error 0x6D9 firewall/imposible instalar antivirus

[LynnardSD]

Hola a todos.. ante todo gracias por la posible ayuda.

Acudo a ustedes despues de haber leido bastantes temas relacionados con mi error, aqui y en otros muchos sitios, he pasado ya las herramientas que indican y aun no puedo instalar un antivirus en mi pc. Uso windows 7 en un portable HP Pavilion dv6.

Los errores no son solamente ese codigo de error que indico arriba, porque ahora mismo me doy cuenta que ademas de no poder instalar ningun antivirus, no puedo modificar los parametros de mi firewall, la barra de idiomas se cambia cada vez que quiere, no he logrado iniciar el servicio de Firewall manualmente, porque no esta listado en mi lista de servicios (!!) y ya he hecho muchas pero muchas cosas para tratar de solucionar esto.. he pasado antivirus online, de kaspersky, sin instalacion obviamente.. he hecho cosas con el regedit.. en fin, ya no recuerdo cuantas cosas he hecho.. si necesitan que pase alguna herramienta, me dicen, si necesitan que publique un post con resultados de analisis.. en fin, lo que sea que necesiten.



Cosas malas que hago con mi pc" descargar torrents, aunque leo los comentarios y trato de que sean bastante limpios los archivos, creo que alguno de los que he descargado pueden estar infectados..

ademas de eso, desactive un dia el NOD32 porque no me dejaba correr un crack para un programa de edicion que utilizo (descargado por torrent desde ThePirateBay).. y creo que hasta desactive el firewall de windows.. en fin, que he hecho bastante mal en mi pc y ahora estoy pagando..



Bueno, creo que he dado bastante lata.. cualquier tipo de ayuda sera bienvenida..

gracias !!

LynnardSD

[msc hotline sat]

Sí, no es nada prudente hacer las cosas que hizo ...[i][b] "desactive un dia el NOD32 porque no me dejaba correr un crack para un programa de edicion que utilizo"[/b][/i]



Pues pruebe el ELISTARA y nos postea el informe resultante:


[quote="para DESCARGAR el ELISTARA, msc"]



http://www.zonavirus.com/descargas/descargar-elistara.asp



Tras probarlo, reiniciar y postearnos el contenido de C:\infosat.txt para ver el

resultado

del proceso [/quote]



Y si en el informe no se detectara nada ni pidiera muestra para analizar, proceder

con el SPROCES :




[quote="msc"]
[b]SPROCES.EXE[/b] (herramienta de investigación)

http://www.zonavirus.com/descargas/descargar-sproces.asp



Y tras pulsar en SALIR, postearnos el contenido del C:\SPROCLOG.TXT [/quote]

lo analizaremos e informaremos al respecto.



saludos



ms, 16-9-2012

[LynnardSD]

Adjunto el InfoSat..

les paso las muestras que solicitó por correo..

Gracias !!!!

[msc hotline sat]

Pues de entrada vemos que ya se eliminó un malware:



(16-9-2012 18:23:47 (GMT))

EliStartPage v26.13 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 13 de Septiembre del 2012)

--------------------------------------------------

Sistema Operativo: Windows 7 Home Premium

Usuario: Lynnard

ID de Usuario: S-1-5-21-1977197213-3206340961-3082662528-1001



Lista de Acciones (por Acción Directa):

Por favor, envienos el INFOSAT.TXT y una muestra del fichero

C:\Muestras\SYSHOST.EXE.Muestra EliStartPage v26.13

a "virus@satinfo.es". Gracias.

C:\WINDOWS\INSTALLER\{85E2B7A0-C8BB-DBA1-6524-349244E80723}\SYSHOST.EXE --> Acceso Denegado.

No Existe el Fichero HOSTS.

Creado HOSTS por el Original.

Eliminadas las Paginas de Inicio y de Busqueda del IE

Eliminados Ficheros Temporales del IE

Reinicie para Completar la Limpieza.



(16-9-2012 18:43:25 (GMT))

EliStartPage v26.13 (c)2012 S.G.H. / Satinfo S.L. (Actualizado el 13 de Septiembre del 2012)

--------------------------------------------------

Sistema Operativo: Windows 7 Home Premium

Usuario: Lynnard

ID de Usuario: S-1-5-21-1977197213-3206340961-3082662528-1001



Lista de Acciones (por Exploración):

Explorando "C:\"

C:\Users\Lynnard\Documents\Programs\VMXP_PROG_2011.EXE --> Eliminado, Spy.Banker.BATS(pack)





Y el SYSHOST.EXE pedido debe tratarse de una variante de la familia CUTWAIL, como el que indicabamos en :



https://foros.zonavirus.com/viewtopic.php?f=12&t=42296&p=194636&hilit=syshost.exe#p194636



y en cuanto recibamos la muestra, la analizaremos y, si procede, incluiremos su control y eliminacion en la siguiente version del ELISTARA.



saludos



ms, 16-9-2012

[LynnardSD]

Pues sì, detectò un troyano y al parecer lo eliminò.. pero despuès de reiniciar sigue el problema, y como pueden ver por la posiciòn de mis acentos, la barra de idioma de la pc cambia a su antojo.. ahora mismo està en francès, y antes de reiniciar estaba en espannol.. incluso elimino las entradas de teclado inglès y francès, para solo dejar la de espannol y aun asì, a veces funciona y a veces no.. un desastre.

Espero el anàlisis de la muestra..

El firewall sigue sin poder modificarse y sigo sin poder instalar ningùn antivirus.. ademàs de los otros sìntomas anteriores.. ah, creo que se me habìa olvidado: hasta hace poco utilizaba un mouse usb que la pc reconocìa inmediatamente como plug and play, y ahora tengo que reiniciar la pc para que reconozca el dichoso mouse..

Bue, esas son las noticias.. gracias por mantenerse en contacto. Ustedes son verdaderamente rapidos en responder.. aun si no logramos resolver el asunto, quiero que sepan que estoy muy agradecido por la ayuda..

saludos,

Lynnard

[msc hotline sat]

Ya se ha indicado que posiblemente se trate de una variante de CUTWAIL, que mañana, cuando recibamos la muestra en SATINFO, se analizará y procesará debidamente.



saludos



ms, 16-9-2012

[msc hotline sat]

Revisadas las entradas de los ficheros enviados este fin de semana, ninguna de zonavirus corresponde a su nick...



Pero un "no cliente" nos ha enviado hoy un CUTWAIL:



Por si no hubiera enviado la muestra siguiendo las normas, (https://foros.zonavirus.com/viewtopic.php?f=5&t=14253) y fuera el suyo, pruebe el ELISTARA 26.15 que contemplará las últimas muestras recibidas, y que estará disponible a partir de las 19 h CEST de hojy



saludos



ms, 17-9-2012

[LynnardSD]

Evidentemente fui yo quien envió los ficheros sin seguir el protocolo. Al menos todo parece indicar eso. Esperemos que no haya próxima.

A lo que vamos: pasé la versión actualizada del EliStarA (26.15) y limpió el Cutwail que había detectado, pero los problemas siguen: no puedo activar el Firewall.. ni siquiera manualmente, desde el msconfig me aparece el servicio como detenido.

Además de esto, ninguno de los dos antivirus que tengo los puedo instalar.. ni siquiera la versión de prueba del Ksp.



Alguna otra idea?? Sugerencia?? Reinstall??



Saludos y gracias!!!

LynnardSD

[msc hotline sat]

Pues aparte de este, habría algo mas ...



