Jump to content


 


Register a free account to unlock additional features at BleepingComputer.com
Welcome to BleepingComputer, a free community where people like yourself come together to discuss and learn how to use their computers. Using the site is easy and fun. As a guest, you can browse and view the various discussions in the forums, but can not create a new topic or reply to an existing one unless you are logged in. Other benefits of registering an account are subscribing to topics and forums, creating a blog, and having no ads shown anywhere on the site.


Click here to Register a free account now! or read our Welcome Guide to learn how to use this site.

Photo

STOP: C0000135 The program can't start because %hs is missing. Try resintalling the program


  • This topic is locked This topic is locked
16 replies to this topic

#1 Asteroide

Asteroide

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 01:01 PM

Hi everyone.

Today I used an AV to fix some annyoing ad (malware i guess) and after reeboting i found this nice message:

"STOP: C0000135 The program can't start because %hs is missing. Try resintalling the program"

I met this forum on the net looking for a solution. So I decided ask help (:

I read in this thread the steps i must do, but I need someone to help me out with a "script".

http://www.bleepingcomputer.com/forums/topic451138.html
and
http://www.bleepingcomputer.com/forums/topic451183.html

Thanks in advance!

EDIT: Hi, here's the log of Frst.

Scan result of Farbar Recovery Scan Tool Version: 27-04-2012
Ran by SYSTEM at 27-04-2012 20:12:24
Running from F:\
Windows 7 Ultimate (X64) OS Language: English(US)
The current controlset is ControlSet001

========================== Registry (Whitelisted) =============

HKLM\...\Run: [K10] c:\K10\K10STAT.exe -lp:1 -ClkCtrl:2 -StayOnTray -nw [162304 2010-05-04] ()
HKU\Asteroide\...\Run: [Google Update] "C:\Users\Asteroide\AppData\Local\Google\Update\GoogleUpdate.exe" /c [136176 2010-12-13] (Google Inc.)
HKU\Asteroide\...\Run: [AtiTrayTools] "C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe" [890880 2011-08-15] (Ray Adams)
HKU\Asteroide\...\Run: [ASRockOCTuner] [x]
Tcpip\Parameters: [DhcpNameServer] 62.81.29.254 62.42.230.24
SubSystems: [Windows] ==> ZeroAccess

==================== Services (Whitelisted) ======

3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [401760 2012-04-10] (BlueStack Systems, Inc.)
2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385376 2012-04-10] (BlueStack Systems, Inc.)
3 Futuremark SystemInfo Service; "C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe" [128928 2010-12-14] (Futuremark Corporation)
2 MDM; "C:\Program Files (x86)\Common Files\Microsoft Shared\VS7DEBUG\mdm.exe" [335872 2006-10-26] (Microsoft Corporation)
3 npggsvc; C:\Windows\SysWow64\GameMon.des -service [4005936 2011-06-06] (INCA Internet Co., Ltd.)
2 SkypeUpdate; "C:\Program Files (x86)\Skype\Updater\Updater.exe" [158856 2012-02-15] (Skype Technologies)
2 TeamViewer7; C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe [2916736 2011-11-29] (TeamViewer GmbH)
2 UMVPFSrv; C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe [450848 2012-01-17] (Logitech Inc.)
2 WNCPKT; C:\Windows\System32\SNPSTD3.dll [6656 2009-07-13] (Oak Technology Inc.)
4 NetMsmqActivator; "c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe" -NetMsmqActivator [x]
4 NetPipeActivator; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
4 NetTcpActivator; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
4 NetTcpPortSharing; c:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe [x]
2 NMSAccess; "C:\Program Files (x86)\Blaze Media Pro\NMSAccess32.exe" [x]

