: 2, 0, 0, 0
Product Version: 2, 0, 0, 0
Copyright: Copyright © 2003
Company Name:
File Description: HiJack MFC Application
Internal Name: System Hijack Scanner
Original Filename: HiJack.EXE
Product Name: System Hijack Scanner
Created on: 26/04/2004 20:34:14
Last accessed: 17/11/2004 3:15:44
Last modified: 26/04/2004 20:34:14
System Hijack Scanner Entries:
---------------
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Start Page=http://www.estrelladigital.es/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page=about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Local Page=C:\WINDOWS\SYSTEM32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Local Page=C:\WINDOWS\SYSTEM32\blank.htm
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_page_url=about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_search_url=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Main, search bar=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, search bar=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=res://C:\WINDOWS\wodos.dll/sp.html#11111
R3 - URLSearchHook: (no name) - {AA0A9B7C-1E92-535C-0904-539590028603} - C:\WINDOWS\d3hj.dll
O2 - BHO: (no name) - {AA0A9B7C-1E92-535C-0904-539590028603} - C:\WINDOWS\d3hj.dll
O3 - ToolBar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\fgiebar.dll
O3 - ToolBar: (no name) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup (file missing)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install (file missing)
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE (file missing)
O4 - HKLM\..\Run: [Jet Detection] "C:\Archivos de programa\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime (file missing)
O4 - HKLM\..\Run: [freesurfer] C:\Archivos de programa\Free Surfer\fs20.exe
O4 - HKLM\..\Run: [PCTVRemote] C:\Archivos de programa\Pinnacle\Pinnacle PCTV\Remote\Remoterm.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Archivos de programa\Winamp\winampa.exe
O4 - HKLM\..\Run: [sdkkp.exe] C:\WINDOWS\system32\sdkkp.exe (file missing)
O4 - HKLM\..\Run: [iedg.exe] C:\WINDOWS\system32\iedg.exe (file missing)
O4 - HKLM\..\Run: [crll.exe] C:\WINDOWS\system32\crll.exe (file missing)
O4 - HKLM\..\Run: [d3uh.exe] C:\WINDOWS\system32\d3uh.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit (file missing)
O4 - Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\Stickies.lnk
O4 - User Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\desktop.ini
O4 - User Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\Stickies.lnk
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Pinnacle Scheduler.lnk
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Pinnacle Scheduler.lnk
O5 - HKCU\control panel\don't load: ncpa.cpl = No
O5 - HKCU\control panel\don't load: odbccp32.cpl = No
O8 - Extra Context Menu Items: Descargar TODO con FlashGet - C:\Archivos de programa\FlashGet\jc_all.htm
O8 - Extra Context Menu Items: Descargar usando FlashGet - C:\Archivos de programa\FlashGet\jc_link.htm
O11 - Options Group: [JAVA_SUN] Java (Sun)
O12 - Plugin For .spop - C:\Archivos de programa\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00000075-9980-0010-8000-00AA00389B71} ((no name)) - http://codecs.microsoft.com/codecs/i386/voxacm.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2C0F2AEA-3A9B-46DB-A7BE-80FF329E415D} ((no name)) - http://www.accesoplugin.com/dialercab/PPremiumInternacional.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} ((no name)) - http://akamai.downloadv3.com/binaries/IA/nethv32_ES_XP.cab
O16 - DPF: {4B6015E7-3ABB-45DC-96B7-55A843751F28} ((no name)) - http://www.contenidospc.com/ruboskizo2.cab
O16 - DPF: {50AD557E-3426-41FD-AFDD-2AF39BB1C387} ((no name)) - http://akamai.downloadv3.com/binaries/Live...ice_5_ES_XP.cab
O16 - DPF: {5C3A9EA6-4068-46B8-8B5A-692FB10607B1} ((no name)) - http://www.grupomarineda.net/auto/DialerData.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} ((no name)) - http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1100610020984
O16 - DPF: {73F0FD85-BD47-4A95-86D1-DE38860462C1} ((no name)) - http://www.accesoplugin.com/dialercab/IberoDialerHTML.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.4.2_05) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {8E65B894-C2E9-11D5-BCD3-00E018987609} ((no name)) - http://09.sharedsource.org/cabs/adictosalcinees.cab
O16 - DPF: {C1BAC744-8F0B-11D0-89E7-00C0A8295197} ((no name)) - http://www.crtvg.es/camweb/camera.cab
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} (Java Plug-in 1.4.2_03) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} (Java Plug-in 1.4.2_05) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} ((no name)) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} ((no name)) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll
aquí os dejo mi log para ver si podéis ayudarme. gracias.