Como ya te indicamos, prueba el SPROCES y posteanos el log resultante, y buscaremos lo que pueda haber no controlado aun.



(Aparte de los 80 millones de malwares conocidos, hay mas de 50.000 nuevos cada día, asi que no es extraño que tengas alguno mas, aoarte del Cutwail ya eliminado ! )



saludos



ms, 18-9-2012

[LynnardSD]

Bien, he leìdo las normas para postear los logs de SProcLog y segun entendì, se pueden postear aquì mismo en el tema.. asì que allà vamos aunque me parece que el archvo es enorme como para ponerlo en un post.. Gracias.



(19-9-2012 00:52:00 GMT)

SProces v6.5 (c)2012 S.G.H. / Satinfo S.L.

-------------------------------------------

Sistema Operativo: Windows 7 Home Premium (v6.1.7601)

Internet Explorer: (v9.0.8112.16421) 0

Equipo: LYNNARD

Usuario: Lynnard

Sesión de Usuario: Lynnard



105 Procesos Activos:

C:\WINDOWS\SYSTEM32\SMSS.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\WININIT.EXE

C:\WINDOWS\SYSTEM32\CSRSS.EXE

C:\WINDOWS\SYSTEM32\SERVICES.EXE

C:\WINDOWS\SYSTEM32\LSASS.EXE

C:\WINDOWS\SYSTEM32\LSM.EXE

C:\WINDOWS\SYSTEM32\WINLOGON.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\HP SIMPLEPASS 2011\TRUESUITESERVICE.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ATIESRXX.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\STACSV64.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\HPSERVICE.EXE

C:\WINDOWS\SYSTEM32\WUDFHOST.EXE

C:\WINDOWS\SYSTEM32\ATIECLXX.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\WLANEXT.EXE

C:\WINDOWS\SYSTEM32\CONHOST.EXE

C:\WINDOWS\SYSTEM32\SPOOLSV.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\EPSON\EBAPI\EEBSVC.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\ADOBE\ARM\1.0\ARMSVC.EXE

C:\WINDOWS\SYSTEM32\AESTSR64.EXE

C:\WINDOWS\SYSTEM32\FUEL.SERVICE.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\APPLE\MOBILE DEVICE SUPPORT\APPLEMOBILEDEVICESERVICE.EXE

C:\WINDOWS\SYSTEM32\MDNSRESPONDER.EXE

C:\WINDOWS\SYSTEM32\BTWDINS.EXE

C:\PROGRAM FILES\UNIVLAVAL\CVPND.EXE

C:\WINDOWS\SYSTEM32\EPCP.EXE

C:\WINDOWS\SYSWOW64\EZSHAREDSVCHOST.EXE

C:\WINDOWS\SYSTEM32\HPCLIENTSERVICES.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPDRVMNTSVC.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP QUICK LAUNCH\HPWMISVC.EXE

C:\WINDOWS\SYSTEM32\RICONMAN.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\ST_RSSER64.EXE

C:\WINDOWS\SYSTEM32\VMWARE-USBARBITRATOR64.EXE

C:\WINDOWS\SYSTEM32\WLIDSVC.EXE

C:\WINDOWS\SYSTEM32\POCKETCLOUDSERVICE.EXE

C:\WINDOWS\SYSTEM32\WLIDSVCM.EXE

C:\PROGRAM FILES (X86)\YAHOO!\SOFTWAREUPDATE\YAHOOAUSERVICE.EXE

C:\PROGRAM FILES (X86)\VMWARE\VMWARE PLAYER\VMWARE-AUTHD.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\SVCHOST.EXE

C:\WINDOWS\SYSTEM32\HPHC_SERVICE.EXE

C:\PROGRAM FILES (X86)\GOOGLE\UPDATE\1.3.21.115\GOOGLECRASHHANDLER.EXE

C:\WINDOWS\SYSTEM32\GOOGLECRASHHANDLER64.EXE

C:\WINDOWS\SYSTEM32\WMPNETWK.EXE

C:\WINDOWS\SYSTEM32\SEARCHINDEXER.EXE

C:\WINDOWS\SYSTEM32\TASKHOST.EXE

C:\WINDOWS\SYSTEM32\DWM.EXE

C:\WINDOWS\SYSTEM32\EXPLORER.EXE

C:\WINDOWS\SYSTEM32\WMIPRVSE.EXE

C:\WINDOWS\SYSTEM32\UNSECAPP.EXE

C:\WINDOWS\SYSTEM32\TASKENG.EXE

C:\PROGRAM FILES (X86)\CYBERLINK\YOUCAM\YCMMIRAGE.EXE

C:\WINDOWS\SYSTEM32\SYNTPENH.EXE

C:\WINDOWS\SYSTEM32\WYSEBROWSER.EXE

C:\WINDOWS\SYSTEM32\STTRAY64.EXE

C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORSHIELD.EXE

C:\WINDOWS\SYSTEM32\SYNTPHELPER.EXE

C:\PROGRAM FILES (X86)\DAEMON TOOLS PRO\DTAGENT.EXE

C:\USERS\LYNNARD\APPDATA\LOCAL\FACEBOOK\UPDATE\FACEBOOKUPDATE.EXE

C:\PROGRAM FILES (X86)\GOOGLE\DRIVE\GOOGLEDRIVESYNC.EXE

C:\WINDOWS\SYSTEM32\BTTRAY.EXE

C:\PROGRAM FILES (X86)\CYBERLINK\POWERDVD10\PDVD10SERV.EXE

C:\PROGRAM FILES (X86)\CYBERLINK\SHARED FILES\BRS.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP QUICK LAUNCH\HPMSGSVC.EXE

C:\WINDOWS\SYSTEM32\HPCONNECTIONMANAGER.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP ON SCREEN DISPLAY\HPOSD.EXE

C:\PROGRAM FILES (X86)\DIVX\DIVX UPDATE\DIVXUPDATE.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\SHARED\HPQWMIEX.EXE

C:\PROGRAM FILES (X86)\ITUNES\ITUNESHELPER.EXE

C:\PROGRAM FILES (X86)\JAVA\JRE7\BIN\JAVAW.EXE

C:\PROGRAM FILES (X86)\PDF24\PDF24.EXE

C:\PROGRAM FILES (X86)\COMMON FILES\JAVA\JAVA UPDATE\JUSCHED.EXE

C:\PROGRAM FILES (X86)\EPSON SOFTWARE\EVENT MANAGER\EEVENTMANAGER.EXE

C:\WINDOWS\SYSTEM32\IPODSERVICE.EXE

C:\PROGRAM FILES (X86)\SPYWARE TERMINATOR\SPYWARETERMINATORUPDATE.EXE

C:\PROGRAM FILES (X86)\GOOGLE\DRIVE\GOOGLEDRIVESYNC.EXE

C:\WINDOWS\SYSWOW64\RUNDLL32.EXE

C:\WINDOWS\SYSTEM32\BTSTACKSERVER.EXE

C:\PROGRAM FILES\WIDCOMM\BLUETOOTH SOFTWARE\BLUETOOTHHEADSETPROXY.EXE

C:\PROGRAM FILES (X86)\HEWLETT-PACKARD\HP CONNECTION MANAGER\HPCMSRV.EXE

C:\WINDOWS\SYSTEM32\MOM.EXE

C:\WINDOWS\SYSTEM32\CCC.EXE

C:\WINDOWS\SYSTEM32\HPCASLNOTIFICATION.EXE

C:\WINDOWS\SYSTEM32\PRESENTATIONFONTCACHE.EXE

C:\PROGRAM FILES (X86)\HP SIMPLEPASS 2011\TOUCHCONTROL.EXE

C:\PROGRAM FILES (X86)\HP SIMPLEPASS 2011\BIOMONITOR.EXE

C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\FIREFOX.EXE

C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGIN-CONTAINER.EXE

C:\USERS\LYNNARD\APPDATA\LOCAL\GOOGLE\GOOGLE TALK PLUGIN\GOOGLETALKPLUGIN.EXE

C:\WINDOWS\SYSWOW64\WBEM\WMIPRVSE.EXE

C:\PROGRAM FILES (X86)\MOZILLA FIREFOX\PLUGIN-CONTAINER.EXE

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASHPLAYERPLUGIN_11_4_402_265.EXE