========================== Drivers (Whitelisted) =============

1 atitray; \??\C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray64.sys [24736 2011-08-15] ()
2 atksgt; C:\Windows\System32\Drivers\atksgt.sys [314016 2011-04-22] ()
2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [75104 2012-04-10] (BlueStack Systems)
2 lirsgt; C:\Windows\System32\Drivers\lirsgt.sys [43680 2011-04-22] ()
0 pavboot; C:\Windows\System32\drivers\pavboot64.sys [33800 2009-06-30] (Panda Security, S.L.)
0 sptd; C:\Windows\System32\Drivers\sptd.sys [834544 2010-12-13] (Duplex Secure Ltd.)
3 WinRing0_1_2_0; \??\C:\K10\WinRing0x64.sys [14544 2008-07-26] (OpenLibSys.org)
3 ALSysIO; \??\C:\Users\ASTERO~1\AppData\Local\Temp\ALSysIO64.sys [x]
3 atillk64; \??\C:\Users\Asteroide\Desktop\ATF\atillk64.sys [x]
3 cpuz131; \??\C:\Users\ASTERO~1\AppData\Local\Temp\cpuz131\cpuz_x64.sys [x]
4 DRIVER_B; \??\C:\Windows\system32\Drivers\DRIVER_BIN64 [x]
3 dump_wmimmc; \??\c:\program files (x86)\steam\steamapps\common\ava\Binaries\GameGuard\dump_wmimmc.sys [x]
3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [x]
3 NPPTNT2; \??\C:\Windows\system32\npptNT2.sys [x]
3 Tcpz-x64; \??\C:\Users\ASTERO~1\AppData\Local\Temp\Tcpz-x64.sys [x]
3 UCOREW64; \??\C:\Windows\system32\UCOREW64.SYS [x]