Running Processes:
-----------------
#1: [smss.exe]
File Path: C:\WINDOWS\System32\smss.exe
ProcessID: 656
Priority: Normal
File Size: 44 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Windows NT Session Manager
Internal Name: smss.exe
Original Filename: smss.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:15
Last modified: 09/09/2002 12:51:38
#2: [winlogon.exe]
File Path: C:\WINDOWS\system32\winlogon.exe
ProcessID: 744
Priority: High
File Size: 507 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Aplicación de inicio de sesión de Windows NT
Internal Name: winlogon
Original Filename: WINLOGON.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 17/11/2004 2:59:12
Last modified: 09/09/2002 12:51:42
#3: [services.exe]
File Path: C:\WINDOWS\system32\services.exe
ProcessID: 788
Priority: Normal
File Size: 99 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: Copyright © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Aplicación de servicios y controlador
Internal Name: services.exe
Original Filename: services.exe
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:18
Last modified: 24/08/2001 11:00:00
#4: [lsass.exe]
File Path: C:\WINDOWS\system32\lsass.exe
ProcessID: 800
Priority: Normal
File Size: 11 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: LSA Shell (Export Version)
Internal Name: lsass.exe
Original Filename: lsass.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:18
Last modified: 09/09/2002 12:51:32
#5: [svchost.exe]
File Path: C:\WINDOWS\system32\svchost.exe
ProcessID: 976
Priority: Normal
File Size: 12 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Generic Host Process for Win32 Services
Internal Name: svchost.exe
Original Filename: svchost.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:19
Last modified: 24/08/2001 11:00:00
#6: [svchost.exe]
File Path: C:\WINDOWS\System32\svchost.exe
ProcessID: 1000
Priority: Normal
File Size: 12 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Generic Host Process for Win32 Services
Internal Name: svchost.exe
Original Filename: svchost.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 17/11/2004 3:16:30
Last modified: 24/08/2001 11:00:00
#7: [spoolsv.exe]
File Path: C:\WINDOWS\system32\spoolsv.exe
ProcessID: 1340
Priority: Normal
File Size: 50 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (XPClient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: Spooler SubSystem App
Internal Name: spoolsv.exe
Original Filename: spoolsv.exe
Product Name: Microsoft® Windows® Operating System
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 13:46:19
Last modified: 24/08/2001 11:00:00
#8: [nvsvc32.exe]
File Path: C:\WINDOWS\System32\nvsvc32.exe
ProcessID: 1488
Priority: Normal
File Size: 80 KB
Version: 6.14.10.5216
File Version: 6.14.10.5216
Product Version: 6.14.10.5216
Copyright: © NVIDIA Corporation. All rights reserved.