C:\WINDOWS\SYSWOW64\MACROMED\FLASH\FLASHPLAYERPLUGIN_11_4_402_265.EXE

C:\WINDOWS\SYSTEM32\AUDIODG.EXE

C:\USERS\LYNNARD\DESKTOP\SPROCES.EXE



R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch

R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings,ProxyOverride = *.local (0)

R3 - URLSearchHook: Microsoft Url Search Hook - {CFBFAE00-17A6-11D0-99CB-00C04FD64497} - C:\Windows\SysWOW64\ieframe.dll

O2 - BHO: &Yahoo! Toolbar Helper - {02478D38-C3F9-4efb-9B51-7695ECA05670} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll

O2 - BHO: AcroIEHelperStub - {18DF081C-E8AD-4283-A596-FA578C2EBDC3} - C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll

O2 - BHO: Increase performance and video formats for your HTML5 <video> - {326E768D-4182-46FD-9C16-1449A49795F4} - C:\Program Files (x86)\DivX\DivX Plus Web Player\ie\DivXHTML5\DivXHTML5.dll

O2 - BHO: Groove GFS Browser Helper - {72853161-30C5-4D22-B7F9-0BBC1D38A37E} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL

O2 - BHO: Java(tm) Plug-In SSV Helper - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre7\bin\ssv.dll

O2 - BHO: TSBHO Class - {8590886E-EC8C-43C1-A32C-E4C2B0B6395B} - C:\Program Files (x86)\HP SimplePass 2011\IEBHO.dll

O2 - BHO: Windows Live ID Sign-in Helper - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll

O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O2 - BHO: SkypeIEPluginBHO - {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O2 - BHO: URLRedirectionBHO - {B4F3A835-0E21-4959-BA22-42B3008E02FF} - C:\PROGRA~2\MICROS~1\Office14\URLREDIR.DLL

O2 - BHO: Java(tm) Plug-In 2 SSV Helper - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre7\bin\jp2ssv.dll

O2 - BHO: SingleInstance Class - {FDAD4DA1-61A2-4FD8-9C17-86F7AC245081} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\YTSingleInstance.dll

O3 - Toolbar: Yahoo! Barre d'outils - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\PROGRA~2\Yahoo!\Companion\Installs\cpn0\yt.dll

O3 - Toolbar: Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll

O4 - HKCU\..\Run: [Google Update] "C:\Users\Lynnard\AppData\Local\Google\Update\GoogleUpdate.exe" /c

O4 - HKCU\..\Run: [DAEMON Tools Pro Agent] "C:\Program Files (x86)\DAEMON Tools Pro\DTAgent.exe" -autorun

O4 - HKCU\..\Run: [Facebook Update] "C:\Users\Lynnard\AppData\Local\Facebook\Update\FacebookUpdate.exe" /c /nocrashserver

O4 - HKCU\..\Run: [GoogleDriveSync] "C:\Program Files (x86)\Google\Drive\googledrivesync.exe" /autostart

O4 - HKCU\..\Run: [AdobeBridge]

O4 - HKLM\..\Run: [StartCCC] "C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static\CLIStart.exe" MSRun

O4 - HKLM\..\Run: [HPConnectionManager] C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\HPCMDelayStart.exe

O4 - HKLM\..\Run: [RemoteControl10] "C:\Program Files (x86)\CyberLink\PowerDVD10\PDVD10Serv.exe"

O4 - HKLM\..\Run: [BDRegion] C:\Program Files (x86)\Cyberlink\Shared files\brs.exe

O4 - HKLM\..\Run: [HP Quick Launch] C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPMSGSVC.exe

O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe"

O4 - HKLM\..\Run: [Adobe ARM] "C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe"

O4 - HKLM\..\Run: [HPOSD] C:\Program Files (x86)\Hewlett-Packard\HP On Screen Display\HPOSD.exe

O4 - HKLM\..\Run: [DivXUpdate] "C:\Program Files (x86)\DivX\DivX Update\DivXUpdate.exe" /CHECKNOW

O4 - HKLM\..\Run: [APSDaemon] "C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe"

O4 - HKLM\..\Run: [iTunesHelper] "C:\Program Files (x86)\iTunes\iTunesHelper.exe"

O4 - HKLM\..\Run: [Ultimate Control] "C:\Program Files (x86)\Ultimate Control\UControl.jar" -h

O4 - HKLM\..\Run: [AdobeCS4ServiceManager] "C:\Program Files (x86)\Common Files\Adobe\CS4ServiceManager\CS4ServiceManager.exe" -launchedbylogin

O4 - HKLM\..\Run: [PDFPrint] C:\Program Files (x86)\PDF24\pdf24.exe

O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

O4 - HKLM\..\Run: [EEventManager] "C:\Program Files (x86)\Epson Software\Event Manager\EEventManager.exe"

O4 - HKLM\..\Run: [QuickTime Task] "C:\Program Files (x86)\QuickTime\QTTask.exe" -atboottime

O4 - HKLM\..\Run: [BCSSync] "C:\Program Files (x86)\Microsoft Office\Office14\BCSSync.exe" /DelayServices

O4 - HKLM\..\RunOnce: [ReEXEc] C:\Users\Lynnard\Documents\EliStarA.exe

O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio Local')

O4 - HKUS\S-1-5-19\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Servicio Local')

O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /autoRun (User 'Servicio de red')

O4 - HKUS\S-1-5-20\..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe (User 'Servicio de red')

O4 - Global Startup: Bluetooth.lnk = C:\Program Files (x86)\WIDCOMM\Bluetooth Software\BTTray.exe

O4 - Global Startup: Universite Laval Client VPN ULaval.lnk = C:\Program Files\UnivLaval\vpngui.exe "-user_logon"

O8 - Extra context menu item: Add to Evernote 4.0 - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204

O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~2\MICROS~1\Office14\EXCEL.EXE/3000

O8 - Extra context menu item: Envoyer au périphérique &Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O8 - Extra context menu item: Envoyer l'&image au périphérique Bluetooth... - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie_ctx.htm

O9 - Extra button: @C:\Program Files (x86)\Windows Live\Writer\WindowsLiveWriterShortcuts.dll,-1004 - {219C3416-8CB2-491a-A3C7-D9FCDDC9D600} - C:\Program Files (x86)\Windows Live\Writer\WriterBrowserExtension.dll

O9 - Extra button: Skype Click to Call - {898EA8C8-E7FF-479B-8935-AEC46303B9E5} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O9 - Extra button: @C:\Program Files (x86)\Evernote\Evernote\Resource.dll,-101 - {A95fe080-8f5d-11d2-a20b-00aa003c157a} - res://C:\Program Files (x86)\Evernote\Evernote\EvernoteIE.dll/204 (file missing)

