I AM posting these at jabuck's request Jabuck I didn't understand much of what you told me ABOUT a long scan but here it goes HIJACKTHIS LOG Logfile of Trend Micro HijackThis v2.0.2 Scan saved at 11:53:07 p.m., on 15/11/2007 Platform: Windows XP SP2 (WinNT 5.01.2600) MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180) Boot mode: Normal Running processes: C:\WINDOWS\System32\smss.exe C:\WINDOWS\system32\winlogon.exe C:\WINDOWS\system32\services.exe C:\WINDOWS\system32\lsass.exe C:\WINDOWS\system32\svchost.exe C:\WINDOWS\System32\svchost.exe C:\WINDOWS\system32\spoolsv.exe C:\WINDOWS\Explorer.exe C:\WINDOWS\system32\CTsvcCDA.exe C:\Archivos de programa\Nero\Nero 7\InCD\InCDsrv.exe C:\Archivos de programa\Eset\nod32kui.exe C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7DEBUG\MDM.exe C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe C:\WINDOWS\system32\nvsvc32.exe C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe C:\Archivos de programa\CyberLink DVD Solution\PowerDVD\PDVDServ.exe C:\WINDOWS\system32\svchost.exe C:\Archivos de programa\Nero\Nero 7\InCD\InCD.exe C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe C:\ARCHIV~1\HEWLET~1\HPSHAR~1\hpgs2wnf.exe C:\Archivos de programa\Java\jre1.6.0_03\bin\jusched.exe C:\WINDOWS\system32\ctfmon.exe C:\Archivos de programa\MSN Messenger\MsnMsgr.exe C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe C:\Archivos de programa\Creative\Sync Manager Unicode\CTSyncU.exe C:\Archivos de programa\Linksys EasyLink Advisor\LinksysAgent.exe C:\WINDOWS\system32\wscntfy.exe C:\Archivos de programa\BitLord\BitLord.exe C:\Archivos de programa\Eset\nod32krn.exe C:\ARCHIV~1\MOZILL~1\FIREFOX.exe C:\WINDOWS\system32\wuauclt.exe C:\Archivos de programa\Trend Micro\HijackThis\HijackThis.exe R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos O2 - BHO: Adobe PDF Reader Link Helper - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Archivos de programa\Adobe\Acrobat 7.0\ActiveX\AcroIEHelper.dll O2 - BHO: Spybot-S&D IE Protection - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Archivos de programa\Java\jre1.6.0_03\bin\ssv.dll O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - c:\archivos de programa\google\googletoolbar4.dll O2 - BHO: Google Toolbar Notifier BHO - {AF69DE43-7D58-4638-B6FA-CE66B5AD205D} - C:\Archivos de programa\Google\GoogleToolbarNotifier\2.0.301.7164\swg.dll O2 - BHO: Windows Live Toolbar Helper - {BDBD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar4.dll O3 - Toolbar: Windows Live Toolbar - {BDAD1DAD-C946-4A17-ADC1-64B5B4FF55D0} - C:\Archivos de programa\Windows Live Toolbar\msntb.dll O4 - HKLM\..\Run: [nod32kui] "C:\Archivos de programa\Eset\nod32kui.exe" /WAITSERVICE O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.exe C:\WINDOWS\system32\NvCpl.dll,NvStartup O4 - HKLM\..\Run: [nwiz] nwiz.exe /install O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.exe C:\WINDOWS\system32\NvMcTray.dll,NvTaskbarInit O4 - HKLM\..\Run: [SoundMAXPnP] C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe O4 - HKLM\..\Run: [SoundMAX] "C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe" /tray O4 - HKLM\..\Run: [zzzHPSETUP] F:\Setup.exe O4 - HKLM\..\Run: [Share-to-Web Namespace Daemon] C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe O4 - HKLM\..\Run: [RemoteControl] "C:\Archivos de programa\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe O4 - HKLM\..\Run: [InCD] C:\Archivos de programa\Nero\Nero 7\InCD\InCD.exe O4 - HKLM\..\Run: [TkBellExe] "C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" -osboot O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Archivos de programa\Java\jre1.6.0_03\bin\jusched.exe" O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe O4 - HKCU\..\Run: [MsnMsgr] "C:\Archivos de programa\MSN Messenger\MsnMsgr.exe" /background O4 - HKCU\..\Run: [BitComet] "C:\Archivos de programa\BitLord\BitLord.exe" O4 - HKCU\..\Run: [swg] C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe O4 - HKCU\..\Run: [CTSyncU.exe] "C:\Archivos de programa\Creative\Sync Manager Unicode\CTSyncU.exe" O4 - HKCU\..\Run: [eMuleAutoStart] C:\Archivos de programa\eMule\emule.exe -AutoStart O4 - HKCU\..\Run: [EasyLinkAdvisor] "C:\Archivos de programa\Linksys EasyLink Advisor\LinksysAgent.exe" /startup O4 - HKUS\S-1-5-19\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.exe (User 'SERVICIO LOCAL') O4 - HKUS\S-1-5-20\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.exe (User 'Servicio de red') O4 - HKUS\S-1-5-18\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.exe (User 'SYSTEM') O4 - HKUS\.DEFAULT\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\CTFMON.exe (User 'Default user') O4 - Startup: Adobe Gamma.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe O4 - Global Startup: Inicio rápido de Adobe Reader.lnk = C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe O8 - Extra context menu item: &Windows Live Search - res://C:\Archivos de programa\Windows Live Toolbar\msntb.dll/search.htm O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\OFFICE11\EXCEL.EXE/3000 O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Archivos de programa\Java\jre1.6.0_03\bin\npjpi160_03.dll O9 - Extra button: (no name) - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll O9 - Extra 'Tools' menuitem: Spybot - Search & Destroy Configuration - {DFB852A3-47F8-48C4-A200-58CAB36FD2A2} - C:\ARCHIV~1\SPYBOT~1\SDHelper.dll O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://carlacompagnone.spaces.live.... O16 - DPF: {7FC1B346-83E6-4774-8D20-1A6B09B0E737} (Windows Live Photo Upload Control) - http://salvatorinox.spaces.live.com... O17 - HKLM\System\CCS\Services\Tcpip\..\{A60C6F32-F2BB-4056-AA78-0032D92E2548}: NameServer = 216.72.226.12,216.72.226.10 O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - C:\WINDOWS\system32\CTsvcCDA.exe O23 - Service: Google Updater Service (gusvc) - Google - C:\Archivos de programa\Google\Common\Google Updater\GoogleUpdaterService.exe O23 - Service: InCD Helper (InCDsrv) - Nero AG - C:\Archivos de programa\Nero\Nero 7\InCD\InCDsrv.exe O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Archivos de programa\Eset\nod32krn.exe O23 - Service: NVIDIA Display Driver Service (NVSvc) - NVIDIA Corporation - C:\WINDOWS\system32\nvsvc32.exe O23 - Service: SoundMAX Agent Service (SoundMAX Agent Service (default)) - Analog Devices, Inc. - C:\Archivos de programa\Analog Devices\SoundMAX\SMAgent.exe -- End of file - 7727 bytes COMBOFIX LOG ComboFix 07-11-08.1 - SALVADOR1 2007-11-15 23:53:54.5 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1252.34.3082.18.582 [GMT -4:00] Se ejecuta desde: C:\Documents and Settings\SALVADOR1\Escritorio\ANTIVIRUSES\ComboFix.exe . (((((((((((((((((( Archivos creados desde 2007-10-16 - 2007-11-16 ))))))))))))))))))))))))))))))))) . 2007-11-10 17:59 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-10 12:48 <DIR> d-------- C:\Archivos de programa\Trend Micro 2007-11-10 12:46 3,366 --a------ C:\WINDOWS\system32\tmp.reg 2007-11-07 21:39 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Spybot - Search & Destroy . (((((((((((((((((((((((((((((((((((((( Reporte Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-10-25 16:56 8,496,640 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-02 02:03 --------- d-----w C:\Archivos de programa\Java 2007-10-02 01:47 --------- d-----w C:\Archivos de programa\Archivos comunes\Java 2007-08-22 13:13 96,768 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll 2007-08-22 13:13 661,504 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll 2007-08-22 13:13 616,448 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-08-22 13:13 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-08-22 13:13 532,480 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll 2007-08-22 13:13 474,624 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 13:13 449,024 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-08-22 13:13 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll 2007-08-22 13:13 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-08-22 13:13 3,079,168 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-08-22 13:13 251,392 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll 2007-08-22 13:13 205,312 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-08-22 13:13 16,384 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-08-22 13:13 151,552 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 13:13 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll 2007-08-22 13:13 1,495,040 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 13:13 1,056,256 ----a-w C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 13:13 1,022,976 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll 2007-08-21 10:30 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe 2007-08-21 06:17 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-21 06:17 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-08-21 04:17 356,352 ----a-w C:\WINDOWS\eSellerateEngine.dll 2006-06-05 13:19 61 ----a-w C:\Archivos de programa\bit3.bat 2006-06-05 13:19 61 ----a-w