Company Name: NVIDIA Corporation
File Description: NVIDIA Driver Helper Service, Version 52.16
Internal Name: NVSVC
Original Filename: nvsvc32.exe
Product Name: NVIDIA Driver Helper Service, Version 52.16
Created on: 06/10/2003 14:16:00
Last accessed: 16/11/2004 13:46:20
Last modified: 06/10/2003 14:16:00
#9: [hubak.dll:jsiut]
File Path: C:\WINDOWS\hubak.dll:jsiut
ProcessID: 1532
Priority: Normal
File Size: 10 KB
Created on: 25/10/2004 23:01:54
Last accessed: 17/11/2004 3:15:35
Last modified: 25/10/2004 23:01:54
#10: [PAVSRV51.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\PAVSRV51.EXE
ProcessID: 1560
Priority: High
File Size: 256 KB
Version: 6.3.0.101
File Version: 6.03.0.101
Product Version: 6.03
Copyright: Copyright © Panda Software 2001
Company Name: Panda Software
File Description: Panda Antivirus Service for Windows NT/2000
Internal Name: pavsrv
Original Filename: pavsrv.exe
Product Name: Panda Antivirus
Created on: 20/01/2004 2:58:34
Last accessed: 16/11/2004 22:38:59
Last modified: 20/01/2004 2:58:33
#11: [AVENGINE.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
ProcessID: 1740
Priority: Normal
File Size: 108 KB
Version: 1.0.0.1
File Version: 6.03.0.100
Product Version: 6.03
Copyright: Copyright © Panda Software 2001
Company Name: Panda Software
File Description: Proceso análisis independiente
Internal Name: AVENGINE
Original Filename: AVENGINE.exe
Product Name: Panda Antivirus Windows NT/2000
Created on: 20/01/2004 2:58:34
Last accessed: 16/11/2004 22:38:58
Last modified: 07/03/2002 13:09:50
#12: [Explorer.EXE]
File Path: C:\WINDOWS\Explorer.EXE
ProcessID: 436
Priority: Normal
File Size: 983 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Explorador de Windows
Internal Name: explorer
Original Filename: EXPLORER.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:23
Last accessed: 16/11/2004 14:19:46
Last modified: 09/09/2002 12:51:28
#13: [CTHELPER.EXE]
File Path: C:\WINDOWS\System32\CTHELPER.EXE
ProcessID: 684
Priority: Normal
File Size: 24 KB
Version: 1.0.0.2
File Version: 1, 0, 0, 2
Product Version: 1, 0, 0, 2
Copyright: Copyright © 2002
Company Name: Creative Technology Ltd
File Description: CtHelper Application
Internal Name: CtHelper
Original Filename: CtHelper.EXE
Product Name: CtHelper Application
Created on: 19/01/2004 3:22:08
Last accessed: 16/11/2004 13:46:39
Last modified: 02/07/2002 17:56:00
#14: [jusched.exe]
File Path: C:\Archivos de programa\Java\j2re1.4.2_05\bin\jusched.exe
ProcessID: 708
Priority: Normal
File Size: 32 KB
Created on: 03/06/2068 21:05:12
Last accessed: 16/11/2004 13:46:35
Last modified: 03/06/2004 21:05:08
#15: [APVXDWIN.EXE]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE
ProcessID: 712
Priority: Normal
File Size: 124 KB
Version: 3.3.1.0
File Version: 3.03.01
Product Version: 2.04.07
Copyright:
Company Name: Panda Software International
File Description: ApVxdWin
Internal Name: ApVxdWin.exe
Original Filename: ApVxdWin.exe
Product Name: Panda Antivirus Titanium
Created on: 21/01/2004 17:31:41
Last accessed: 16/11/2004 22:39:00
Last modified: 11/03/2003 18:06:06
#16: [qttask.exe]
File Path: C:\Archivos de programa\QuickTime\qttask.exe
ProcessID: 764
Priority: Normal
File Size: 76 KB
Version: 6.4.0.29
File Version: 6.4
Product Version: QuickTime 6.4
Copyright: © Apple Computer, Inc. 2001-2003
Company Name: Apple Computer, Inc.
File Description:
Internal Name: QuickTime Task
Original Filename: QTTask.exe
Product Name: QuickTime
Created on: 19/01/2004 6:18:26
Last accessed: 16/11/2004 13:49:50
Last modified: 19/01/2004 6:18:26
#17: [fs20.exe]
File Path: C:\Archivos de programa\Free Surfer\fs20.exe
ProcessID: 904
Priority: Normal
File Size: 704 KB
Version: 2.1.0.26
File Version: 2.01.0026
Product Version: 2.01.0026
Copyright: EMS-Project, E.Muhonen 2002 ©
Company Name: EMS-Project 2002 ©
File Description:
Internal Name: fs20
Original Filename: fs20.exe
Product Name: Free Surfer mk II
Created on: 18/09/2002 19:25:30
Last accessed: 17/11/2004 3:00:02
Last modified: 18/09/2002 19:25:30
#18: [Remoterm.exe]
File Path: C:\Archivos de programa\Pinnacle\Pinnacle PCTV\Remote\Remoterm.exe
ProcessID: 900
Priority: Normal
File Size: 60 KB
Version: 2.0.0.39
File Version: 2.0.0.39
Product Version: 5, 0, 0, 0
Copyright: Copyright © 2002 Pinnacle Systems
Company Name: Pinnacle Systems
File Description: Remote Control Application
Internal Name: remoterm
Original Filename: remoterm.exe
Product Name: Pinnacle Systems Product Family
Created on: 20/01/2004 2:06:11
Last accessed: 16/11/2004 13:46:36
Last modified: 11/10/2002 14:40:34
#19: [ezSP_Px.exe]
File Path: C:\WINDOWS\System32\ezSP_Px.exe
ProcessID: 1032
Priority: Normal
File Size: 40 KB
Version: 1.0.0.0
File Version: 1, 0, 0, 0
Product Version: 1, 0, 0, 0
Copyright: Copyright © 2002 Easy Systems Japan Ltd.