O9 - Extra button: Send To Bluetooth - {CCA281CA-C863-46ef-9331-5C8D4460577F} - C:\Program Files\WIDCOMM\Bluetooth Software\btsendto_ie.htm

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\COMMON FILES\MICROSOFT SHARED\WINDOWS LIVE\WLIDNSP.DLL

O10 - Unknown file in Winsock LSP: C:\PROGRAM FILES (X86)\BONJOUR\MDNSNSP.DLL

O11 - Options group: [ACCELERATED_GRAPHICS] Accelerated graphics

O16 - DPF: {7530BFB8-7293-4D34-9923-61A11451AFC5} - http://download.eset.com/special/eos/OnlineScanner.cab

O16 - DPF: {8AD9C840-044E-11D1-B3E9-00805F499D93} (Java Plug-in 10.6.2) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

O16 - DPF: {CAFEEFAC-0016-0000-0031-ABCDEFFEDCBA} (Java Plug-in 1.6.0_31) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

O16 - DPF: {CAFEEFAC-FFFF-FFFF-FFFF-ABCDEFFEDCBA} (Java Plug-in 10.6.2) - http://java.sun.com/update/1.6.0/jinstall-1_6_0_31-windows-i586.cab

O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: ms-help - {314111C7-A502-11D2-BBCA-00C04F8EC294} - C:\Program Files (x86)\Common Files\Microsoft Shared\Help\hxds.dll

O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\Windows Live\Messenger\msgrapp.dll

O18 - Protocol: skype-ie-addon-data - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\skypeieplugin.dll

O18 - Protocol: wlmailhtml - {03C514A3-1EFB-4856-9F99-10D7BE1653C0} - C:\Program Files (x86)\Windows Live\Mail\mailcomm.dll

O18 - Protocol: wlpg - {E43EF6CD-A37A-4A9B-9E6F-83F89B8E6324} - C:\Program Files (x86)\Windows Live\Photo Gallery\AlbumDownloadProtocolHandler.dll

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - (no file)

O22 - ShellExecuteHooks: Groove GFS Stub Execution Hook - {B5A7F190-DDA6-4420-B3BA-52453494E6CD} - C:\PROGRA~2\MICROS~1\Office14\GROOVEEX.DLL



Información Adicional:

----------------------



Listado de Servicios (Carga Automatica):

----------------------------------------

O23 - Service: Adobe Acrobat Update Service (AdobeARMservice) - Adobe Systems Incorporated - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

O23 - Service: Andrea ST Filters Service (AESTFilters) - Andrea Electronics Corporation - C:\Program Files\IDT\WDM\AESTSr64.exe

O23 - Service: AMD External Events Utility - AMD - C:\WINDOWS\system32\atiesrxx.exe (file missing)

O23 - Service: AMD FUEL Service - Advanced Micro Devices, Inc. - C:\Program Files\ATI Technologies\ATI.ACE\Fuel\Fuel.Service.exe

O23 - Service: Apple Mobile Device - Apple Inc. - C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe

O23 - Service: Service Bonjour (Bonjour Service) - Apple Inc. - C:\Program Files\Bonjour\mDNSResponder.exe

O23 - Service: Bluetooth Service (btwdins) - Broadcom Corporation. - C:\Program Files\WIDCOMM\Bluetooth Software\btwdins.exe

O23 - Service: CyberLink Product - 2011/07/26 04:00:53 (CLKMSVC10_38F51D56) - CyberLink - C:\Program Files (x86)\CyberLink\PowerDVD10\NavFilter\kmsvc.exe

O23 - Service: Cisco Systems, Inc. VPN Service (CVPND) - Cisco Systems, Inc. - C:\Program Files\UnivLaval\cvpnd.exe

O23 - Service: EpsonBidirectionalService - SEIKO EPSON CORPORATION - C:\Program Files (x86)\Common Files\EPSON\EBAPI\eEBSVC.exe

O23 - Service: EpsonCustomerParticipation - SEIKO EPSON CORPORATION - C:\Program Files\EPSON\EpsonCustomerParticipation\EPCP.exe

O23 - Service: Epson Scanner Service (EpsonScanSvc) - Seiko Epson Corporation - C:\Windows\system32\EscSvc64.exe (file missing)

**O23 - Service: @%SystemRoot%\system32\wevtsvc.dll,-200 (eventlog) - Unknown owner - %SystemRoot%\System32\svchost.exe -k LocalServiceNetworkRestricted - C:\WINDOWS\SYSTEM32\NULL1 (file missing)

O23 - Service: Easybits Services for Windows (ezSharedSvc) - EasyBits Software AS - C:\Windows\System32\ezSharedSvcHost.exe

O23 - Service: TrueSuiteService (FPLService) - HP - C:\Program Files (x86)\HP SimplePass 2011\TrueSuiteService.exe

O23 - Service: Service Google Update (gupdate) (gupdate) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: VMware hcmon (hcmon) - Unknown owner - C:\Windows\system32\drivers\hcmon.sys (file missing)

O23 - Service: HP Health Check Service - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\HP Health Check\hphc_service.exe

O23 - Service: HP Client Services (HPClientSvc) - Hewlett-Packard Company - C:\Program Files\Hewlett-Packard\HP Client Services\HPClientServices.exe

O23 - Service: HP Quick Synchronization Service (HPDrvMntSvc.exe) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\HPDrvMntSvc.exe

O23 - Service: HP Service (hpsrv) - Hewlett-Packard Company - C:\WINDOWS\system32\Hpservice.exe (file missing)

O23 - Service: HPWMISVC - Hewlett-Packard Development Company, L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Quick Launch\HPWMISVC.exe

O23 - Service: IconMan_R - Realsil Microelectronics Inc. - C:\Program Files (x86)\Realtek\Realtek PCIE Card Reader\RIconMan.exe

O23 - Service: Link-Layer Topology Discovery Mapper I/O Driver (lltdio) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\lltdio.sys (file missing)

O23 - Service: @%systemroot%\system32\drivers\luafv.sys,-100 (luafv) - Unknown owner - C:\WINDOWS\system32\drivers\luafv.sys (file missing)

O23 - Service: PEAUTH - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\peauth.sys (file missing)

O23 - Service: Link-Layer Topology Discovery Responder (rspndr) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\rspndr.sys (file missing)

O23 - Service: Spyware Terminator Driver Filter (sp_rsdrv2) - Windows (R) Win 7 DDK provider - C:\WINDOWS\SYSTEM32\DRIVERS\stflt.sys (file missing)

O23 - Service: Spyware Terminator 2012 Realtime Shield Service (ST2012_Svc) - Crawler.com - C:\Program Files (x86)\Spyware Terminator\st_rsser64.exe

O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10101 (STacSV) - IDT, Inc. - C:\Program Files\IDT\WDM\STacSV64.exe

O23 - Service: TCP/IP Registry Compatibility (tcpipreg) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\tcpipreg.sys (file missing)

O23 - Service: VMware Authorization Service (VMAuthdService) - VMware, Inc. - C:\Program Files (x86)\VMware\VMware Player\vmware-authd.exe

O23 - Service: VMware Bridge Protocol (VMnetBridge) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\vmnetbridge.sys (file missing)

O23 - Service: VMware DHCP Service (VMnetDHCP) - VMware, Inc. - C:\Windows\system32\vmnetdhcp.exe