C:\Archivos de programa\bit2.bat 2006-06-05 13:19 61 ----a-w C:\Archivos de programa\bit.bat 2006-06-05 13:19 54 ----a-w C:\Archivos de programa\inc1.bat 2006-06-05 13:19 41 ----a-w C:\Archivos de programa\sleep.bat 2006-06-05 13:19 1,049,087 ----a-w C:\Archivos de programa\Ahead Nero Burning Rom 7 cracked.exe 2006-06-05 13:19 1,049,039 ----a-w C:\Archivos de programa\Deutsch Ahead Nero Burning Rom 7 crack.exe 2006-06-05 13:19 0 ----a-w C:\Archivos de programa\temp3.exe.txt 2006-06-05 13:19 0 ----a-w C:\Archivos de programa\temp2.exe.txt 2006-06-05 13:19 0 ----a-w C:\Archivos de programa\temp1.exe.txt 2006-05-19 13:20 0 ----a-w C:\Documents and Settings\SALVADOR1\.exe 2005-10-11 17:31 1,049,034 ----a-w C:\Archivos de programa\US Ahead Nero Burning Rom 7 crack.exe 2004-03-11 17:27 40,960 ----a-w C:\Archivos de programa\Uninstall_CDS.exe . ((((((((((((((((((((((((((((((((( Cargando Puntos Reg )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nod32kui"="C:\Archivos de programa\Eset\nod32kui.exe" [2006-05-18 10:40] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2001-12-31 12:04] "nwiz"="nwiz.exe" [] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2001-12-31 12:04] "SoundMAXPnP"="C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe" [2003-05-29 16:28] "SoundMAX"="C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe" [2003-05-30 09:42] "zzzHPSETUP"="F:\Setup.exe" [2000-09-20 19:15] "Share-to-Web Namespace Daemon"="C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2001-07-03 09:11] "RemoteControl"="C:\Archivos de programa\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2003-12-08 17:35] "NeroFilterCheck"="C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40] "InCD"="C:\Archivos de programa\Nero\Nero 7\InCD\InCD.exe" [2006-04-05 11:38] "TkBellExe"="C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" [2007-08-22 10:03] "SunJavaUpdateSched"="C:\Archivos de programa\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 13:42] "MsnMsgr"="C:\Archivos de programa\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54] "BitComet"="C:\Archivos de programa\BitLord\BitLord.exe" [2005-05-06 20:47] "swg"="C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-08 02:36] "CTSyncU.exe"="C:\Archivos de programa\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-09-13 11:00] "eMuleAutoStart"="C:\Archivos de programa\eMule\emule.exe" [] "EasyLinkAdvisor"="C:\Archivos de programa\Linksys EasyLink Advisor\LinksysAgent.exe" [2006-04-02 20:07] C:\Documents and Settings\SALVADOR1\Men£ Inicio\Programas\Inicio\ Adobe Gamma.lnk - C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50] C:\Documents and Settings\All Users\Men£ Inicio\Programas\Inicio\ Inicio r pido de Adobe Reader.lnk - C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk] path=C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk backup=C:\WINDOWS\pss\Inicio rápido de Adobe Reader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMBgMonitor.exe" R2 nvcap;nVidia WDM Video Capture (universal);C:\WINDOWS\system32\DRIVERS\nvcap.sys S3 XIRLINK;Veo PC Camera;C:\WINDOWS\system32\DRIVERS\ucdnt.sys . Contenido de carpeta 'Tareas Programadas' "2007-11-16 03:36:02 C:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job" - C:\Archivos de programa\Windows Live Toolbar\MSNTBUP.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-15 23:54:58 Windows 5.1.2600 Service Pack 2 FAT NTAPI escaneando procesos ocultos ... escaneando entradas ocultas de autostart ... escaneando archivos ocultos ... el escaneo se completo con exito archivos ocultos: 0 ************************************************************************** . Tiempo completado: 2007-11-15 23:55:23 C:\ComboFix3.txt ... 2007-11-13 00:58 C:\ComboFix2.txt ... 2007-11-14 23:48 . --- E O F ---

Navigate to C:\Program Files > click file> new> compressed (zipped)folder. This created a .zip folder in C:Program files. next drag these files into the newly created .zip folder: C:\Archivos de programa\bit3.bat C:\Archivos de programa\bit2.bat C:\Archivos de programa\bit.bat C:\Archivos de programa\inc1.bat C:\Archivos de programa\sleep.bat C:\Archivos de programa\temp3.exe.txt C:\Archivos de programa\temp2.exe.txt C:\Archivos de programa\temp1.exe.txt Reboot the computer and post a new Combofix log please.

OK SO I CReated a Zip file, and dragged inside all the files you told me to, now, this files went inside the zip but still remained in the program files folder so, i deleted them and saved them inside the recycle bin and then runned the combofix to get the following log ComboFix 07-11-08.1 - SALVADOR1 2007-11-16 1:06:12.6 - [color=red][b]FAT32[/b][/color]x86 Microsoft Windows XP Professional 5.1.2600.2.1252.34.3082.18.542 [GMT -4:00] Se ejecuta desde: C:\Documents and Settings\SALVADOR1\Escritorio\ANTIVIRUSES\ComboFix.exe . (((((((((((((((((( Archivos creados desde 2007-10-16 - 2007-11-16 ))))))))))))))))))))))))))))))))) . 2007-11-16 00:59 2,356 --a------ C:\Archivos de programa\Compressed.zip 2007-11-10 17:59 51,200 --a------ C:\WINDOWS\NirCmd.exe 2007-11-10 12:48 <DIR> d-------- C:\Archivos de programa\Trend Micro 2007-11-10 12:46 3,366 --a------ C:\WINDOWS\system32\tmp.reg 2007-11-07 21:39 <DIR> d-------- C:\Documents and Settings\All Users\Datos de programa\Spybot - Search & Destroy . (((((((((((((((((((((((((((((((((((((( Reporte Find3M ))))))))))))))))))))))))))))))))))))))))))))))))))) . 2007-11-16 05:03 18,768 ----a-w C:\WINDOWS\system32\drivers\secdrv.sys 2007-10-25 16:56 8,496,640 ----a-w C:\WINDOWS\system32\dllcache\shell32.dll 2007-10-02 02:03 --------- d-----w C:\Archivos de programa\Java 2007-10-02 01:47 --------- d-----w C:\Archivos de programa\Archivos comunes\Java 2007-08-22 13:13 96,768 ----a-w C:\WINDOWS\system32\dllcache\inseng.dll 2007-08-22 13:13 661,504 ----a-w C:\WINDOWS\system32\dllcache\wininet.dll 2007-08-22 13:13 616,448 ----a-w C:\WINDOWS\system32\dllcache\urlmon.dll 2007-08-22 13:13 55,808 ----a-w C:\WINDOWS\system32\dllcache\extmgr.dll 2007-08-22 13:13 532,480 ----a-w C:\WINDOWS\system32\dllcache\mstime.dll 2007-08-22 13:13 474,624 ----a-w C:\WINDOWS\system32\dllcache\shlwapi.dll 2007-08-22 13:13 449,024 ----a-w C:\WINDOWS\system32\dllcache\mshtmled.dll 2007-08-22 13:13 39,424 ----a-w C:\WINDOWS\system32\dllcache\pngfilt.dll 2007-08-22 13:13 357,888 ----a-w C:\WINDOWS\system32\dllcache\dxtmsft.dll 2007-08-22 13:13 3,079,168 ----a-w C:\WINDOWS\system32\dllcache\mshtml.dll 2007-08-22 13:13 251,392 ----a-w C:\WINDOWS\system32\dllcache\iepeers.dll 2007-08-22 13:13 205,312 ----a-w C:\WINDOWS\system32\dllcache\dxtrans.dll 2007-08-22 13:13 16,384 ----a-w C:\WINDOWS\system32\dllcache\jsproxy.dll 2007-08-22 13:13 151,552 ----a-w C:\WINDOWS\system32\dllcache\cdfview.dll 2007-08-22 13:13 146,432 ----a-w C:\WINDOWS\system32\dllcache\msrating.dll 2007-08-22 13:13 1,495,040 ----a-w C:\WINDOWS\system32\dllcache\shdocvw.dll 2007-08-22 13:13 1,056,256 ----a-w C:\WINDOWS\system32\dllcache\danim.dll 2007-08-22 13:13 1,022,976 ----a-w C:\WINDOWS\system32\dllcache\browseui.dll 2007-08-21 10:30 18,432 ----a-w C:\WINDOWS\system32\dllcache\iedw.exe 2007-08-21 06:17 683,520 ----a-w C:\WINDOWS\system32\inetcomm.dll 2007-08-21 06:17 683,520 ----a-w C:\WINDOWS\system32\dllcache\inetcomm.dll 2007-08-21 04:17 356,352 ----a-w C:\WINDOWS\eSellerateEngine.dll 2006-06-05 13:19 1,049,087 ----a-w C:\Archivos de programa\Ahead Nero Burning Rom 7 cracked.exe 2006-06-05 13:19 1,049,039 ----a-w C:\Archivos de programa\Deutsch Ahead Nero Burning Rom 7 crack.exe 2006-05-19 13:20 0 ----a-w C:\Documents and Settings\SALVADOR1\.exe 2005-10-11 17:31 1,049,034 ----a-w C:\Archivos de programa\US Ahead Nero Burning Rom 7 crack.exe 2004-03-11 17:27 40,960 ----a-w C:\Archivos de programa\Uninstall_CDS.exe . ((((((((((((((((((((((((((((((((( Cargando Puntos Reg )))))))))))))))))))))))))))))))))))))))))))))))))) . . *Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "nod32kui"="C:\Archivos de programa\Eset\nod32kui.exe" [2006-05-18 10:40] "NvCplDaemon"="C:\WINDOWS\system32\NvCpl.dll" [2001-12-31 12:04] "nwiz"="nwiz.exe" [] "NvMediaCenter"="C:\WINDOWS\system32\NvMcTray.dll" [2001-12-31 12:04] "SoundMAXPnP"="C:\Archivos de programa\Analog Devices\SoundMAX\SMax4PNP.exe" [2003-05-29 16:28] "SoundMAX"="C:\Archivos de programa\Analog Devices\SoundMAX\Smax4.exe" [2003-05-30 09:42] "zzzHPSETUP"="F:\Setup.exe" [2000-09-20 19:15] "Share-to-Web Namespace Daemon"="C:\Archivos de programa\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe" [2001-07-03 09:11] "RemoteControl"="C:\Archivos de programa\CyberLink DVD Solution\PowerDVD\PDVDServ.exe" [2003-12-08 17:35] "NeroFilterCheck"="C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe" [2006-01-12 16:40] "InCD"="C:\Archivos de programa\Nero\Nero 7\InCD\InCD.exe" [2006-04-05 11:38] "TkBellExe"="C:\Archivos de programa\Archivos comunes\Real\Update_OB\realsched.exe" [2007-08-22 10:03] "SunJavaUpdateSched"="C:\Archivos de programa\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11] [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "CTFMON.EXE"="C:\WINDOWS\system32\ctfmon.exe" [2004-08-19 13:42] "MsnMsgr"="C:\Archivos