Company Name: Easy Systems Japan Ltd.
File Description: ezSP_Px MFC Application
Internal Name: ezSP_Px
Original Filename: ezSP_Px.EXE
Product Name: ezSP_Px Application
Created on: 14/09/2004 12:55:58
Last accessed: 16/11/2004 13:46:36
Last modified: 20/08/2002 9:29:26
#20: [winampa.exe]
File Path: C:\Archivos de programa\Winamp\winampa.exe
ProcessID: 1164
Priority: Normal
File Size: 33 KB
Created on: 13/12/2003 1:50:34
Last accessed: 16/11/2004 13:46:37
Last modified: 13/12/2003 1:50:34
#21: [ctfmon.exe]
File Path: C:\WINDOWS\System32\ctfmon.exe
ProcessID: 1140
Priority: Normal
File Size: 13 KB
Version: 5.1.2600.1106
File Version: 5.1.2600.1106 (xpsp1.020828-1920)
Product Version: 5.1.2600.1106
Copyright: © Microsoft Corporation. All rights reserved.
Company Name: Microsoft Corporation
File Description: CTF Loader
Internal Name: CTFMON
Original Filename: CTFMON.EXE
Product Name: Microsoft® Windows® Operating System
Created on: 08/06/2004 15:24:19
Last accessed: 16/11/2004 13:46:37
Last modified: 09/09/2002 12:51:26
#22: [RUNDLL32.EXE]
File Path: C:\WINDOWS\System32\RUNDLL32.EXE
ProcessID: 1176
Priority: Normal
File Size: 31 KB
Version: 5.1.2600.0
File Version: 5.1.2600.0 (xpclient.010817-1148)
Product Version: 5.1.2600.0
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Ejecutar un archivo DLL como una aplicación
Internal Name: rundll
Original Filename: RUNDLL.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 24/08/2001 11:00:00
Last accessed: 16/11/2004 21:46:52
Last modified: 24/08/2001 11:00:00
#23: [PCLEScheduler.exe]
File Path: C:\Archivos de programa\Pinnacle\Shared Files\Programs\Scheduler\PCLEScheduler.exe
ProcessID: 1452
Priority: Normal
File Size: 232 KB
Version: 1.0.1.6
File Version: 1.0.1.6
Product Version: 1.0.1.1
Copyright: Copyright © 2002 - 2003
Company Name: Pinnacle Systems GmbH, Braunschweig
File Description: Pinnacle Scheduler Application
Internal Name: PCLEScheduler
Original Filename: PCLEScheduler.exe
Product Name: Scheduler
Created on: 20/01/2004 2:05:52
Last accessed: 16/11/2004 21:53:55
Last modified: 31/03/2003 17:22:50
#24: [stickies.exe]
File Path: D:\Archivos de programa\stickies\stickies.exe
ProcessID: 1620
Priority: Normal
File Size: 248 KB
Version: 4.0.5.2
File Version: 4.5b
Product Version: 4.5b
Copyright: Copyright © Tom Revell 2003
Company Name:
File Description: Stickies 4.5b
Internal Name: Stickies
Original Filename: stickies.exe
Product Name: Stickies
Created on: 02/11/2003 15:38:01
Last accessed: 16/11/2004 13:46:45
Last modified: 02/11/2003 15:38:01
#25: [pavProxy.exe]
File Path: C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\pavProxy.exe
ProcessID: 1804
Priority: Normal
File Size: 104 KB
Created on: 20/01/2004 2:58:36
Last accessed: 16/11/2004 22:38:59
Last modified: 20/01/2004 2:58:33
#26: [d3uh.exe]
File Path: C:\WINDOWS\system32\d3uh.exe
ProcessID: 3092
Priority: Normal
File Size: 26 KB
Created on: 08/11/2004 1:12:24
Last accessed: 17/11/2004 3:16:16
Last modified: 08/11/2004 1:12:24
#27: [emule.exe]
File Path: C:\Archivos de programa\eMule\emule.exe
ProcessID: 3788
Priority: Normal
File Size: 4720 KB
Version: 0.44.1.38
File Version: 0.44.1 Unicode
Product Version: 0.44.1 Unicode
Copyright: Copyright © 2002-2004 Merkur - read license.txt for more infos
Company Name: http://www.emule-project.net
File Description: eMule
Internal Name: emule.exe
Original Filename: emule.exe
Product Name: eMule