O23 - Service: VMware Network Application Interface (VMnetuserif) - Unknown owner - C:\Windows\system32\drivers\vmnetuserif.sys (file missing)

O23 - Service: VMware USB Arbitration Service (VMUSBArbService) - VMware, Inc. - C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

O23 - Service: VMware NAT Service - VMware, Inc. - C:\Windows\system32\vmnat.exe

O23 - Service: VMware vmx86 (vmx86) - Unknown owner - C:\Windows\system32\drivers\vmx86.sys (file missing)

O23 - Service: @%PROGRAMFILES%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %PROGRAMFILES%\Windows Media Player\wmpnetwk.exe (file missing)

O23 - Service: Wyse PocketCloud (WysePocketCloud) - Unknown owner - C:\Program Files (x86)\Wyse\PocketCloud Windows Companion\PocketCloudService.exe

O23 - Service: Yahoo! Updater (YahooAUService) - Yahoo! Inc. - C:\Program Files (x86)\Yahoo!\SoftwareUpdate\YahooAUService.exe



Listado de Servicios (Carga Manual):

------------------------------------

O23 - Service: 1394 OHCI Compliant Host Controller (1394ohci) - Unknown owner - C:\WINDOWS\system32\drivers\1394ohci.sys (file missing)

O23 - Service: HP Mobile Data Protection Sensor (Accelerometer) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\Accelerometer.sys (file missing)

O23 - Service: ACPI Power Meter Driver (AcpiPmi) - Unknown owner - C:\WINDOWS\system32\drivers\acpipmi.sys (file missing)

O23 - Service: adp94xx - Unknown owner - C:\WINDOWS\system32\drivers\adp94xx.sys (file missing)

O23 - Service: adpahci - Unknown owner - C:\WINDOWS\system32\drivers\adpahci.sys (file missing)

O23 - Service: adpu320 - Unknown owner - C:\WINDOWS\system32\drivers\adpu320.sys (file missing)

O23 - Service: Intel AGP Bus Filter (agp440) - Unknown owner - C:\WINDOWS\system32\drivers\agp440.sys (file missing)

O23 - Service: aliide - Unknown owner - C:\WINDOWS\system32\drivers\aliide.sys (file missing)

O23 - Service: ALSysIO - Unknown owner - C:\Users\Lynnard\AppData\Local\Temp\ALSysIO64.sys (file missing)

O23 - Service: AMD USB 3.0 Hub Driver (amdhub30) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\amdhub30.sys (file missing)

O23 - Service: amdide - Unknown owner - C:\WINDOWS\system32\drivers\amdide.sys (file missing)

O23 - Service: AMD IO Driver (amdiox64) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\amdiox64.sys (file missing)

O23 - Service: AMD K8 Processor Driver (AmdK8) - Unknown owner - C:\WINDOWS\system32\drivers\amdk8.sys (file missing)

O23 - Service: amdkmdag - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\atikmdag.sys (file missing)

O23 - Service: amdkmdap - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\atikmpag.sys (file missing)

O23 - Service: AMD Processor Driver (AmdPPM) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\amdppm.sys (file missing)

O23 - Service: amdsata - Unknown owner - C:\WINDOWS\system32\drivers\amdsata.sys (file missing)

O23 - Service: amdsbs - Unknown owner - C:\WINDOWS\system32\drivers\amdsbs.sys (file missing)

O23 - Service: AMD USB 3.0 Host Controller Driver (amdxhc) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\amdxhc.sys (file missing)

O23 - Service: @%systemroot%\system32\appidsvc.dll,-102 (AppID) - Unknown owner - C:\WINDOWS\system32\drivers\appid.sys (file missing)

O23 - Service: arc - Unknown owner - C:\WINDOWS\system32\drivers\arc.sys (file missing)

O23 - Service: arcsas - Unknown owner - C:\WINDOWS\system32\drivers\arcsas.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32000 (AsyncMac) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\asyncmac.sys (file missing)

O23 - Service: ATI Function Driver for HD Audio Service (AtiHDAudioService) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\AtihdW76.sys (file missing)

O23 - Service: Broadcom NetXtreme II VBD (b06bdrv) - Unknown owner - C:\WINDOWS\system32\drivers\bxvbda.sys (file missing)

O23 - Service: Broadcom NetXtreme Gigabit Ethernet - NDIS 6.0 (b57nd60a) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\b57nd60a.sys (file missing)

O23 - Service: Pilote pour carte réseau Broadcom 802.11 (BCM43XX) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\bcmwl664.sys (file missing)

*O23 - Service: @%systemroot%\system32\browser.dll,-102 (bowser) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\bowser.sys (file missing)

O23 - Service: Brother USB Mass-Storage Lower Filter Driver (BrFiltLo) - Unknown owner - C:\WINDOWS\system32\drivers\BrFiltLo.sys (file missing)

O23 - Service: Brother USB Mass-Storage Upper Filter Driver (BrFiltUp) - Unknown owner - C:\WINDOWS\system32\drivers\BrFiltUp.sys (file missing)

O23 - Service: Brother MFC Serial Port Interface Driver (WDM) (Brserid) - Unknown owner - C:\WINDOWS\System32\Drivers\Brserid.sys (file missing)

O23 - Service: Brother WDM Serial driver (BrSerWdm) - Unknown owner - C:\WINDOWS\System32\Drivers\BrSerWdm.sys (file missing)

O23 - Service: Brother MFC USB Fax Only Modem (BrUsbMdm) - Unknown owner - C:\WINDOWS\System32\Drivers\BrUsbMdm.sys (file missing)

O23 - Service: Brother MFC USB Serial WDM Driver (BrUsbSer) - Unknown owner - C:\WINDOWS\System32\Drivers\BrUsbSer.sys (file missing)

O23 - Service: Service d'énumérateur Bluetooth (BthEnum) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\BthEnum.sys (file missing)

O23 - Service: Bluetooth Serial Communications Driver (BTHMODEM) - Unknown owner - C:\WINDOWS\system32\drivers\bthmodem.sys (file missing)

O23 - Service: Périphérique Bluetooth (réseau personnel) (BthPan) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\bthpan.sys (file missing)

O23 - Service: Pilote de port Bluetooth (BTHPORT) - Unknown owner - C:\WINDOWS\System32\Drivers\BTHport.sys (file missing)

O23 - Service: Pilote USB radio Bluetooth (BTHUSB) - Unknown owner - C:\WINDOWS\System32\Drivers\BTHUSB.sys (file missing)

O23 - Service: Bluetooth AMP USB Filter (btwampfl) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\btwampfl.sys (file missing)

O23 - Service: Périphérique audio Bluetooth (btwaudio) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\btwaudio.sys (file missing)

O23 - Service: Bluetooth AVDT (btwavdt) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\btwavdt.sys (file missing)

O23 - Service: Bluetooth L2CAP Service (btwl2cap) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\btwl2cap.sys (file missing)

O23 - Service: btwrchid - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\btwrchid.sys (file missing)

O23 - Service: Consumer IR Devices (circlass) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\circlass.sys (file missing)

O23 - Service: CyberLink WebCam Virtual Driver (clwvd) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\clwvd.sys (file missing)

O23 - Service: Microsoft ACPI Control Method Battery Driver (CmBatt) - Unknown owner - C:\WINDOWS\system32\drivers\CmBatt.sys (file missing)

O23 - Service: cmdide - Unknown owner - C:\WINDOWS\system32\drivers\cmdide.sys (file missing)