de programa\MSN Messenger\MsnMsgr.exe" [2007-01-19 12:54] "BitComet"="C:\Archivos de programa\BitLord\BitLord.exe" [2005-05-06 20:47] "swg"="C:\Archivos de programa\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe" [2007-07-08 02:36] "CTSyncU.exe"="C:\Archivos de programa\Creative\Sync Manager Unicode\CTSyncU.exe" [2006-09-13 11:00] "eMuleAutoStart"="C:\Archivos de programa\eMule\emule.exe" [] "EasyLinkAdvisor"="C:\Archivos de programa\Linksys EasyLink Advisor\LinksysAgent.exe" [2006-04-02 20:07] C:\Documents and Settings\SALVADOR1\Men£ Inicio\Programas\Inicio\ Adobe Gamma.lnk - C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe [2005-03-16 19:16:50] C:\Documents and Settings\All Users\Men£ Inicio\Programas\Inicio\ Inicio r pido de Adobe Reader.lnk - C:\Archivos de programa\Adobe\Acrobat 7.0\Reader\reader_sl.exe [2005-09-23 22:05:26] [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupfolder\C:^Documents and Settings^All Users^Menú Inicio^Programas^Inicio^Inicio rápido de Adobe Reader.lnk] path=C:\Documents and Settings\All Users\Menú Inicio\Programas\Inicio\Inicio rápido de Adobe Reader.lnk backup=C:\WINDOWS\pss\Inicio rápido de Adobe Reader.lnkCommon Startup [HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMBgMonitor.exe" R2 nvcap;nVidia WDM Video Capture (universal);C:\WINDOWS\system32\DRIVERS\nvcap.sys S3 XIRLINK;Veo PC Camera;C:\WINDOWS\system32\DRIVERS\ucdnt.sys . Contenido de carpeta 'Tareas Programadas' "2007-11-16 04:36:02 C:\WINDOWS\Tasks\Comprobar actualizaciones de Windows Live Toolbar.job" - C:\Archivos de programa\Windows Live Toolbar\MSNTBUP.exe . ************************************************************************** catchme 0.3.1250 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net Rootkit scan 2007-11-16 01:07:26 Windows 5.1.2600 Service Pack 2 FAT NTAPI escaneando procesos ocultos ... escaneando entradas ocultas de autostart ... escaneando archivos ocultos ... el escaneo se completo con exito archivos ocultos: 0 ************************************************************************** . Tiempo completado: 2007-11-16 1:07:50 C:\ComboFix2.txt ... 2007-11-15 23:55 C:\ComboFix3.txt ... 2007-11-14 23:48 . --- E O F ---

The log produced by the following scan will be extemely long so if needed make two post to get all the log posted. Please download WinPFind3u.exe by oldtimer to your desktop and extract all files. It will create a folder named WinPFind3u on your desktop. Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program. In the Processes group click ALL In the Win32 Services group click ALL In the Driver Services group click ALL In the Registry group click ALL In the Files Created Within group click 60 days Make sure Non-Microsoft only is UNCHECKED In the Files Modified Within group select 30 days Make sure Non-Microsoft only is UNCHECKED In the File String Search group select ALL in the Additional scans sections please press select ALL Now click the Run Scan button on the toolbar. The program will be scanning huge amounts of data so depending on your system it could take a long time to complete. Let it run unhindered until it finishes. When the scan is complete Notepad will open with the report file loaded in it. Save that notepad file but click on the "Format" menu and make sure that "word wrap" is not checked. If it is then click on it to uncheck it. Open the WinPFind3u folder and double-click on WinPFind3U.exe to start the program. Copy and paste the information in the quote box below into the pane where it says "Paste fix here" and then click the Run Fix button. The fix should only take a very short time and then you will be asked if you want to reboot. Choose Yes. Post the latest .log file from the WinPFind3u folder (it will have a name in the format mmddyyyy_hhmmss.log)

I don't understand! What quote box? I copy and paste the complete log in paste fix here? cause that's what I did and it is taking really long

In the comments box. And as I said it is a long scan but maybe we can see the files that are infecting the computer.

I am posting the results of the winpfind3u scan, this are the results WITHOUT THE FIX, i don't understand what do i have to paste in the "paste fix here " box WinPFind3 logfile created on: 17/11/2007 10:50:15 a.m. WinPFind3U by OldTimer - Version 1.0.42 Folder = C:\Documents and Settings\SALVADOR1\Escritorio\WinPFind3u\ Microsoft Windows XP Service Pack 2 (Version = 5.1.2600) Internet Explorer (Version = 6.0.2900.2180) 1022,73 Mb Total Physical Memory | 621,03 Mb Available Physical Memory | 60,72% Memory free 2,40 Gb Paging File | 2,10 Gb Available in Paging File | 87,43% Paging File free Paging file location(s): C:\pagefile.sys 1536 3072; %SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Archivos de programa Drive C: | 55,70 Gb Total Space | 3,05 Gb Free Space | 5,47% Space Free Drive D: | 56,06 Gb Total Space | 2,29 Gb Free Space | 4,08% Space Free E: Drive not present or media not loaded F: Drive not present or media not loaded Computer Name: SALVATORE Current User Name: SALVADOR1 Logged in as Administrator. Current Boot Mode: Normal [Processes - All] smss.exe -> %System32%\smss.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 50688 bytes | Modified Date = 19/08/2004 01:43:10 p.m. | Attr = ] csrss.exe -> %System32%\csrss.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 6144 bytes | Modified Date = 19/08/2004 01:42:42 p.m. | Attr = ] winlogon.exe -> %System32%\winlogon.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 505344 bytes | Modified Date = 19/08/2004 01:43:16 p.m. | Attr = ] services.exe -> %System32%\services.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 108544 bytes | Modified Date = 19/08/2004 01:43:10 p.m. | Attr = ] lsass.exe -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST -K DCOMLAUNCH] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\rpcss.dll [DcomLaunch] -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 26/07/2005 12:40:02 a.m. | Attr = ] -> %System32%\termsrv.dll [TermService] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 296960 bytes | Modified Date = 19/08/2004 09:42:28 a.m. | Attr = ] -> %System32%\termsrv.dll [TermService] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 296960 bytes | Modified Date = 19/08/2004 09:42:28 a.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST -K RPCSS] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\rpcss.dll [RpcSs] -> Microsoft Corporation [Ver = 5.1.2600.2726 (xpsp_sp2_gdr.050725-1528) | Size = 397824 bytes | Modified Date = 26/07/2005 12:40:02 a.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST.exe -K NETSVCS] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\appmgmts.dll [AppMgmt] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 175104 bytes | Modified Date = 19/08/2004 01:41:44 p.m. | Attr = ] -> %System32%\audiosrv.dll [AudioSrv] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 42496 bytes | Modified Date = 19/08/2004 01:41:46 p.m. | Attr = ] -> %System32%\qmgr.dll [BITS] -> Microsoft Corporation [Ver = 6.6.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 382464 bytes | Modified Date = 19/08/2004 09:42:22 a.m. | Attr = ] -> %System32%\browser.dll [Browser] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 77312 bytes | Modified Date = 19/08/2004 01:41:48 p.m. | Attr = ] -> %System32%\cryptsvc.dll [CryptSvc] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 60416 bytes | Modified Date = 19/08/2004 01:41:58 p.m. | Attr = ] -> %System32%\dhcpcsvc.dll [Dhcp] -> Microsoft Corporation [Ver = 5.1.2600.2912 (xpsp_sp2_gdr.060519-0003) | Size = 111616 bytes | Modified Date = 19/05/2006 09:18:52 a.m. | Attr = ] -> %System32%\dmserver.dll [dmserver] -> Microsoft Corp. [Ver = 2600.2180.503.0 | Size = 24064 bytes | Modified Date = 19/08/2004 01:42:02 p.m. | Attr = ] -> %System32%\ersvc.dll [ERSvc] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 23040 bytes | Modified Date = 19/08/2004 01:42:08 p.m. | Attr = ] -> %System32%\es.dll [EventSystem] -> Microsoft Corporation [Ver = 2001.12.4414.308 | Size = 243200 bytes | Modified Date = 26/07/2005 12:39:58 a.m. | Attr = ] -> %System32%\shsvcs.dll [FastUserSwitchingCompatibility] -> Microsoft Corporation [Ver = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316) | Size = 134656 bytes | Modified Date = 19/12/2006 05:49:48 p.m. | Attr = ] -> %WINDIR%\PCHealth\HelpCtr\Binaries\pchsvc.dll [helpsvc] -> File not found -> %System32%\hidserv.dll [HidServ] -> File not found -> %System32%\srvsvc.dll [lanmanserver] -> Microsoft Corporation [Ver = 5.1.2600.2577 (xpsp_sp2_gdr.041130-1729) | Size = 96768 bytes | Modified Date = 07/12/2004 03:34:00 p.m. | Attr = ] -> %System32%\wkssvc.dll [lanmanworkstation] -> Microsoft Corporation [Ver = 5.1.2600.2976 (xpsp_sp2_gdr.060817-0106) | Size = 132096 bytes | Modified Date = 17/08/2006 08:29:42 a.m. | Attr = ] -> %System32%\msgsvc.dll [Messenger] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 33792 bytes | Modified Date = 19/08/2004 01:42:16 p.m. | Attr = ] -> %System32%\netman.dll [Netman] -> Microsoft Corporation [Ver = 5.1.2600.2743 (xpsp_sp2_gdr.050819-1525) | Size = 197632 bytes | Modified Date = 22/08/2005 02:34:58 p.m. | Attr = ] -> %System32%\mswsock.dll [Nla] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 248320 bytes | Modified Date = 19/08/2004 01:42:20 p.m. | Attr = ] -> %System32%\ntmssvc.dll [NtmsSvc] -> Microsoft Corporation [Ver = 5.1.2400.2180 | Size = 437760 bytes | Modified Date = 19/08/2004 01:42:22 p.m. | Attr = ] -> %System32%\rasauto.dll [RasAuto] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 89088 bytes | Modified Date = 19/08/2004 01:42:22 p.m. | Attr = ] -> %System32%\rasmans.dll [RasMan] -> Microsoft Corporation [Ver = 5.1.2600.2908 (xpsp_sp2_gdr.060513-0343) | Size = 181248 bytes | Modified Date = 14/05/2006 04:48:20 a.m. | Attr = ] -> %System32%\mprdim.dll [RemoteAccess] -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 49152 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] -> %System32%\schedsvc.dll [Schedule] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 192000 bytes | Modified Date = 19/08/2004 09:42:24 a.m. | Attr = ] -> %System32%\seclogon.dll [seclogon] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 18944 bytes | Modified Date = 19/08/2004 01:42:24 p.m. | Attr = ] -> %System32%\sens.dll [SENS] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 38912 bytes | Modified Date = 19/08/2004 01:42:24 p.m. | Attr = ] -> %System32%\ipnathlp.dll [SharedAccess] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 332288 bytes | Modified Date = 19/08/2004 01:42:14 p.m. | Attr = ] -> %System32%\shsvcs.dll [ShellHWDetection] -> Microsoft Corporation [Ver = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316) | Size = 134656 bytes | Modified Date = 19/12/2006 05:49:48 p.m. | Attr = ] -> %System32%\srsvc.dll [srservice] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 171008 bytes | Modified Date = 19/08/2004 09:42:28 a.m. | Attr = ] -> %System32%\tapisrv.dll [TapiSrv] -> Microsoft Corporation [Ver = 5.1.2600.2716 (xpsp_sp2_gdr.050707-1657) | Size = 249344 bytes | Modified Date = 08/07/2005 12:29:02 p.m. | Attr = ] -> %System32%\shsvcs.dll [Themes] -> Microsoft Corporation [Ver = 6.00.2900.3051 (xpsp_sp2_gdr.061219-0316) | Size = 134656 bytes | Modified Date = 19/12/2006 05:49:48 p.m. | Attr = ] -> %System32%\trkwks.dll [TrkWks] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 90624 bytes | Modified Date = 19/08/2004 01:42:28 p.m. | Attr = ] -> %System32%\w32time.dll [W32Time] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 176640 bytes | Modified Date = 19/08/2004 01:42:28 p.m. | Attr = ] -> %System32%\wbem\WMIsvc.dll [winmgmt] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 145408 bytes | Modified Date = 19/08/2004 09:42:32 a.m. | Attr = ] -> %System32%\MsPMSNSv.dll [WmdmPmSN] -> Microsoft Corporation [Ver = 10.0.3790.3802 | Size = 25088 bytes | Modified Date = 28/01/2005 08:53:20 a.m. | Attr = ] -> %System32%\advapi32.dll [Wmi] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 684544 bytes | Modified Date = 19/08/2004 01:41:42 p.m. | Attr = ] -> %System32%\wscsvc.dll [wscsvc] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 81408 bytes | Modified Date = 19/08/2004 01:42:32 p.m. | Attr = ] -> %System32%\wuauserv.dll [wuauserv] -> Microsoft Corporation [Ver = 5.4.3790.2180 (xpsp_sp2_rtm.040803-2158) | Size = 6656 bytes | Modified Date = 19/08/2004 09:42:34 a.m. | Attr = ] -> %System32%\wzcsvc.dll [WZCSVC] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 360448 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] -> %System32%\xmlprov.dll [xmlprov] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 129536 bytes | Modified Date = 19/08/2004 01:42:34 p.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST.exe -K NETWORKSERVICE] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\dnsrslvr.dll [Dnscache] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 45568 bytes | Modified Date = 19/08/2004 01:42:02 p.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST.exe -K LOCALSERVICE] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\alrsvc.dll [Alerter] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 17408 bytes | Modified Date = 19/08/2004 01:41:44 p.m. | Attr = ] -> %System32%\lmhsvc.dll [LmHosts] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13824 bytes | Modified Date = 19/08/2004 01:42:14 p.m. | Attr = ] -> %System32%\regsvc.dll [RemoteRegistry] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 59904 bytes | Modified Date = 19/08/2004 01:42:22 p.m. | Attr = ] -> %System32%\ssdpsrv.dll [SSDPSRV] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 71680 bytes | Modified Date = 19/08/2004 01:42:28 p.m. | Attr = ] -> %System32%\upnphost.dll [upnphost] -> Microsoft Corporation [Ver = 5.1.2600.3077 (xpsp_sp2_gdr.070204-2255) | Size = 185344 bytes | Modified Date = 05/02/2007 04:18:40 p.m. | Attr = ] -> %System32%\webclnt.dll [WebClient] -> Microsoft Corporation [Ver = 5.1.2600.2821 (xpsp_sp2_gdr.060103-1536) | Size = 68096 bytes | Modified Date = 03/01/2006 11:35:10 p.m. | Attr = ] spoolsv.exe -> %System32%\spoolsv.exe -> Microsoft Corporation [Ver = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519) | Size = 57856 bytes | Modified Date = 10/06/2005 07:53:32 p.m. | Attr = ] explorer.exe -> %SystemRoot%\explorer.exe -> Microsoft Corporation [Ver = 6.00.2900.3156 (xpsp_sp2_gdr.070613-1234) | Size = 1035776 bytes | Modified Date = 13/06/2007 09:22:28 a.m. | Attr = ] nod32kui.exe -> %ProgramFiles%\ESET\nod32kui.exe -> Eset [Ver = 2, 50, 39 | Size = 917504 bytes | Modified Date = 18/05/2006 10:40:22 a.m. | Attr = ] smax4pnp.exe -> %ProgramFiles%\Analog Devices\SoundMAX\SMax4PNP.exe -> Analog Devices, Inc. [Ver = 4, 0, 4, 11 | Size = 790528 bytes | Modified Date = 29/05/2003 04:28:32 p.m. | Attr = ] smax4.exe -> %ProgramFiles%\Analog Devices\SoundMAX\SMax4.exe -> Analog Devices, Inc. [Ver = 4, 0, 4, 25 | Size = 585728 bytes | Modified Date = 30/05/2003 09:42:22 a.m. | Attr = ] hpgs2wnd.exe -> %ProgramFiles%\Hewlett-Packard\HP Share-to-Web\hpgs2wnd.exe -> Hewlett-Packard [Ver = 2,4,0,26 | Size = 57344 bytes | Modified Date = 03/07/2001 09:11:52 a.m. | Attr = ] pdvdserv.exe -> %ProgramFiles%\CyberLink DVD Solution\PowerDVD\PDVDServ.exe -> Cyberlink Corp. [Ver = 5.00.0000 | Size = 32768 bytes | Modified Date = 08/12/2003 05:35:14 p.m. | Attr = ] hpgs2wnf.exe -> %ProgramFiles%\Hewlett-Packard\HP Share-to-Web\hpgs2wnf.exe -> [Ver = 2,4,0,26 | Size = 65536 bytes | Modified Date = 03/07/2001 09:17:04 a.m. | Attr = ] realsched.exe -> %CommonProgramFiles%\Real\Update_OB\realsched.exe -> RealNetworks, Inc. [Ver = 0.1.0.4043 | Size = 185632 bytes | Modified Date = 22/08/2007 10:03:08 a.m. | Attr = ] jusched.exe -> %ProgramFiles%\Java\jre1.6.0_03\bin\jusched.exe -> Sun Microsystems, Inc. [Ver = 6.0.30.5 | Size = 132496 bytes | Modified Date = 25/09/2007 01:11:36 a.m. | Attr = ] ctfmon.exe -> %System32%\ctfmon.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 15360 bytes | Modified Date = 19/08/2004 01:42:42 p.m. | Attr = ] msnmsgr.exe -> %ProgramFiles%\MSN Messenger\msnmsgr.exe -> Microsoft Corporation [Ver = 8.1.0178.00 | Size = 5674352 bytes | Modified Date = 19/01/2007 12:54:56 p.m. | Attr = ] googletoolbarnotifier.exe -> %ProgramFiles%\Google\GoogleToolbarNotifier\GoogleToolbarNotifier.exe -> Google Inc. [Ver = 2, 0, 301, 1654 | Size = 68856 bytes | Modified Date = 08/07/2007 02:36:50 a.m. | Attr = ] ctsyncu.exe -> %ProgramFiles%\Creative\Sync Manager Unicode\CTSyncU.exe -> [Ver = 6.1.10.0 | Size = 700416 bytes | Modified Date = 13/09/2006 11:00:56 a.m. | Attr = ] linksysagent.exe -> %ProgramFiles%\Linksys EasyLink Advisor\LinksysAgent.exe -> Linksys, a Division of Cisco Systems, Inc. [Ver = 2, 1, 3, 162 | Size = 389120 bytes | Modified Date = 02/04/2006 08:07:44 p.m. | Attr = ] ctsvccda.exe -> %System32%\CTSVCCDA.exe -> Creative Technology Ltd [Ver = 1.0.1.0 | Size = 44032 bytes | Modified Date = 12/12/1999 01:01:00 p.m. | Attr = ] incdsrv.exe -> %ProgramFiles%\Nero\Nero 7\InCD\InCDsrv.exe -> Nero AG [Ver = 5, 1, 0, 5 | Size = 791040 bytes | Modified Date = 05/04/2006 11:36:24 a.m. | Attr = ] mdm.exe -> %CommonProgramFiles%\Microsoft Shared\VS7DEBUG\MDM.exe -> Microsoft Corporation [Ver = 7.00.9466 | Size = 322120 bytes | Modified Date = 19/06/2003 11:25:00 p.m. | Attr = ] nvsvc32.exe -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.6085 | Size = 114755 bytes | Modified Date = 31/12/2001 12:04:34 p.m. | Attr = R ] smagent.exe -> %ProgramFiles%\Analog Devices\SoundMAX\SMAgent.exe -> Analog Devices, Inc. [Ver = 3, 2, 6, 0 | Size = 45056 bytes | Modified Date = 20/09/2002 03:50:10 p.m. | Attr = ] svchost.exe -> %System32%\svchost.exe [C:\WINDOWS\SYSTEM32\SVCHOST.exe -K IMGSVC] -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] -> %System32%\wiaservc.dll [stisvc] -> Microsoft Corporation [Ver = 5.1.2600.3051 (xpsp_sp2_gdr.061219-0316) | Size = 334336 bytes | Modified Date = 19/12/2006 02:17:16 p.m. | Attr = ] wdfmgr.exe -> %System32%\WDFMGR.exe -> Microsoft Corporation [Ver = 5.2.3790.1230 built by: dnsrv(bld4act) | Size = 38912 bytes | Modified Date = 28/01/2005 01:36:00 a.m. | Attr = ] alg.exe -> %System32%\alg.