Created on: 25/10/2004 3:26:36
Last accessed: 17/11/2004 2:53:00
Last modified: 24/10/2004 13:57:10
#28: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 452
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 2:59:13
Last modified: 09/09/2002 12:51:30
#29: [server.exe]
File Path: C:\ARCHIV~1\Pinnacle\SHARED~1\Filter\server.exe
ProcessID: 1660
Priority: Normal
File Size: 72 KB
Version: 2.0.0.9
File Version: 2, 0, 0, 9
Product Version: 24, 0, 0, 0
Copyright: Copyright © 1997-2003 Pinnacle Systems
Company Name: Pinnacle Systems
File Description: OOProcServer
Internal Name: server
Original Filename: server.exe
Product Name: Pinnacle STUDIO PCTV
Created on: 19/01/2004 3:23:32
Last accessed: 16/11/2004 21:53:52
Last modified: 09/04/2003 17:22:24
#30: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2712
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#31: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2300
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#32: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 3688
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#33: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2264
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#34: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 1476
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#35: [iexplore.exe]
File Path: C:\Archivos de programa\Internet Explorer\iexplore.exe
ProcessID: 2324
Priority: Normal
File Size: 89 KB
Version: 6.0.2800.1106
File Version: 6.00.2800.1106 (xpsp1.020828-1920)
Product Version: 6.00.2800.1106
Copyright: © Microsoft Corporation. Reservados todos los derechos.
Company Name: Microsoft Corporation
File Description: Internet Explorer
Internal Name: iexplore
Original Filename: IEXPLORE.EXE
Product Name: Sistema operativo Microsoft® Windows®
Created on: 08/06/2004 15:24:32
Last accessed: 17/11/2004 3:16:30
Last modified: 09/09/2002 12:51:30
#36: [HiJack.exe]
File Path: C:\Archivos de programa\BulletProofSoft.com\SpywareRemover\HS\HiJack.exe
ProcessID: 2760
Priority: Normal
File Size: 392 KB
Version: 2.0.0.0
File Version: 2, 0, 0, 0
Product Version: 2, 0, 0, 0
Copyright: Copyright © 2003
Company Name:
File Description: HiJack MFC Application
Internal Name: System Hijack Scanner
Original Filename: HiJack.EXE
Product Name: System Hijack Scanner
Created on: 26/04/2004 20:34:14
Last accessed: 17/11/2004 3:15:44
Last modified: 26/04/2004 20:34:14
System Hijack Scanner Entries:
---------------
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Start Page=http://www.estrelladigital.es/
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Start Page=about:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main, Local Page=C:\WINDOWS\SYSTEM32\blank.htm
R0 - HKLM\Software\Microsoft\Internet Explorer\Main, Local Page=C:\WINDOWS\SYSTEM32\blank.htm
R0 - HKLM\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_page_url=about:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, Default_search_url=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKCU\Software\Microsoft\Internet Explorer\Main, search bar=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKLM\Software\Microsoft\Internet Explorer\Main, search bar=res://C:\WINDOWS\wodos.dll/sp.html#11111
R1 - HKCU\SOFTWARE\Microsoft\Internet Explorer\Search, SearchAssistant=res://C:\WINDOWS\wodos.dll/sp.html#11111
R3 - URLSearchHook: (no name) - {AA0A9B7C-1E92-535C-0904-539590028603} - C:\WINDOWS\d3hj.dll