O23 - Service: Composite Bus Enumerator Driver (CompositeBus) - Unknown owner - C:\WINDOWS\system32\drivers\CompositeBus.sys (file missing)

O23 - Service: Microsoft Trusted Audio Drivers (drmkaud) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\drmkaud.sys (file missing)

O23 - Service: LDDM Graphics Subsystem (DXGKrnl) - Unknown owner - C:\WINDOWS\System32\drivers\dxgkrnl.sys (file missing)

O23 - Service: Broadcom NetXtreme II 10 GigE VBD (ebdrv) - Unknown owner - C:\WINDOWS\system32\drivers\evbda.sys (file missing)

O23 - Service: elxstor - Unknown owner - C:\WINDOWS\system32\drivers\elxstor.sys (file missing)

O23 - Service: Microsoft Hardware Error Device Driver (ErrDev) - Unknown owner - C:\WINDOWS\system32\drivers\errdev.sys (file missing)

O23 - Service: Floppy Disk Controller Driver (fdc) - Unknown owner - C:\WINDOWS\system32\drivers\fdc.sys (file missing)

O23 - Service: @%SystemRoot%\system32\drivers\filetrace.sys,-10001 (Filetrace) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\filetrace.sys (file missing)

O23 - Service: FLEXnet Licensing Service - Acresso Software Inc. - C:\Program Files (x86)\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe

O23 - Service: Floppy Disk Driver (flpydisk) - Unknown owner - C:\WINDOWS\system32\drivers\flpydisk.sys (file missing)

O23 - Service: @%SystemRoot%\system32\drivers\fsdepends.sys,-10001 (FsDepends) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\FsDepends.sys (file missing)

O23 - Service: Microsoft Generic AGPv3.0 Filter for K8 Processor Platforms (gagp30kx) - Unknown owner - C:\WINDOWS\system32\drivers\gagp30kx.sys (file missing)

O23 - Service: GamesAppService - WildTangent, Inc. - C:\Program Files (x86)\WildTangent Games\App\GamesAppService.exe

O23 - Service: GEAR ASPI Filter Driver (GEARAspiWDM) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\GEARAspiWDM.sys (file missing)

O23 - Service: Service Google Update (gupdatem) (gupdatem) - Google Inc. - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

O23 - Service: Google Software Updater (gusvc) - Google - C:\Program Files (x86)\Google\Common\Google Updater\GoogleUpdaterService.exe

O23 - Service: Hauppauge Consumer Infrared Receiver (hcw85cir) - Unknown owner - C:\WINDOWS\system32\drivers\hcw85cir.sys (file missing)

O23 - Service: Microsoft 1.1 UAA Function Driver for High Definition Audio Service (HdAudAddService) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\HdAudio.sys (file missing)

O23 - Service: Microsoft UAA Bus Driver for High Definition Audio (HDAudBus) - Unknown owner - C:\WINDOWS\system32\drivers\HDAudBus.sys (file missing)

O23 - Service: HID UPS Battery Driver (HidBatt) - Unknown owner - C:\WINDOWS\system32\drivers\HidBatt.sys (file missing)

O23 - Service: Microsoft Bluetooth HID Miniport (HidBth) - Unknown owner - C:\WINDOWS\system32\drivers\hidbth.sys (file missing)

O23 - Service: Microsoft Infrared HID Driver (HidIr) - Unknown owner - C:\WINDOWS\system32\drivers\hidir.sys (file missing)

O23 - Service: Pilote de classe HID Microsoft (HidUsb) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\hidusb.sys (file missing)

O23 - Service: HP Connection Manager 4.0 Service (hpCMSrv) - Hewlett-Packard Development Company L.P. - C:\Program Files (x86)\Hewlett-Packard\HP Connection Manager\hpCMSrv.exe

O23 - Service: HP Software Framework Service (hpqwmiex) - Hewlett-Packard Company - C:\Program Files (x86)\Hewlett-Packard\Shared\hpqWmiEx.exe

O23 - Service: HpSAMD - Unknown owner - C:\WINDOWS\system32\drivers\HpSAMD.sys (file missing)

O23 - Service: @%SystemRoot%\system32\drivers\http.sys,-1 (HTTP) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\HTTP.sys (file missing)

O23 - Service: i8042 Keyboard and PS/2 Mouse Port Driver (i8042prt) - Unknown owner - C:\WINDOWS\system32\drivers\i8042prt.sys (file missing)

O23 - Service: Contrôleur RAID Intel Windows 7 (iaStorV) - Unknown owner - C:\WINDOWS\system32\drivers\iaStorV.sys (file missing)

O23 - Service: iirsp - Unknown owner - C:\WINDOWS\system32\drivers\iirsp.sys (file missing)

O23 - Service: intelide - Unknown owner - C:\WINDOWS\system32\drivers\intelide.sys (file missing)

O23 - Service: Intel Processor Driver (intelppm) - Unknown owner - C:\WINDOWS\system32\drivers\intelppm.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32013 (IpFilterDriver) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\ipfltdrv.sys (file missing)

O23 - Service: IPMIDRV - Unknown owner - C:\WINDOWS\system32\drivers\IPMIDrv.sys (file missing)

*O23 - Service: IP Network Address Translator (IPNAT) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\ipnat.sys (file missing)

O23 - Service: Service de l’iPod (iPod Service) - Apple Inc. - C:\Program Files\iPod\bin\iPodService.exe

O23 - Service: @%SystemRoot%\system32\drivers\irenum.sys,-100 (IRENUM) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\irenum.sys (file missing)

O23 - Service: isapnp - Unknown owner - C:\WINDOWS\system32\drivers\isapnp.sys (file missing)

O23 - Service: iScsiPort Driver (iScsiPrt) - Unknown owner - C:\WINDOWS\system32\drivers\msiscsi.sys (file missing)

O23 - Service: Keyboard Class Driver (kbdclass) - Unknown owner - C:\WINDOWS\system32\drivers\kbdclass.sys (file missing)

O23 - Service: Keyboard HID Driver (kbdhid) - Unknown owner - C:\WINDOWS\system32\drivers\kbdhid.sys (file missing)

O23 - Service: Kernel Streaming Thunks (ksthunk) - Unknown owner - C:\WINDOWS\system32\drivers\ksthunk.sys (file missing)

O23 - Service: LSI_FC - Unknown owner - C:\WINDOWS\system32\drivers\lsi_fc.sys (file missing)

O23 - Service: LSI_SAS - Unknown owner - C:\WINDOWS\system32\drivers\lsi_sas.sys (file missing)

O23 - Service: LSI_SAS2 - Unknown owner - C:\WINDOWS\system32\drivers\lsi_sas2.sys (file missing)

O23 - Service: LSI_SCSI - Unknown owner - C:\WINDOWS\system32\drivers\lsi_scsi.sys (file missing)

O23 - Service: megasas - Unknown owner - C:\WINDOWS\system32\drivers\megasas.sys (file missing)

O23 - Service: MegaSR - Unknown owner - C:\WINDOWS\system32\drivers\MegaSR.sys (file missing)

O23 - Service: Modem - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\modem.sys (file missing)

O23 - Service: Service Pilote de fonction de classe Moniteur Microsoft (monitor) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\monitor.sys (file missing)

O23 - Service: Pilote de la classe Souris (mouclass) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\mouclass.sys (file missing)

O23 - Service: Pilote HID de souris (mouhid) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\mouhid.sys (file missing)

O23 - Service: mpio - Unknown owner - C:\WINDOWS\system32\drivers\mpio.sys (file missing)