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 44544 bytes | Modified Date = 19/08/2004 01:42:36 p.m. | Attr = ] wscntfy.exe -> %System32%\wscntfy.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13824 bytes | Modified Date = 19/08/2004 01:43:18 p.m. | Attr = ] nod32krn.exe -> %ProgramFiles%\ESET\nod32krn.exe -> Eset [Ver = 2, 50, 39 | Size = 495616 bytes | Modified Date = 18/05/2006 10:40:22 a.m. | Attr = ] firefox.exe -> %ProgramFiles%\Mozilla Firefox\firefox.exe -> Mozilla Corporation [Ver = 1.8.1.9: 2007102514 | Size = 7649128 bytes | Modified Date = 02/11/2007 02:38:48 a.m. | Attr = ] winpfind3u.exe -> %UserDesktop%\WinPFind3u\WinPFind3U.exe -> OldTimer Tools [Ver = 1.0.42.0 | Size = 322560 bytes | Modified Date = 04/09/2007 10:47:26 a.m. | Attr = ] [Win32 Services - All] (Adobe LM Service) Adobe LM Service [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Adobe Systems Shared\Service\Adobelmsvc.exe -> Adobe Systems [Ver = 2.67.010 | Size = 72704 bytes | Modified Date = 11/04/2007 12:16:48 p.m. | Attr = ] (Alerter) Servicio de alerta [Win32_Shared | Disabled | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (ALG) Servicio de puerta de enlace de capa de aplicación [Win32_Own | On_Demand | Running] -> %System32%\alg.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 44544 bytes | Modified Date = 19/08/2004 01:42:36 p.m. | Attr = ] (AppMgmt) Administración de aplicaciones [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (AudioSrv) Audio de Windows [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (BITS) Servicio de transferencia inteligente en segundo plano [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Browser) Examinador de equipos [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (CiSvc) Indexing Service [Win32_Shared | On_Demand | Stopped] -> %System32%\cisvc.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5632 bytes | Modified Date = 19/08/2004 01:42:40 p.m. | Attr = ] (ClipSrv) Portafolios [Win32_Own | Disabled | Stopped] -> %System32%\clipsrv.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 33280 bytes | Modified Date = 19/08/2004 01:42:40 p.m. | Attr = ] (COMSysApp) Aplicación del sistema COM+ [Win32_Own | On_Demand | Stopped] -> %System32%\dllhost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5120 bytes | Modified Date = 19/08/2004 01:42:44 p.m. | Attr = ] (Creative Service for CDROM Access) Creative Service for CDROM Access [Win32_Own | Auto | Running] -> %System32%\CTSVCCDA.exe -> Creative Technology Ltd [Ver = 1.0.1.0 | Size = 44032 bytes | Modified Date = 12/12/1999 01:01:00 p.m. | Attr = ] (CryptSvc) Servicios de cifrado [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (DcomLaunch) Iniciador de procesos de servidor DCOM [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Dhcp) Cliente DHCP [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (dmadmin) Servicio del administrador de discos lógicos [Win32_Shared | On_Demand | Stopped] -> %System32%\dmadmin.exe -> Microsoft Corp., VERITAS Software [Ver = 2600.2180.503.0 | Size = 225792 bytes | Modified Date = 19/08/2004 01:42:44 p.m. | Attr = ] (dmserver) Administrador de discos lógicos [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Dnscache) Cliente DNS [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (ERSvc) Error Reporting Service [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Eventlog) Registro de sucesos [Win32_Shared | Auto | Running] -> %System32%\services.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 108544 bytes | Modified Date = 19/08/2004 01:43:10 p.m. | Attr = ] (EventSystem) Sistema de sucesos COM+ [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (FastUserSwitchingCompatibility) Compatibilidad de cambio rápido de usuario [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (gusvc) Google Updater Service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\Google\Common\Google Updater\GoogleUpdaterService.exe -> Google [Ver = 2.0.734.29932.beta | Size = 138168 bytes | Modified Date = 04/02/2007 11:37:14 a.m. | Attr = ] (helpsvc) Ayuda y soporte técnico [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (HidServ) Acceso a dispositivo de interfaz humana [Win32_Shared | Disabled | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (HTTPFilter) HTTP SSL [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (ImapiService) Servicio COM de grabación de CD de IMAPI [Win32_Own | On_Demand | Stopped] -> %System32%\imapi.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 150016 bytes | Modified Date = 19/08/2004 01:42:52 p.m. | Attr = ] (InCDsrv) InCD Helper [Win32_Own | Auto | Running] -> %ProgramFiles%\Nero\Nero 7\InCD\InCDsrv.exe -> Nero AG [Ver = 5, 1, 0, 5 | Size = 791040 bytes | Modified Date = 05/04/2006 11:36:24 a.m. | Attr = ] (lanmanserver) Servidor [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (lanmanworkstation) Estación de trabajo [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (LmHosts) Ayuda de NetBIOS sobre TCP/IP [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (MDM) Machine Debug Manager [Win32_Own | Auto | Running] -> %CommonProgramFiles%\Microsoft Shared\VS7DEBUG\MDM.exe -> Microsoft Corporation [Ver = 7.00.9466 | Size = 322120 bytes | Modified Date = 19/06/2003 11:25:00 p.m. | Attr = ] (Messenger) Mensajero [Win32_Shared | Disabled | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (mnmsrvc) Escritorio remoto compartido de NetMeeting [Win32_Own | On_Demand | Stopped] -> %System32%\mnmsrvc.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 | Size = 32768 bytes | Modified Date = 19/08/2004 09:42:56 a.m. | Attr = ] (MSDTC) Coordinador de transacciones distribuidas de Microsoft [Win32_Own | On_Demand | Stopped] -> %System32%\msdtc.exe -> Microsoft Corporation [Ver = 2001.12.4414.258 | Size = 6144 bytes | Modified Date = 19/08/2004 09:42:58 a.m. | Attr = ] (MSIServer) Windows Installer [Win32_Shared | On_Demand | Stopped] -> %System32%\msiexec.exe -> Microsoft Corporation [Ver = 3.1.4000.1823 | Size = 78848 bytes | Modified Date = 04/05/2005 02:45:36 p.m. | Attr = ] (NetDDE) DDE de red [Win32_Shared | Disabled | Stopped] -> %System32%\netdde.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 115200 bytes | Modified Date = 19/08/2004 01:43:00 p.m. | Attr = ] (NetDDEdsdm) DSDM de DDE de red [Win32_Shared | Disabled | Stopped] -> %System32%\netdde.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 115200 bytes | Modified Date = 19/08/2004 01:43:00 p.m. | Attr = ] (Netlogon) Inicio de sesión en red [Win32_Shared | On_Demand | Stopped] -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] (Netman) Conexiones de red [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Nla) NLA (Network Location Awareness) [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (NOD32krn) NOD32 Kernel Service [Win32_Own | Auto | Running] -> %ProgramFiles%\ESET\nod32krn.exe -> Eset [Ver = 2, 50, 39 | Size = 495616 bytes | Modified Date = 18/05/2006 10:40:22 a.m. | Attr = ] (NtLmSsp) Proveedor de compatibilidad con seguridad LM de Windows NT [Win32_Shared | On_Demand | Stopped] -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] (NtmsSvc) Medios de almacenamiento extraíbles [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (NVSvc) NVIDIA Display Driver Service [Win32_Own | Auto | Running] -> %System32%\nvsvc32.exe -> NVIDIA Corporation [Ver = 6.14.10.6085 | Size = 114755 bytes | Modified Date = 31/12/2001 12:04:34 p.m. | Attr = R ] (ose) Office Source Engine [Win32_Own | On_Demand | Stopped] -> %CommonProgramFiles%\Microsoft Shared\Source Engine\OSE.exe -> Microsoft Corporation [Ver = 11.0.5525 | Size = 89136 bytes | Modified Date = 28/07/2003 08:28:22 p.m. | Attr = ] (PlugPlay) Plug and Play [Win32_Shared | Auto | Running] -> %System32%\services.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 108544 bytes | Modified Date = 19/08/2004 01:43:10 p.m. | Attr = ] (PolicyAgent) Servicios IPSEC [Win32_Shared | Auto | Running] -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] (ProtectedStorage) Almacenamiento protegido [Win32_Shared | Auto | Running] -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] (RasAuto) Administrador de conexión automática de acceso remoto [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (RasMan) Administrador de conexión de acceso remoto [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (RDSessMgr) Administrador de sesión de Ayuda de escritorio remoto [Win32_Own | On_Demand | Stopped] -> %System32%\sessmgr.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 142848 bytes | Modified Date = 19/08/2004 09:43:10 a.m. | Attr = ] (RemoteAccess) Enrutamiento y acceso remoto [Win32_Shared | Disabled | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (RemoteRegistry) Registro remoto [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (RpcLocator) Localizador de llamadas a procedimiento remoto (RPC) [Win32_Own | On_Demand | Stopped] -> %System32%\locator.