========================== NetSvcs (Whitelisted) ===========
NETSVC: WNCPKT

============ One Month Created Files and Folders ==============

2012-04-27 20:11 - 2011-10-25 14:52 - 0000000 ____D C:\FRST
2012-04-27 18:55 - 2012-04-27 03:57 - 536870912 __ASH C:\WinPEpge.sys
2012-04-27 18:55 - 2011-04-09 12:15 - 0000000 ____D C:\$WINDOWS.~BT
2012-04-27 03:57 - 2010-12-14 23:59 - 0156116 ____A C:\Windows\ntbtlog.txt
2012-04-26 08:47 - 2012-03-14 07:35 - 0027529 ____A C:\Users\Asteroide\Downloads\XP3D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33443.torrent
2012-04-26 08:47 - 2012-02-22 09:17 - 0034541 ____A C:\Users\Asteroide\Downloads\Millennium.Los.Hombres.Que.No.Amaban.A.Las.Mujeres.%5BUSA%5D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33442.torrent
2012-04-26 08:47 - 2011-09-17 06:53 - 0025475 ____A C:\Users\Asteroide\Downloads\Juego.De.Tronos.2x01.%5BReparado%5D.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33440.torrent
2012-04-26 07:39 - 2012-04-24 08:23 - 0005366 ____A C:\Users\Asteroide\Downloads\327319971 (7).xls
2012-04-26 07:31 - 2012-04-26 07:39 - 0005366 ____A C:\Users\Asteroide\Downloads\327319971 (8).txt
2012-04-26 07:25 - 2012-02-20 06:06 - 0000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2012-04-26 07:17 - 2009-07-13 17:47 - 0022896 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2012-04-26 07:17 - 2009-07-13 17:41 - 0220672 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2012-04-26 07:17 - 2009-07-13 17:38 - 0080896 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2012-04-26 07:17 - 2009-07-13 17:33 - 0005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2012-04-26 07:17 - 2009-07-13 17:16 - 0172544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2012-04-26 07:17 - 2009-07-13 17:14 - 0158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2012-04-26 07:17 - 2009-07-13 17:11 - 0005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2012-04-26 07:16 - 2012-02-27 22:35 - 1501184 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-04-26 07:16 - 2012-02-27 22:33 - 1638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-04-26 07:16 - 2012-02-27 22:33 - 0082944 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2012-04-26 07:16 - 2012-02-27 22:33 - 0012288 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2012-04-26 07:16 - 2012-02-27 22:32 - 12372480 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-04-26 07:16 - 2012-02-27 22:32 - 0256000 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2012-04-26 07:16 - 2012-02-27 21:40 - 1230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-04-26 07:16 - 2012-02-27 21:38 - 1638912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-04-26 07:16 - 2012-02-27 21:38 - 0064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2012-04-26 07:16 - 2012-02-27 21:38 - 0012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2012-04-26 07:16 - 2012-02-27 21:37 - 10991104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-04-26 07:16 - 2012-02-27 21:37 - 0185856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2012-04-26 07:16 - 2012-02-27 20:35 - 0097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-04-26 07:16 - 2012-02-27 19:57 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-04-26 07:16 - 2012-02-14 22:27 - 0149504 ____A (Microsoft Corporation) C:\Windows\System32\rdpcorekmts.dll
2012-04-26 07:16 - 2012-02-09 22:17 - 0320512 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2012-04-26 07:16 - 2012-02-09 22:17 - 0197120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2012-04-26 07:16 - 2012-02-09 21:41 - 0218624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2012-04-26 07:16 - 2012-02-09 21:41 - 0161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2012-04-26 07:16 - 2011-11-16 23:17 - 0152432 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecpkg.sys
2012-04-26 07:16 - 2011-11-16 23:11 - 0028672 ____A (Microsoft Corporation) C:\Windows\System32\sspisrv.dll
2012-04-26 07:16 - 2011-11-16 23:08 - 0031232 ____A (Microsoft Corporation) C:\Windows\System32\lsass.exe