O2 - BHO: (no name) - {AA0A9B7C-1E92-535C-0904-539590028603} - C:\WINDOWS\d3hj.dll
O3 - ToolBar: FlashGet Bar - {E0E899AB-F487-11D5-8D29-0050BA6940E3} - C:\ARCHIV~1\FlashGet\fgiebar.dll
O3 - ToolBar: (no name) - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\WINDOWS\System32\NvCpl.dll,NvStartup (file missing)
O4 - HKLM\..\Run: [nwiz] nwiz.exe /install (file missing)
O4 - HKLM\..\Run: [WINDVDPatch] CTHELPER.EXE (file missing)
O4 - HKLM\..\Run: [Jet Detection] "C:\Archivos de programa\Creative\SBLive\PROGRAM\ADGJDet.exe"
O4 - HKLM\..\Run: [SunJavaUpdateSched] C:\Archivos de programa\Java\j2re1.4.2_05\bin\jusched.exe
O4 - HKLM\..\Run: [APVXDWIN] "C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\APVXDWIN.EXE" /s
O4 - HKLM\..\Run: [QuickTime Task] "C:\Archivos de programa\QuickTime\qttask.exe" -atboottime (file missing)
O4 - HKLM\..\Run: [freesurfer] C:\Archivos de programa\Free Surfer\fs20.exe
O4 - HKLM\..\Run: [PCTVRemote] C:\Archivos de programa\Pinnacle\Pinnacle PCTV\Remote\Remoterm.exe
O4 - HKLM\..\Run: [PinnacleDriverCheck] C:\WINDOWS\System32\PSDrvCheck.exe -CheckReg (file missing)
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [ezShieldProtector for Px] C:\WINDOWS\System32\ezSP_Px.exe
O4 - HKLM\..\Run: [WinampAgent] C:\Archivos de programa\Winamp\winampa.exe
O4 - HKLM\..\Run: [sdkkp.exe] C:\WINDOWS\system32\sdkkp.exe (file missing)
O4 - HKLM\..\Run: [iedg.exe] C:\WINDOWS\system32\iedg.exe (file missing)
O4 - HKLM\..\Run: [crll.exe] C:\WINDOWS\system32\crll.exe (file missing)
O4 - HKLM\..\Run: [d3uh.exe] C:\WINDOWS\system32\d3uh.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\System32\ctfmon.exe
O4 - HKCU\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\WINDOWS\System32\NVMCTRAY.DLL,NvTaskbarInit (file missing)
O4 - Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\Stickies.lnk
O4 - User Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\desktop.ini
O4 - User Start Up: C:\Documents and Settings\DangerBoyllsS\Menú Inicio\Programas\Inicio\Stickies.lnk
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
O4 - Global Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Pinnacle Scheduler.lnk
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\desktop.ini
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Microsoft Office.lnk
O4 - Global User Start Up: C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Pinnacle Scheduler.lnk
O5 - HKCU\control panel\don't load: ncpa.cpl = No
O5 - HKCU\control panel\don't load: odbccp32.cpl = No
O8 - Extra Context Menu Items: Descargar TODO con FlashGet - C:\Archivos de programa\FlashGet\jc_all.htm
O8 - Extra Context Menu Items: Descargar usando FlashGet - C:\Archivos de programa\FlashGet\jc_link.htm
O11 - Options Group: [JAVA_SUN] Java (Sun)
O12 - Plugin For .spop - C:\Archivos de programa\Internet Explorer\Plugins\NPDocBox.dll
O16 - DPF: {00000075-9980-0010-8000-00AA00389B71} ((no name)) - http://codecs.microsoft.com/codecs/i386/voxacm.CAB
O16 - DPF: {00B71CFB-6864-4346-A978-C0A14556272C} (Checkers Class) - http://messenger.zone.msn.com/binary/msgrchkr.cab
O16 - DPF: {2917297F-F02B-4B9D-81DF-494B6333150B} (Minesweeper Flags Class) - http://messenger.zone.msn.com/binary/MineSweeper.cab
O16 - DPF: {2C0F2AEA-3A9B-46DB-A7BE-80FF329E415D} ((no name)) - http://www.accesoplugin.com/dialercab/PPremiumInternacional.cab