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 75264 bytes | Modified Date = 19/08/2004 01:42:52 p.m. | Attr = ] (RpcSs) Llamada a procedimiento remoto (RPC) [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (RSVP) QoS RSVP [Win32_Own | On_Demand | Stopped] -> %System32%\rsvp.exe -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 132608 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (SamSs) Administrador de cuentas de seguridad [Win32_Shared | Auto | Running] -> %System32%\lsass.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 13312 bytes | Modified Date = 19/08/2004 01:42:54 p.m. | Attr = ] (SCardSvr) Tarjeta inteligente [Win32_Shared | On_Demand | Stopped] -> %System32%\scardsvr.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 99840 bytes | Modified Date = 19/08/2004 01:43:08 p.m. | Attr = ] (Schedule) Programador de tareas [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (seclogon) Inicio de sesión secundario [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (SENS) Notificación de sucesos del sistema [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (SharedAccess) Firewall de Windows/Conexión compartida a Internet (ICS) [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (ShellHWDetection) Detección de hardware shell [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (SoundMAX Agent Service (default)) SoundMAX Agent Service [Win32_Own | Auto | Running] -> %ProgramFiles%\Analog Devices\SoundMAX\SMAgent.exe -> Analog Devices, Inc. [Ver = 3, 2, 6, 0 | Size = 45056 bytes | Modified Date = 20/09/2002 03:50:10 p.m. | Attr = ] (Spooler) Cola de impresión [Win32_Own | Auto | Running] -> %System32%\spoolsv.exe -> Microsoft Corporation [Ver = 5.1.2600.2696 (xpsp_sp2_gdr.050610-1519) | Size = 57856 bytes | Modified Date = 10/06/2005 07:53:32 p.m. | Attr = ] (srservice) Servicio de restauración de sistema [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (SSDPSRV) Servicio de descubrimientos SSDP [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (stisvc) Adquisición de imágenes de Windows (WIA) [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (SwPrv) MS Software Shadow Copy Provider [Win32_Own | On_Demand | Stopped] -> %System32%\dllhost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5120 bytes | Modified Date = 19/08/2004 01:42:44 p.m. | Attr = ] (SysmonLog) Registros y alertas de rendimiento [Win32_Own | On_Demand | Stopped] -> %System32%\smlogsvc.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 92160 bytes | Modified Date = 19/08/2004 01:43:10 p.m. | Attr = ] (TapiSrv) Telefonía [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (TermService) Servicios de Terminal Server [Win32_Shared | On_Demand | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Themes) Temas [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (TlntSvr) Telnet [Win32_Own | Disabled | Stopped] -> %System32%\tlntsvr.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 74240 bytes | Modified Date = 19/08/2004 01:43:14 p.m. | Attr = ] (TrkWks) Cliente de seguimiento de vinculos distribuidos [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (UMWdf) Windows User Mode Driver Framework [Win32_Own | Auto | Running] -> %System32%\WDFMGR.exe -> Microsoft Corporation [Ver = 5.2.3790.1230 built by: dnsrv(bld4act) | Size = 38912 bytes | Modified Date = 28/01/2005 01:36:00 a.m. | Attr = ] (upnphost) Host de dispositivo Plug and Play universal [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (UPS) Uninterruptible Power Supply [Win32_Own | On_Demand | Stopped] -> %System32%\ups.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 18432 bytes | Modified Date = 19/08/2004 01:43:14 p.m. | Attr = ] (usnjsvc) Messenger Sharing Folders USN Journal Reader service [Win32_Own | On_Demand | Stopped] -> %ProgramFiles%\MSN Messenger\usnsvc.exe -> Microsoft Corporation [Ver = 8.1.0178.00 | Size = 97136 bytes | Modified Date = 19/01/2007 12:54:14 p.m. | Attr = ] (VSS) Instantáneas de volumen [Win32_Own | On_Demand | Stopped] -> %System32%\vssvc.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 293888 bytes | Modified Date = 19/08/2004 01:43:14 p.m. | Attr = ] (W32Time) Horario de Windows [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (WebClient) Cliente Web [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (winmgmt) Instrumental de administración de Windows [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (WmdmPmSN) Servicio del número de serie de medio portátil [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (Wmi) Extensiones de controlador de Instrumental de administración de Windows [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (WmiApSrv) Adaptador de rendimiento de WMI [Win32_Own | On_Demand | Stopped] -> %System32%\wbem\wmiapsrv.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 126464 bytes | Modified Date = 19/08/2004 09:43:18 a.m. | Attr = ] (wscsvc) Centro de seguridad [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (wuauserv) Actualizaciones automáticas [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (WZCSVC) Configuración inalámbrica rápida [Win32_Shared | Auto | Running] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] (xmlprov) Servicio de aprovisionamiento de red [Win32_Shared | On_Demand | Stopped] -> %System32%\svchost.exe -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 19/08/2004 01:43:12 p.m. | Attr = ] [Driver Services - All] (61883) Dispositivo unidad 61883 [Kernel | On_Demand | Stopped] -> %System32%\drivers\61883.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 48128 bytes | Modified Date = 03/08/2004 11:10:12 p.m. | Attr = ] (Abiosdsk) Abiosdsk [Kernel | Disabled | Stopped] -> -> File not found (abp480n5) abp480n5 [Kernel | Disabled | Stopped] -> -> File not found (ACPI) Controlador Microsoft ACPI [Kernel | Boot | Running] -> %System32%\drivers\acpi.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 189056 bytes | Modified Date = 19/08/2004 01:18:16 p.m. | Attr = ] (ACPIEC) ACPIEC [Kernel | Disabled | Stopped] -> %System32%\drivers\acpiec.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 12032 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (adpu160m) adpu160m [Kernel | Disabled | Stopped] -> -> File not found (aeaudio) aeaudio [Kernel | On_Demand | Running] -> %System32%\drivers\aeaudio.sys -> Andrea Electronics Corporation [Ver = 3.0.2.32 | Size = 100224 bytes | Modified Date = 13/03/2003 09:34:48 p.m. | Attr = ] (aec) Eliminador de eco acústico de núcleo de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\aec.sys -> Microsoft Corporation [Ver = 5.1.2601.2180 | Size = 142464 bytes | Modified Date = 14/02/2006 08:22:26 p.m. | Attr = ] (AFD) AFD [Kernel | System | Running] -> %System32%\drivers\afd.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 138496 bytes | Modified Date = 03/08/2004 09:14:16 p.m. | Attr = ] (agp440) Filtro de bus Intel AGP [Kernel | Boot | Running] -> %System32%\drivers\AGP440.SYS -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 42368 bytes | Modified Date = 03/08/2004 11:07:42 p.m. | Attr = ] (Aha154x) Aha154x [Kernel | Disabled | Stopped] -> -> File not found (aic78u2) aic78u2 [Kernel | Disabled | Stopped] -> -> File not found (aic78xx) aic78xx [Kernel | Disabled | Stopped] -> -> File not found (AliIde) AliIde [Kernel | Disabled | Stopped] -> -> File not found (AMON) AMON [Kernel | Auto | Running] -> %System32%\drivers\amon.sys -> Eset [Ver = 2, 50, 39 | Size = 502208 bytes | Modified Date = 18/05/2006 10:40:22 a.m. | Attr = ] (amsint) amsint [Kernel | Disabled | Stopped] -> -> File not found (Arp1394) Protocolo de cliente ARP 1394 [Kernel | On_Demand | Running] -> %System32%\drivers\arp1394.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 60800 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (asc) asc [Kernel | Disabled | Stopped] -> -> File not found (asc3350p) asc3350p [Kernel | Disabled | Stopped] -> -> File not found (asc3550) asc3550 [Kernel | Disabled | Stopped] -> -> File not found (Aspi32) Aspi32 [Kernel | Auto | Running] -> %System32%\drivers\ASPI32.SYS -> Adaptec [Ver = 4.71 (0002) built by: WinDDK | Size = 16512 bytes | Modified Date = 21/11/2005 01:48:22 a.m. | Attr = ] (AsyncMac) Controlador de medios asíncronos de RAS [Kernel | On_Demand | Stopped] -> %System32%\drivers\asyncmac.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 14336 bytes | Modified Date = 03/08/2004 09:05:04 p.m. | Attr = ] (atapi) Controladora estándar IDE/ESDI de disco duro [Kernel | Boot | Running] -> %System32%\drivers\atapi.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 95360 bytes | Modified Date = 03/08/2004 10:59:44 p.m. | Attr = ] (Atdisk) Atdisk [Kernel | Disabled | Stopped] -> -> File not found (Atmarpc) Protocolo cliente ATM ARP [Kernel | On_Demand | Stopped] -> %System32%\drivers\atmarpc.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 59904 bytes | Modified Date = 03/08/2004 08:58:32 p.m. | Attr = ] (audstub) Controlador auxiliar de audio [Kernel | On_Demand | Running] -> %System32%\drivers\audstub.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 3072 bytes | Modified Date = 17/08/2001 09:59:44 p.m. | Attr = ] (Avc) Dispositivo AVC [Kernel | On_Demand | Stopped] -> %System32%\drivers\avc.