2012-04-26 07:16 - 2011-02-17 22:36 - 0064512 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-04-26 07:16 - 2011-02-17 21:35 - 0048128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-04-26 07:16 - 2010-12-13 00:15 - 0057856 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2012-04-26 07:16 - 2010-12-13 00:15 - 0044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2012-04-26 07:16 - 2010-03-18 05:27 - 0634368 ____A (Microsoft Corporation) C:\Windows\System32\msvcrt.dll
2012-04-26 07:16 - 2009-07-13 19:20 - 0482816 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2012-04-26 07:16 - 2009-07-13 19:20 - 0386048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2012-04-26 07:16 - 2009-07-13 17:52 - 0499200 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\afd.sys
2012-04-26 07:16 - 2009-07-13 17:52 - 0460296 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\cng.sys
2012-04-26 07:16 - 2009-07-13 17:41 - 2458624 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 1572864 ____A (Microsoft Corporation) C:\Windows\System32\quartz.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 1197568 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 1026560 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0445952 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0395776 ____A (Microsoft Corporation) C:\Windows\System32\webio.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0366592 ____A (Microsoft Corporation) C:\Windows\System32\qdvd.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0340992 ____A (Microsoft Corporation) C:\Windows\System32\schannel.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0247808 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0136192 ____A (Microsoft Corporation) C:\Windows\System32\sspicli.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0134144 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-04-26 07:16 - 2009-07-13 17:41 - 0028160 ____A (Microsoft Corporation) C:\Windows\System32\secur32.dll
2012-04-26 07:16 - 2009-07-13 17:40 - 1837568 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2012-04-26 07:16 - 2009-07-13 17:40 - 1541120 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-04-26 07:16 - 2009-07-13 17:40 - 0902656 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2012-04-26 07:16 - 2009-07-13 17:40 - 0723456 ____A (Microsoft Corporation) C:\Windows\System32\EncDec.dll
2012-04-26 07:16 - 2009-07-13 17:39 - 9335296 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-04-26 07:16 - 2009-07-13 17:39 - 3143168 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-04-26 07:16 - 2009-07-13 17:39 - 1446912 ____A (Microsoft Corporation) C:\Windows\System32\lsasrv.dll
2012-04-26 07:16 - 2009-07-13 17:39 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-04-26 07:16 - 2009-07-13 17:39 - 0076288 ____A (Microsoft Corporation) C:\Windows\System32\rdpwsx.dll
2012-04-26 07:16 - 2009-07-13 17:39 - 0009216 ____A (Microsoft Corporation) C:\Windows\System32\rdrmemptylst.exe
2012-04-26 07:16 - 2009-07-13 17:39 - 0002048 ____A (Microsoft Corporation) C:\Windows\System32\tzres.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 1328640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\quartz.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0981504 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0826368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0514560 ____A (Microsoft Corporation) C:\Windows\SysWOW64\qdvd.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0314368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\webio.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0224768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0132096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0096768 ____A (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2012-04-26 07:16 - 2009-07-13 17:16 - 0022016 ____A (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 2072576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 1170944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 1074176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0739840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0606208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0599552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0534528 ____A (Microsoft Corporation) C:\Windows\SysWOW64\EncDec.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0381440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2012-04-26 07:16 - 2009-07-13 17:15 - 0176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-04-26 07:16 - 2009-07-13 17:14 - 5998592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-04-26 07:16 - 2009-07-13 17:14 - 0002048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2012-04-26 07:16 - 2009-07-13 16:16 - 0204800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-04-26 07:16 - 2009-07-13 16:16 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-04-26 07:16 - 2009-07-13 16:00 - 0095088 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\ksecdd.sys