O16 - DPF: {469C7080-8EC8-43A6-AD97-45848113743C} ((no name)) - http://akamai.downloadv3.com/binaries/IA/nethv32_ES_XP.cab
O16 - DPF: {4B6015E7-3ABB-45DC-96B7-55A843751F28} ((no name)) - http://www.contenidospc.com/ruboskizo2.cab
O16 - DPF: {50AD557E-3426-41FD-AFDD-2AF39BB1C387} ((no name)) - http://akamai.downloadv3.com/binaries/Live...ice_5_ES_XP.cab
O16 - DPF: {5C3A9EA6-4068-46B8-8B5A-692FB10607B1} ((no name)) - http://www.grupomarineda.net/auto/DialerData.cab
O16 - DPF: {5F426A93-0821-47D2-A126-5A48A874B289} ((no name)) - http://212.145.159.194/251065/dialercab/WebRecomendada.cab
O16 - DPF: {6414512B-B978-451D-A0D8-FCFDF33E833C} (WUWebControl Class) - http://v5.windowsupdate.microsoft.com/v5co...b?1100610020984
O16 - DPF: {73F0FD85-BD47-4A95-86D1-DE38860462C1} ((no name)) - http://www.accesoplugin.com/dialercab/IberoDialerHTML.cab
O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 1.4.2_05) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {8E0D4DE5-3180-4024-A327-4DFAD1796A8D} (MessengerStatsClient Class) - http://messenger.zone.msn.com/binary/MessengerStatsClient.cab
O16 - DPF: {8E65B894-C2E9-11D5-BCD3-00E018987609} ((no name)) - http://09.sharedsource.org/cabs/adictosalcinees.cab
O16 - DPF: {C1BAC744-8F0B-11D0-89E7-00C0A8295197} ((no name)) - http://www.crtvg.es/camweb/camera.cab
O16 - DPF: {CAFEEFAC-0014-0002-0003-ABCDEFFEDCBA} (Java Plug-in 1.4.2_03) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {CAFEEFAC-0014-0002-0005-ABCDEFFEDCBA} (Java Plug-in 1.4.2_05) - http://java.sun.com/products/plugin/autodl...indows-i586.cab
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://download.macromedia.com/pub/shockwave/cabs/flash/swflash.cab
O16 - DPF: {D719897A-B07A-4C0C-AEA9-9B663A28DFCB} ((no name)) - http://ax.phobos.apple.com.edgesuite.net/detection/ITDetector.cab
O16 - DPF: {FA3662C3-B8E8-11D6-A667-0010B556D978} ((no name)) - http://cdn.digitalcity.com/_media/dalaillama/ampx.cab
O18 - Protocol: about - {3050F406-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: cdl - {3dd53d40-7b8b-11D0-b013-00aa0059ce02} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: dvd - {12D51199-0DB5-46FE-A120-47A3D7D937CC} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: gopher - {79eac9e4-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: javascript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: lid - {5C135180-9973-46D9-ABF4-148267CBB8BF} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: local - {79eac9e7-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: mailto - {3050f3DA-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: mhtml - {05300401-BCBC-11d0-85E3-00C04FD85AB4} - C:\WINDOWS\System32\inetcomm.dll
O18 - Protocol: mk - {79eac9e6-baf9-11ce-8c82-00aa004ba90b} - C:\WINDOWS\System32\urlmon.dll
O18 - Protocol: ms-its - {9D148291-B9C8-11D0-A4CC-0000F80149F6} - C:\WINDOWS\System32\itss.dll
O18 - Protocol: res - {3050F3BC-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: sysimage - {76E67A63-06E9-11D2-A840-006008059382} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: tv - {CBD30858-AF45-11D2-B6D6-00C04FBBDE6E} - C:\WINDOWS\System32\msvidctl.dll
O18 - Protocol: vbscript - {3050F3B2-98B5-11CF-BB82-00AA00BDCE0B} - C:\WINDOWS\System32\mshtml.dll
O18 - Protocol: vnd.ms.radio - {3DA2AA3B-3D96-11D2-9BD2-204C4F4F5020} - C:\WINDOWS\System32\msdxm.ocx
O18 - Protocol: wia - {13F3EA8B-91D7-4F0A-AD76-D2853AC8BECE} - C:\WINDOWS\System32\wiascr.dll