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 38912 bytes | Modified Date = 03/08/2004 11:10:12 p.m. | Attr = ] (Beep) Beep [Kernel | System | Running] -> %System32%\drivers\beep.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 4224 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (catchme) catchme [Kernel | On_Demand | Stopped] -> %SystemDrive%\DOCUME~1\SALVAD~1\CONFIG~1\Temp\catchme.sys -> File not found (cbidf2k) cbidf2k [Kernel | Disabled | Stopped] -> %System32%\drivers\cbidf2k.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 13952 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (CCDECODE) Descodificador de título cerrado [Kernel | On_Demand | Stopped] -> %System32%\drivers\CCDECODE.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 17024 bytes | Modified Date = 03/08/2004 11:10:18 p.m. | Attr = ] (cd20xrnt) cd20xrnt [Kernel | Disabled | Stopped] -> -> File not found (Cdaudio) Cdaudio [Kernel | System | Stopped] -> %System32%\drivers\cdaudio.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 18688 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (Cdfs) Cdfs [File_System | Disabled | Running] -> %System32%\drivers\cdfs.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 63744 bytes | Modified Date = 03/08/2004 09:14:12 p.m. | Attr = ] (Cdrom) Controlador de CD-ROM [Kernel | System | Running] -> %System32%\drivers\cdrom.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 49536 bytes | Modified Date = 03/08/2004 08:59:54 p.m. | Attr = ] (Changer) Changer [Kernel | System | Stopped] -> -> File not found (CmdIde) CmdIde [Kernel | Disabled | Stopped] -> -> File not found (Cpqarray) Cpqarray [Kernel | Disabled | Stopped] -> -> File not found (dac960nt) dac960nt [Kernel | Disabled | Stopped] -> -> File not found (Disk) Controlador de disco [Kernel | Boot | Running] -> %System32%\drivers\disk.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 36352 bytes | Modified Date = 03/08/2004 08:59:56 p.m. | Attr = ] (dmboot) dmboot [Kernel | Disabled | Stopped] -> %System32%\drivers\dmboot.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 800256 bytes | Modified Date = 19/08/2004 01:28:34 p.m. | Attr = ] (dmio) Controlador del administrador de discos lógicos [Kernel | Boot | Running] -> %System32%\drivers\dmio.sys -> Microsoft Corp., Veritas Software [Ver = 2600.2180.503.0 | Size = 154240 bytes | Modified Date = 19/08/2004 01:28:40 p.m. | Attr = ] (dmload) dmload [Kernel | Boot | Running] -> %System32%\drivers\dmload.sys -> Microsoft Corp., Veritas Software. [Ver = 2600.0.503.0 | Size = 5888 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (DMusic) Sintetizador DLS Kernel de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\DMusic.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 52864 bytes | Modified Date = 03/08/2004 11:07:40 p.m. | Attr = ] (dpti2o) dpti2o [Kernel | Disabled | Stopped] -> -> File not found (drmkaud) Descodificador de audio DRM del núcleo de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\drmkaud.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 2944 bytes | Modified Date = 03/08/2004 11:07:58 p.m. | Attr = ] (E100B) Intel(R) PRO Adapter Driver [Kernel | On_Demand | Stopped] -> %System32%\drivers\e100b325.sys -> Intel Corporation [Ver = 7.0.26.0 built by: WinDDK | Size = 145408 bytes | Modified Date = 04/03/2003 03:56:26 p.m. | Attr = R ] (Fastfat) Fastfat [File_System | Disabled | Running] -> %System32%\drivers\fastfat.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 143360 bytes | Modified Date = 03/08/2004 09:14:18 p.m. | Attr = ] (Fdc) Controlador de la unidad de disquete [Kernel | On_Demand | Running] -> %System32%\drivers\fdc.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 27392 bytes | Modified Date = 03/08/2004 08:59:28 p.m. | Attr = ] (Fips) Fips [Kernel | System | Running] -> %System32%\drivers\fips.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 35072 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (Flpydisk) Controlador de disquete [Kernel | On_Demand | Running] -> %System32%\drivers\flpydisk.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 20480 bytes | Modified Date = 03/08/2004 08:59:28 p.m. | Attr = ] (FltMgr) FltMgr [File_System | Boot | Running] -> %System32%\drivers\fltMgr.sys -> Microsoft Corporation [Ver = 5.1.2600.2978 (xpsp_sp2_gdr.060821-0039) | Size = 128896 bytes | Modified Date = 21/08/2006 05:14:58 a.m. | Attr = ] (Ftdisk) Controlador del administrador de volumen [Kernel | Boot | Running] -> %System32%\drivers\ftdisk.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 125952 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (GoProto) GoProto Protocol Driver [Kernel | On_Demand | Stopped] -> %System32%\drivers\goprot51.sys -> Gteko Ltd. [Ver = 2, 1, 0, 21 | Size = 29184 bytes | Modified Date = 20/03/2007 03:53:06 p.m. | Attr = ] (Gpc) Clasificador de paquetes genéricos [Kernel | On_Demand | Running] -> %System32%\drivers\msgpc.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 35072 bytes | Modified Date = 03/08/2004 09:04:14 p.m. | Attr = ] (HidUsb) Controlador de clases HID de Microsoft [Kernel | On_Demand | Running] -> %System32%\drivers\hidusb.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 9600 bytes | Modified Date = 17/08/2001 10:02:20 p.m. | Attr = ] (hpn) hpn [Kernel | Disabled | Stopped] -> -> File not found (HTTP) HTTP [Kernel | On_Demand | Running] -> %System32%\drivers\http.sys -> Microsoft Corporation [Ver = 5.1.2600.2869 (xpsp_sp2_gdr.060316-1512) | Size = 262784 bytes | Modified Date = 16/03/2006 08:33:10 p.m. | Attr = ] (i2omgmt) i2omgmt [Kernel | System | Stopped] -> -> File not found (i2omp) i2omp [Kernel | Disabled | Stopped] -> -> File not found (i8042prt) Teclado i8042 y controlador de puerto de mouse PS/2 [Kernel | System | Running] -> %System32%\drivers\i8042prt.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 53760 bytes | Modified Date = 19/08/2004 01:23:42 p.m. | Attr = ] (Imapi) Controlador de filtro de grabación de CD [Kernel | System | Running] -> %System32%\drivers\imapi.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 41856 bytes | Modified Date = 03/08/2004 09:00:16 p.m. | Attr = ] (InCDfs) InCD File System [File_System | Disabled | Running] -> %System32%\drivers\InCDfs.sys -> Nero AG [Ver = 5, 1, 0, 5 | Size = 102016 bytes | Modified Date = 05/04/2006 11:34:04 a.m. | Attr = ] (InCDPass) InCDPass [Kernel | System | Running] -> %System32%\drivers\InCDPass.sys -> Nero AG [Ver = 5, 1, 0, 5 | Size = 29568 bytes | Modified Date = 05/04/2006 11:34:22 a.m. | Attr = ] (incdrm) InCD Reader [Kernel | System | Running] -> %System32%\drivers\InCDRm.sys -> Nero AG [Ver = 5, 1, 0, 5 | Size = 33792 bytes | Modified Date = 05/04/2006 11:34:36 a.m. | Attr = ] (ini910u) ini910u [Kernel | Disabled | Stopped] -> -> File not found (IntelIde) IntelIde [Kernel | Boot | Running] -> %System32%\drivers\intelide.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5632 bytes | Modified Date = 19/08/2004 03:26:22 p.m. | Attr = ] (intelppm) Controlador de procesador Intel [Kernel | System | Running] -> %System32%\drivers\intelppm.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 40320 bytes | Modified Date = 19/08/2004 01:26:22 p.m. | Attr = ] (Ip6Fw) Controlador de Firewall de Windows IPv6 [Kernel | On_Demand | Stopped] -> %System32%\drivers\ip6fw.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 29056 bytes | Modified Date = 03/08/2004 09:00:08 p.m. | Attr = ] (IpFilterDriver) Controlador de filtro de tráfico IP [Kernel | On_Demand | Stopped] -> %System32%\drivers\ipfltdrv.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 32896 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (IpInIp) Controlador de túnel IP en IP [Kernel | On_Demand | Stopped] -> %System32%\drivers\ipinip.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 20992 bytes | Modified Date = 03/08/2004 09:04:46 p.m. | Attr = ] (IpNat) Traductor de direcciones de red IP [Kernel | On_Demand | Running] -> %System32%\drivers\ipnat.sys -> Microsoft Corporation [Ver = 5.1.2600.2524 (xpsp_sp2_gdr.040919-1056) | Size = 134912 bytes | Modified Date = 29/09/2004 06:28:38 p.m. | Attr = ] (IPSec) Controlador IPSEC [Kernel | System | Running] -> %System32%\drivers\ipsec.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 74752 bytes | Modified Date = 03/08/2004 09:14:30 p.m. | Attr = ] (IRENUM) Servicio enumerador IR [Kernel | On_Demand | Stopped] -> %System32%\drivers\irenum.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 11264 bytes | Modified Date = 03/08/2004 10:00:48 p.m. | Attr = ] (isapnp) Controlador de bus PnP ISA/EISA [Kernel | Boot | Running] -> %System32%\drivers\isapnp.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 36352 bytes | Modified Date = 22/08/2001 09:28:20 p.m. | Attr = ] (Kbdclass) Controlador de clase de teclado [Kernel | System | Running] -> %System32%\drivers\kbdclass.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 25088 bytes | Modified Date = 19/08/2004 01:28:04 p.m. | Attr = ] (kmixer) Mezclador de audio de onda Microsoft Kernel [Kernel | On_Demand | Stopped] -> %System32%\drivers\kmixer.sys -> Microsoft Corporation [Ver = 5.1.2600.2929 (xpsp_sp2_gdr.060613-2359) | Size = 172416 bytes | Modified Date = 14/06/2006 04:47:46 a.m. | Attr = ] (KSecDD) KSecDD [Kernel | Boot | Running] -> %System32%\drivers\ksecdd.