2012-04-26 07:16 - 2009-07-13 12:49 - 0703488 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2012-04-26 07:16 - 2003-02-21 06:42 - 0690688 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msvcrt.dll
2012-04-26 07:15 - 2009-07-13 17:39 - 1739160 ____A (Microsoft Corporation) C:\Windows\System32\ntdll.dll
2012-04-26 07:15 - 2009-07-13 17:14 - 1292592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll
2012-04-26 07:15 - 2009-07-13 15:55 - 0043520 ____A (Microsoft Corporation) C:\Windows\System32\csrsrv.dll
2012-04-26 07:12 - 2009-07-13 17:41 - 0077312 ____A (Microsoft Corporation) C:\Windows\System32\packager.dll
2012-04-26 07:12 - 2009-07-13 17:16 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\packager.dll
2012-04-26 05:29 - 2012-04-27 03:01 - 0000340 ____A C:\Windows\Tasks\At15.job
2012-04-26 05:29 - 2012-04-27 03:00 - 0000342 ____A C:\Windows\Tasks\At39.job
2012-04-26 05:29 - 2012-04-26 12:00 - 0000342 ____A C:\Windows\Tasks\At48.job
2012-04-26 05:29 - 2012-04-26 12:00 - 0000340 ____A C:\Windows\Tasks\At24.job
2012-04-26 05:29 - 2012-04-26 11:04 - 0000340 ____A C:\Windows\Tasks\At23.job
2012-04-26 05:29 - 2012-04-26 11:00 - 0000342 ____A C:\Windows\Tasks\At47.job
2012-04-26 05:29 - 2012-04-26 10:00 - 0000342 ____A C:\Windows\Tasks\At46.job
2012-04-26 05:29 - 2012-04-26 10:00 - 0000340 ____A C:\Windows\Tasks\At22.job
2012-04-26 05:29 - 2012-04-26 09:00 - 0000342 ____A C:\Windows\Tasks\At45.job
2012-04-26 05:29 - 2012-04-26 09:00 - 0000340 ____A C:\Windows\Tasks\At21.job
2012-04-26 05:29 - 2012-04-26 08:04 - 0000340 ____A C:\Windows\Tasks\At2.job
2012-04-26 05:29 - 2012-04-26 08:00 - 0000342 ____A C:\Windows\Tasks\At44.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At41.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At40.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At38.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At37.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At36.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At35.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At34.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At33.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At32.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At31.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At30.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At29.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At28.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At27.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At26.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000342 ____A C:\Windows\Tasks\At25.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At9.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At8.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At7.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At6.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At5.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At4.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At3.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At20.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At17.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At16.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At14.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At13.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At12.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At11.job
2012-04-26 05:29 - 2012-04-26 07:24 - 0000340 ____A C:\Windows\Tasks\At10.job
2012-04-26 05:29 - 2012-04-26 07:00 - 0000342 ____A C:\Windows\Tasks\At43.job
2012-04-26 05:29 - 2012-04-26 07:00 - 0000340 ____A C:\Windows\Tasks\At19.job
2012-04-26 05:29 - 2012-04-26 06:01 - 0000342 ____A C:\Windows\Tasks\At42.job
2012-04-26 05:29 - 2012-04-26 06:01 - 0000340 ____A C:\Windows\Tasks\At18.job