*O23 - Service: @%SystemRoot%\system32\FirewallAPI.dll,-23092 (mpsdrv) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\mpsdrv.sys (file missing)

O23 - Service: @%systemroot%\system32\webclnt.dll,-104 (MRxDAV) - Unknown owner - C:\WINDOWS\system32\drivers\mrxdav.sys (file missing)

*O23 - Service: @%systemroot%\system32\wkssvc.dll,-1002 (mrxsmb) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb.sys (file missing)

*O23 - Service: @%systemroot%\system32\wkssvc.dll,-1004 (mrxsmb10) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb10.sys (file missing)

*O23 - Service: @%systemroot%\system32\wkssvc.dll,-1006 (mrxsmb20) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\mrxsmb20.sys (file missing)

O23 - Service: msdsm - Unknown owner - C:\WINDOWS\system32\drivers\msdsm.sys (file missing)

O23 - Service: @%SystemRoot%\system32\drivers\mshidkmdf.sys,-100 (mshidkmdf) - Unknown owner - C:\WINDOWS\System32\drivers\mshidkmdf.sys (file missing)

O23 - Service: Microsoft Streaming Service Proxy (MSKSSRV) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\MSKSSRV.sys (file missing)

O23 - Service: Microsoft Streaming Clock Proxy (MSPCLOCK) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\MSPCLOCK.sys (file missing)

O23 - Service: Microsoft Streaming Quality Manager Proxy (MSPQM) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\MSPQM.sys (file missing)

O23 - Service: Microsoft Streaming Tee/Sink-to-Sink Converter (MSTEE) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\MSTEE.sys (file missing)

O23 - Service: Microsoft Input Configuration Driver (MTConfig) - Unknown owner - C:\WINDOWS\system32\drivers\MTConfig.sys (file missing)

*O23 - Service: NativeWiFi Filter (NativeWifiP) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\nwifi.sys (file missing)

*O23 - Service: NDIS Capture LightWeight Filter (NdisCap) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\ndiscap.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32001 (NdisTapi) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\ndistapi.sys (file missing)

*O23 - Service: NDIS Usermode I/O Protocol (Ndisuio) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\ndisuio.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32002 (NdisWan) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\ndiswan.sys (file missing)

O23 - Service: nfrd960 - Unknown owner - C:\WINDOWS\system32\drivers\nfrd960.sys (file missing)

O23 - Service: NVIDIA nForce Networking Controller Driver (NVENETFD) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\nvm62x64.sys (file missing)

O23 - Service: nvraid - Unknown owner - C:\WINDOWS\system32\drivers\nvraid.sys (file missing)

O23 - Service: nvstor - Unknown owner - C:\WINDOWS\system32\drivers\nvstor.sys (file missing)

O23 - Service: NVIDIA nForce AGP Bus Filter (nv_agp) - Unknown owner - C:\WINDOWS\system32\drivers\nv_agp.sys (file missing)

O23 - Service: 1394 OHCI Compliant Host Controller (Legacy) (ohci1394) - Unknown owner - C:\WINDOWS\system32\drivers\ohci1394.sys (file missing)

O23 - Service: Parallel port driver (Parport) - Unknown owner - C:\WINDOWS\system32\drivers\parport.sys (file missing)

O23 - Service: pcmcia - Unknown owner - C:\WINDOWS\system32\drivers\pcmcia.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32006 (PptpMiniport) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\raspptp.sys (file missing)

O23 - Service: Processor Driver (Processor) - Unknown owner - C:\WINDOWS\system32\drivers\processr.sys (file missing)

O23 - Service: ql2300 - Unknown owner - C:\WINDOWS\system32\drivers\ql2300.sys (file missing)

O23 - Service: ql40xx - Unknown owner - C:\WINDOWS\system32\drivers\ql40xx.sys (file missing)

O23 - Service: @%SystemRoot%\system32\drivers\qwavedrv.sys,-1 (QWAVEdrv) - Unknown owner - C:\WINDOWS\system32\drivers\qwavedrv.sys (file missing)

O23 - Service: Remote Access Auto Connection Driver (RasAcd) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\rasacd.sys (file missing)

O23 - Service: WAN Miniport (IKEv2) (RasAgileVpn) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\AgileVpn.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32005 (Rasl2tp) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\rasl2tp.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32007 (RasPppoe) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\raspppoe.sys (file missing)

O23 - Service: @%systemroot%\system32\sstpsvc.dll,-202 (RasSstp) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\rassstp.sys (file missing)

O23 - Service: Remote Desktop Device Redirector Bus Driver (rdpbus) - Unknown owner - C:\WINDOWS\system32\drivers\rdpbus.sys (file missing)

O23 - Service: Périphérique Bluetooth (TDI protocole RFCOMM) (RFCOMM) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\rfcomm.sys (file missing)

O23 - Service: Realtek PCIE CardReader Driver (RSPCIESTOR) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\RtsPStor.sys (file missing)

O23 - Service: Realtek 8167 NT Driver (RTL8167) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\Rt64win7.sys (file missing)

O23 - Service: sbp2port - Unknown owner - C:\WINDOWS\system32\drivers\sbp2port.sys (file missing)

O23 - Service: @%SystemRoot%\System32\drivers\scfilter.sys,-11 (scfilter) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\scfilter.sys (file missing)

O23 - Service: sdbus - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\sdbus.sys (file missing)

O23 - Service: Serenum Filter Driver (Serenum) - Unknown owner - C:\WINDOWS\system32\drivers\serenum.sys (file missing)

O23 - Service: Serial - Unknown owner - C:\WINDOWS\system32\drivers\serial.sys (file missing)

**O23 - Service: Serial Mouse Driver (sermouse) - Unknown owner - C:\WINDOWS\system32\drivers\sermouse.sys (file missing)

O23 - Service: SFF Storage Class Driver (sffdisk) - Unknown owner - C:\WINDOWS\system32\drivers\sffdisk.sys (file missing)

O23 - Service: SFF Storage Protocol Driver for MMC (sffp_mmc) - Unknown owner - C:\WINDOWS\system32\drivers\sffp_mmc.sys (file missing)

O23 - Service: SFF Storage Protocol Driver for SDBus (sffp_sd) - Unknown owner - C:\WINDOWS\system32\drivers\sffp_sd.sys (file missing)

O23 - Service: High-Capacity Floppy Disk Drive (sfloppy) - Unknown owner - C:\WINDOWS\system32\drivers\sfloppy.sys (file missing)

O23 - Service: SiSRaid2 - Unknown owner - C:\WINDOWS\system32\drivers\SiSRaid2.sys (file missing)

O23 - Service: SiSRaid4 - Unknown owner - C:\WINDOWS\system32\drivers\sisraid4.sys (file missing)

O23 - Service: @%SystemRoot%\system32\tcpipcfg.dll,-50005 (Smb) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\smb.sys (file missing)

O23 - Service: @%systemroot%\system32\srvsvc.dll,-102 (srv) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\srv.sys (file missing)

O23 - Service: @%systemroot%\system32\srvsvc.dll,-104 (srv2) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\srv2.sys (file missing)

O23 - Service: SrvHsfHDA - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\VSTAZL6.SYS (file missing)

O23 - Service: SrvHsfV92 - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\VSTDPV6.SYS (file missing)

O23 - Service: SrvHsfWinac - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\VSTCNXT6.SYS (file missing)

O23 - Service: srvnet - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\srvnet.sys (file missing)