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 92032 bytes | Modified Date = 03/08/2004 08:59:48 p.m. | Attr = ] (lbrtfdc) lbrtfdc [Kernel | System | Stopped] -> -> File not found (MidiSyn) MidiSyn [Kernel | On_Demand | Stopped] -> %System32%\drivers\MidiSyn.sys -> Analog Devices Inc [Ver = 3, 3, 7, 3 | Size = 235100 bytes | Modified Date = 20/09/2002 01:53:34 p.m. | Attr = ] (mnmdd) mnmdd [Kernel | System | Running] -> %System32%\drivers\mnmdd.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 4224 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (Modem) Modem [Kernel | On_Demand | Stopped] -> %System32%\drivers\modem.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 30336 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (Mouclass) Controlador de clase de mouse [Kernel | System | Running] -> %System32%\drivers\mouclass.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 23552 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (mouhid) Controlador HID de mouse [Kernel | On_Demand | Running] -> %System32%\drivers\mouhid.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 12416 bytes | Modified Date = 22/08/2001 09:34:20 p.m. | Attr = ] (MountMgr) MountMgr [Kernel | Boot | Running] -> %System32%\drivers\mountmgr.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 42240 bytes | Modified Date = 03/08/2004 08:58:32 p.m. | Attr = ] (mraid35x) mraid35x [Kernel | Disabled | Stopped] -> -> File not found (MRxDAV) Redirector de cliente WebDav [File_System | On_Demand | Running] -> %System32%\drivers\mrxdav.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 181248 bytes | Modified Date = 03/08/2004 09:00:58 p.m. | Attr = ] (MRxSmb) MRxSmb [File_System | System | Running] -> %System32%\drivers\mrxsmb.sys -> Microsoft Corporation [Ver = 5.1.2600.2902 (xpsp_sp2_gdr.060505-0036) | Size = 453120 bytes | Modified Date = 05/05/2006 05:41:46 a.m. | Attr = ] (MSDV) Microsoft DV Camera and VCR [Kernel | On_Demand | Stopped] -> %System32%\drivers\msdv.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 51328 bytes | Modified Date = 03/08/2004 11:10:00 p.m. | Attr = ] (Msfs) Msfs [File_System | System | Running] -> %System32%\drivers\msfs.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 19072 bytes | Modified Date = 03/08/2004 09:00:42 p.m. | Attr = ] (MSKSSRV) Proxy de servicio de transferencia de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\MSKSSRV.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 7552 bytes | Modified Date = 03/08/2004 10:58:42 p.m. | Attr = ] (MSPCLOCK) Proxy del reloj de transferencia de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\MSPCLOCK.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5376 bytes | Modified Date = 03/08/2004 10:58:40 p.m. | Attr = ] (MSPQM) Proxy del administrador de calidad de transferencia de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\MSPQM.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 4992 bytes | Modified Date = 03/08/2004 10:58:42 p.m. | Attr = ] (mssmbios) Controlador BIOS de Microsoft System Management [Kernel | On_Demand | Running] -> %System32%\drivers\mssmbios.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 15488 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (MSTEE) Convertidor Tee/Sink-to-Sink de transferencia de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\MSTEE.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 5504 bytes | Modified Date = 03/08/2004 10:58:40 p.m. | Attr = ] (Mup) Mup [File_System | Boot | Running] -> %System32%\drivers\mup.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 107904 bytes | Modified Date = 03/08/2004 09:15:22 p.m. | Attr = ] (mxnic) Controlador de Macronix MX987xx Family Fast Ethernet NT [Kernel | On_Demand | Running] -> %System32%\drivers\mxnic.sys -> Macronix International Co., Ltd. [Ver = 2.12 (XPClient.010817-1148) | Size = 19968 bytes | Modified Date = 17/08/2001 09:49:32 p.m. | Attr = ] (NABTSFEC) Códec NABTS/FEC VBI [Kernel | On_Demand | Stopped] -> %System32%\drivers\NABTSFEC.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 85376 bytes | Modified Date = 03/08/2004 11:10:30 p.m. | Attr = ] (NDIS) Controlador de sistema NDIS [Kernel | Boot | Running] -> %System32%\drivers\ndis.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 182912 bytes | Modified Date = 03/08/2004 09:14:30 p.m. | Attr = ] (NdisIP) Conexión de TV/Vídeo de Microsoft [Kernel | On_Demand | Stopped] -> %System32%\drivers\NdisIP.sys -> Microsoft Corporation [Ver = 5.3.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 10880 bytes | Modified Date = 03/08/2004 11:10:14 p.m. | Attr = ] (NdisTapi) Controlador TAPI NDIS de acceso remoto [Kernel | On_Demand | Running] -> %System32%\drivers\ndistapi.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 9600 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (Ndisuio) Protocolo E/S en modo de usuario NDIS [Kernel | On_Demand | Running] -> %System32%\drivers\ndisuio.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 12928 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (NdisWan) Controlador WAN NDIS de acceso remoto [Kernel | On_Demand | Running] -> %System32%\drivers\ndiswan.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 91776 bytes | Modified Date = 03/08/2004 09:14:32 p.m. | Attr = ] (NDProxy) Proxy NDIS [Kernel | On_Demand | Running] -> %System32%\drivers\ndproxy.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 38016 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (NetBIOS) Interfaz de NetBIOS [File_System | System | Running] -> %System32%\drivers\netbios.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 34560 bytes | Modified Date = 03/08/2004 09:03:22 p.m. | Attr = ] (NetBT) NetBios a través de Tcpip [Kernel | System | Running] -> %System32%\drivers\netbt.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 162816 bytes | Modified Date = 03/08/2004 09:14:38 p.m. | Attr = ] (NIC1394) Controlador de red 1394 [Kernel | On_Demand | Running] -> %System32%\drivers\nic1394.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 61824 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (Npfs) Npfs [File_System | System | Running] -> %System32%\drivers\npfs.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 30848 bytes | Modified Date = 03/08/2004 09:00:44 p.m. | Attr = ] (Ntfs) Ntfs [File_System | Disabled | Stopped] -> %System32%\drivers\ntfs.sys -> Microsoft Corporation [Ver = 5.1.2600.3081 (xpsp_sp2_gdr.070209-0028) | Size = 574464 bytes | Modified Date = 09/02/2007 07:10:36 a.m. | Attr = ] (Null) Null [Kernel | System | Running] -> %System32%\drivers\null.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 2944 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (nv) nv [Kernel | On_Demand | Running] -> %System32%\drivers\nv4_mini.sys -> NVIDIA Corporation [Ver = 6.14.10.6085 | Size = 2167552 bytes | Modified Date = 31/12/2001 12:04:30 p.m. | Attr = R ] (nvcap) nVidia WDM Video Capture (universal) [Kernel | Auto | Running] -> %System32%\drivers\NVCAP.SYS -> NVIDIA Corporation [Ver = 3.03 | Size = 135228 bytes | Modified Date = 31/12/2001 12:04:28 p.m. | Attr = ] (NwlnkFlt) Controlador de filtro de tráfico IPX [Kernel | On_Demand | Stopped] -> %System32%\drivers\nwlnkflt.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 12416 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (NwlnkFwd) Controlador retransmisor de tráfico IPX [Kernel | On_Demand | Stopped] -> %System32%\drivers\nwlnkfwd.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (xpclient.010817-1148) | Size = 32512 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (ohci1394) Controladora de host VIA OHCI compatible con IEEE 1394 [Kernel | Boot | Running] -> %System32%\drivers\ohci1394.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 61056 bytes | Modified Date = 03/08/2004 09:10:10 p.m. | Attr = ] (Parport) Controlador de puerto paralelo [Kernel | On_Demand | Running] -> %System32%\drivers\parport.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 80256 bytes | Modified Date = 19/08/2004 01:56:12 p.m. | Attr = ] (PartMgr) PartMgr [Kernel | Boot | Running] -> %System32%\drivers\partmgr.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 18688 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (ParVdm) ParVdm [Kernel | Auto | Running] -> %System32%\drivers\parvdm.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 7040 bytes | Modified Date = 24/08/2001 10:00:00 a.m. | Attr = ] (PCI) Controlador de bus PCI [Kernel | Boot | Running] -> %System32%\drivers\pci.sys -> Microsoft Corporation [Ver = 5.1.2600.2180 (xpsp_sp2_rtm.040803-2158) | Size = 68992 bytes | Modified Date = 19/08/2004 03:18:16 p.m. | Attr = ] (PCIDump) PCIDump [Kernel | System | Stopped] -> -> File not found (PCIIde) PCIIde [Kernel | Boot | Running] -> %System32%\drivers\pciide.sys -> Microsoft Corporation [Ver = 5.1.2600.0 (XPClient.010817-1148) | Size = 3456