2012-04-26 05:29 - - 0000340 ____A C:\Windows\Tasks\At1.job
2012-04-26 05:19 - 2009-07-13 17:40 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-04-26 05:17 - 2012-04-27 03:39 - 0000000 ____D C:\Windows\system64
2012-04-26 04:32 - 2010-12-15 03:43 - 0037888 ____A C:\Users\Asteroide\Documents\XI.doc
2012-04-26 03:10 - 2012-02-04 08:04 - 0014271 ____A C:\Users\Asteroide\Downloads\26AB110B1D7B66B1F5F33F3FE88D2152B5C1BFC1.torrent
2012-04-26 00:49 - 2010-11-19 11:54 - 0014725 ____A C:\Users\Asteroide\Downloads\Fireburst.%5BMULTI5%5D%5BPCDVD%5D%5BSKIDROW%5D%5BWwW.GamesTorrents.CoM%5D.t9042.torrent
2012-04-25 10:41 - 2011-08-21 01:40 - 0000000 ____D C:\Users\Asteroide\Desktop\Kingston 1gb
2012-04-25 10:27 - 2011-10-27 14:10 - 47835136 ____A C:\Users\Asteroide\Downloads\beini-1.2.3.iso
2012-04-25 10:12 - 2011-11-11 17:01 - 4781102 ____A C:\Users\Asteroide\Downloads\AiroWizard_Setup-Beta_1-rev.250.exe
2012-04-25 10:03 - 2012-04-20 14:25 - 679966845 ____A C:\Users\Asteroide\Desktop\Un mal día lo tiene cualquiera.avi
2012-04-25 09:21 - 2012-04-16 12:06 - 0030965 ____A C:\Users\Asteroide\Downloads\Un.Lugar.Para.Sonyar.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33428.torrent
2012-04-25 09:21 - 2012-01-16 11:38 - 0027752 ____A C:\Users\Asteroide\Downloads\El.Topo.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33426.torrent
2012-04-25 09:21 - 2010-11-10 08:46 - 0029261 ____A C:\Users\Asteroide\Downloads\Attack.The.Block.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33425.torrent
2012-04-24 14:14 - 2011-03-25 09:33 - 0000000 ____D C:\Users\All Users\RELOADED
2012-04-24 14:14 - 2011-03-25 09:33 - 0000000 ____D C:\ProgramData\RELOADED
2012-04-24 13:30 - 2012-03-20 12:03 - 0019410 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.Episode.1.%5BEnglish%5D%5BPC%5D%5BRELOADED%5D%5BWwW.GamesTorrents.CoM%5D.t9034.torrent
2012-04-24 08:38 - 2012-02-23 12:24 - 0023485 ____A C:\Users\Asteroide\Downloads\Problemas.De.Mujeres.DVD.XviD.%5Bwww.DivxTotaL.com%5D.avi.t33411.torrent
2012-04-24 08:23 - 2012-04-23 12:59 - 0005277 ____A C:\Users\Asteroide\Downloads\327319971 (7).txt
2012-04-24 03:59 - 2012-02-04 11:10 - 0036864 ____A C:\Users\Asteroide\Downloads\Infidelidad..doc
2012-04-23 12:59 - 2012-04-23 10:58 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (6).xls
2012-04-23 11:08 - 2012-03-21 04:13 - 0018766 ____A C:\Users\Asteroide\Downloads\Intimidad.%5Bwww.DivxTotal.com%5D.avi.c33404.torrent
2012-04-23 11:00 - 2011-10-24 09:46 - 0444974 ____A C:\Users\Asteroide\Downloads\e-AU12-002981052.pdf
2012-04-23 10:58 - 2012-04-23 10:56 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (6).txt
2012-04-23 10:56 - 2012-04-22 02:38 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (5).xls
2012-04-23 10:54 - 2012-04-19 11:55 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (4).xls
2012-04-23 10:42 - 2010-11-03 10:41 - 1822536 ____A C:\Users\Asteroide\Desktop\GPU-Z Sensor Log.txt
2012-04-23 06:14 - 2012-04-23 06:14 - 0014513 ____A C:\Users\Asteroide\Downloads\Louie.1x08.HDTV.XviD.www.DivxTotaL.com%5D.t33385.torrent
2012-04-23 06:14 - 2012-04-06 05:48 - 0014474 ____A C:\Users\Asteroide\Downloads\Louie.1x07.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33309.torrent
2012-04-22 11:54 - 2011-12-30 08:10 - 0026112 ____A C:\Users\Asteroide\Documents\Qué llevas ahí.doc
2012-04-22 03:32 - 2011-06-22 05:32 - 0067773 ____A C:\Users\Asteroide\Downloads\CutPicture.com_2012-Apr-22_07_32_10.jpg
2012-04-22 03:24 - 2011-11-20 14:38 - 0048099 ____A C:\Users\Asteroide\Downloads\leminiscata_infinito-19.jpg
2012-04-22 02:47 - 2012-04-18 08:13 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (3).xls
2012-04-22 02:40 - 2011-08-31 01:38 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (2).xls
2012-04-22 02:38 - 2012-04-23 10:54 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (5).txt
2012-04-21 07:39 - 2012-04-21 07:39 - 0001301 ____A C:\Users\Asteroide\Downloads\sorry.aspx
2012-04-21 07:39 - 2012-04-01 09:06 - 0001301 ____A C:\Users\Asteroide\Downloads\sorry (1).aspx
2012-04-21 07:35 - 2012-01-09 12:51 - 0027894 ____A C:\Users\Asteroide\Downloads\Jane.Eyre.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33395.torrent
2012-04-21 07:34 - 2012-04-17 07:09 - 0021914 ____A C:\Users\Asteroide\Downloads\Dexter.6x12.HDTV.XviD.www.DivxTotaL.com%5D.t33393.torrent