O23 - Service: stexstor - Unknown owner - C:\WINDOWS\system32\drivers\stexstor.sys (file missing)

O23 - Service: @%SystemRoot%\system32\stlang64.dll,-10306 (STHDA) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\stwrt64.sys (file missing)

O23 - Service: Software Bus Driver (swenum) - Unknown owner - C:\WINDOWS\system32\drivers\swenum.sys (file missing)

O23 - Service: Synaptics TouchPad Driver (SynTP) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\SynTP.sys (file missing)

O23 - Service: Microsoft IPv6 Protocol Driver (TCPIP6) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\tcpip.sys (file missing)

O23 - Service: TDPIPE - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\tdpipe.sys (file missing)

O23 - Service: TDTCP - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\tdtcp.sys (file missing)

O23 - Service: TMeter Service (tmeter) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\tmeter.sys (file missing)

O23 - Service: tmeterMP - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\tmeter.sys (file missing)

O23 - Service: @%SystemRoot%\System32\DRIVERS\tssecsrv.sys,-101 (tssecsrv) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\tssecsrv.sys (file missing)

O23 - Service: TsUsbFlt - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\tsusbflt.sys (file missing)

O23 - Service: Remote Desktop Generic USB Device (TsUsbGD) - Unknown owner - C:\WINDOWS\system32\drivers\TsUsbGD.sys (file missing)

O23 - Service: Pilote de carte miniport Microsoft Tunnel (tunnel) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\tunnel.sys (file missing)

O23 - Service: Microsoft AGPv3.5 Filter (uagp35) - Unknown owner - C:\WINDOWS\system32\drivers\uagp35.sys (file missing)

O23 - Service: Uli AGP Bus Filter (uliagpkx) - Unknown owner - C:\WINDOWS\system32\drivers\uliagpkx.sys (file missing)

O23 - Service: Pilote d’énumérateur UMBus (umbus) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\umbus.sys (file missing)

O23 - Service: Microsoft UMPass Driver (UmPass) - Unknown owner - C:\WINDOWS\system32\drivers\umpass.sys (file missing)

O23 - Service: Apple Mobile USB Driver (USBAAPL64) - Unknown owner - C:\WINDOWS\SYSTEM32\Drivers\usbaapl64.sys (file missing)

O23 - Service: Pilote parent générique USB Microsoft (usbccgp) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\usbccgp.sys (file missing)

O23 - Service: eHome Infrared Receiver (USBCIR) (usbcir) - Unknown owner - C:\WINDOWS\system32\drivers\usbcir.sys (file missing)

O23 - Service: Pilote miniport de contrôleur d'hôte amélioré Microsoft USB 2.0 (usbehci) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\usbehci.sys (file missing)

O23 - Service: AMD USB Filter Driver (usbfilter) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\usbfilter.sys (file missing)

O23 - Service: Pilote de concentrateur standard USB Microsoft (usbhub) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\usbhub.sys (file missing)

O23 - Service: Pilote miniport de contrôleur hôte ouvert USB Microsoft (usbohci) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\usbohci.sys (file missing)

O23 - Service: Microsoft USB PRINTER Class (usbprint) - Unknown owner - C:\WINDOWS\system32\drivers\usbprint.sys (file missing)

O23 - Service: Pilote de stockage de masse USB (USBSTOR) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\USBSTOR.SYS (file missing)

O23 - Service: Pilote miniport de contrôleur hôte universel USB Microsoft (usbuhci) - Unknown owner - C:\WINDOWS\system32\drivers\usbuhci.sys (file missing)

O23 - Service: USB Video Device (WDM) (usbvideo) - Unknown owner - C:\WINDOWS\SYSTEM32\Drivers\usbvideo.sys (file missing)

**O23 - Service: vga - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\vgapnp.sys (file missing)

O23 - Service: vhdmp - Unknown owner - C:\WINDOWS\system32\drivers\vhdmp.sys (file missing)

O23 - Service: viaide - Unknown owner - C:\WINDOWS\system32\drivers\viaide.sys (file missing)

O23 - Service: VMware kbd (vmkbd) - Unknown owner - C:\Windows\system32\drivers\VMkbd.sys (file missing)

O23 - Service: VMware Virtual Ethernet Adapter Driver (VMnetAdapter) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\vmnetadapter.sys (file missing)

O23 - Service: vsmraid - Unknown owner - C:\WINDOWS\system32\drivers\vsmraid.sys (file missing)

O23 - Service: Pilote de bus WiFi virtuel (vwifibus) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\vwifibus.sys (file missing)

O23 - Service: Microsoft Virtual WiFi Miniport Service (vwifimp) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\vwifimp.sys (file missing)

O23 - Service: Wacom Serial Pen HID Driver (WacomPen) - Unknown owner - C:\WINDOWS\system32\drivers\wacompen.sys (file missing)

O23 - Service: @%systemroot%\system32\rascfg.dll,-32011 (WANARP) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\wanarp.sys (file missing)

O23 - Service: Wd - Unknown owner - C:\WINDOWS\system32\drivers\wd.sys (file missing)

O23 - Service: WinUSB Driver (WinUsb) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\WinUSB.sys (file missing)

O23 - Service: Microsoft Windows Management Interface for ACPI (WmiAcpi) - Unknown owner - C:\WINDOWS\system32\drivers\wmiacpi.sys (file missing)

**O23 - Service: User Mode Driver Frameworks Platform Driver (WudfPf) - Unknown owner - C:\WINDOWS\SYSTEM32\drivers\WudfPf.sys (file missing)

**O23 - Service: Windows Driver Foundation - User-mode Driver Framework Reflector (WUDFRd) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\WUDFRd.sys (file missing)



Listado de Servicios (Deshabilitados):

--------------------------------------

O23 - Service: CD/DVD File System Reader (cdfs) - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\cdfs.sys (file missing)

O23 - Service: Crcdisk Filter Driver (crcdisk) - Unknown owner - C:\WINDOWS\system32\drivers\crcdisk.sys (file missing)

O23 - Service: udfs - Unknown owner - C:\WINDOWS\SYSTEM32\DRIVERS\udfs.sys (file missing)



246 Servicios.

41 de Carga Automatica.

202 de Carga Manual.

3 Deshabilitados.

[msc hotline sat]

Pues si le parece enorme, es una aguja en un pajar comparado con todo el registro de sistema ... :) !









Y vemos este fichero sospechoso:



C:\WINDOWS\SYSTEM32\AESTSR64.EXE





segun http://spywarefiles.prevx.com/RRFJDE44026641/AESTSR64.EXE.html





Si no es voluntario, envienoslo para analizar





saludos



ms, 19-9-2012

[LynnardSD]

Hola !!

El fichero en cuestión, parece ser un archivo del sistema, aparece registrado por HP y además me pide una autorización del sistema para modificarlo.. lo intenté modificar para enviarlo como muestra, porque no puedo empacarlo como ZIP o RAR.. pero no puedo modificar la extensión.. y creo que no debo adjuntarlo tampoco al post dentro de este tema..

alguna otra cosa?



Saludos,

LynnardSD

[msc hotline sat]

Simplemente copielo a un pendrive y proceda a enviarnoslo desde otro ordenador, siguiendo las indicaciones de :



https://foros.zonavirus.com/viewtopic.php?f=5&t=14253





Tras recibirlo/s, lo/s analizaremos e implementaremos su control y eliminacion, si procede, en nuestras utilidades, de lo cual informaremos



saludos



ms, 20-9-2012