2012-04-21 07:34 - 2011-11-11 14:49 - 0022777 ____A C:\Users\Asteroide\Downloads\Sherlock.Holmes.Juego.De.Sombras.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33376.torrent
2012-04-21 06:15 - 2011-04-21 00:46 - 0015538 ____A C:\Users\Asteroide\Downloads\B4B060BE67704A8C25E40C3BD503360AAB0EFE1C.torrent
2012-04-21 04:01 - 2012-02-19 11:15 - 0234813 ____A C:\Users\Asteroide\Documents\IMG_21042012_140110.png
2012-04-20 10:11 - 2012-04-13 08:42 - 0028614 ____A C:\Users\Asteroide\Downloads\Touch.1x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33387.torrent
2012-04-20 09:05 - 2012-03-02 12:13 - 0001829 ____A C:\Users\Public\Desktop\Start BlueStacks.lnk
2012-04-20 09:05 - 2011-08-23 01:41 - 0000000 ____D C:\Users\All Users\BlueStacks
2012-04-20 09:05 - 2011-08-23 01:41 - 0000000 ____D C:\ProgramData\BlueStacks
2012-04-20 09:05 - 2010-12-27 09:15 - 0000000 ____D C:\Program Files (x86)\BlueStacks
2012-04-20 09:05 - 2009-01-06 05:23 - 0001604 ____A C:\Users\Asteroide\Desktop\Android Apps.lnk
2012-04-20 09:04 - 2012-04-26 07:33 - 0000000 ____D C:\Users\Asteroide\AppData\Local\BlueStacksSetup
2012-04-20 09:04 - 2012-02-02 11:19 - 0000000 ____D C:\Users\Asteroide\AppData\Local\BlueStacks
2012-04-20 09:04 - 2010-11-20 07:05 - 3785056 ____A (BlueStack Systems, Inc.) C:\Users\Asteroide\Desktop\BlueStacks-ThinInstaller_0.6.3.2215.exe
2012-04-19 11:55 - 2012-04-22 02:47 - 0003842 ____A C:\Users\Asteroide\Downloads\327319971 (4).txt
2012-04-19 08:01 - 2011-08-17 05:41 - 0403949 ____A C:\Users\Asteroide\Documents\IMG_19042012_180123.png
2012-04-19 05:17 - 2012-02-07 17:22 - 0031513 ____A C:\Users\Asteroide\Downloads\22.Balas.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33355.torrent
2012-04-19 05:17 - 2012-02-07 11:53 - 0029955 ____A C:\Users\Asteroide\Downloads\No.Tengas.Miedo.A.La.oscuridad.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33358.torrent
2012-04-19 04:52 - 2011-12-04 06:45 - 0000000 ____D C:\Users\Asteroide\Desktop\xperia neo
2012-04-19 04:48 - 2012-04-26 08:47 - 27157081 ____A C:\Users\Asteroide\Downloads\xperia neo.rar
2012-04-18 08:39 - 2012-02-07 14:10 - 0141635 ____A C:\Users\Asteroide\Desktop\Nuevo Documento de Microsoft Office Word.docx
2012-04-18 08:13 - 2012-04-22 02:40 - 0003209 ____A C:\Users\Asteroide\Downloads\327319971 (3).txt
2012-04-17 13:31 - 2012-04-17 13:31 - 1112188 ____A C:\Users\Asteroide\Documents\IMG_3847.JPG
2012-04-17 13:30 - 2012-04-17 13:30 - 1178859 ____A C:\Users\Asteroide\Documents\IMG_3840.JPG
2012-04-17 13:29 - 2012-01-27 11:28 - 0974061 ____A C:\Users\Asteroide\Documents\IMG_3833.JPG
2012-04-17 13:17 - 2011-12-17 10:07 - 0042672 ____A C:\Users\Asteroide\Documents\IMG_17042012_231712.png
2012-04-17 13:06 - 2012-03-04 09:50 - 0002597 ____A C:\Users\Asteroide\Desktop\Lo soy.png
2012-04-17 07:09 - 2012-03-31 10:37 - 0022175 ____A C:\Users\Asteroide\Downloads\Dexter.6x11.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33342.torrent
2012-04-16 12:06 - 2012-04-11 03:16 - 0027542 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x20.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33340.torrent
2012-04-16 12:06 - 2011-03-03 12:41 - 0028760 ____A C:\Users\Asteroide\Downloads\Un.Dios.Salvaje.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33339.torrent
2012-04-15 10:52 - 2012-04-20 09:04 - 0075413 ____A C:\Users\Asteroide\Desktop\borrador.pdf
2012-04-15 06:10 - 2012-01-15 08:01 - 0037376 ____A C:\Users\Asteroide\Documents\Estoy destrozado.doc
2012-04-15 06:07 - 2011-09-23 04:50 - 0407679 ____A C:\Users\Asteroide\Desktop\Tú eres mi equilibrio.jpg
2012-04-13 08:42 - 2012-04-07 06:13 - 0028633 ____A C:\Users\Asteroide\Downloads\Touch.1x04.HDTV.XviD.www.DivxTotaL.com%5D.t33319.torrent
2012-04-13 08:42 - 2012-03-20 01:34 - 0027130 ____A C:\Users\Asteroide\Downloads\La.Venganza.De.Wyatt.Earp.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33321.torrent
2012-04-13 06:00 - 2010-12-13 00:46 - 0000907 ____A C:\Users\Asteroide\Desktop\Diario virtual.txt
2012-04-11 03:16 - 2012-03-20 01:34 - 0027902 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x19.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33283.torrent
2012-04-09 11:04 - 2012-02-14 07:19 - 0075933 ____A C:\Users\Asteroide\Downloads\Anatomy_of_a_murder_(Eng_-Sp-_Fr-_It-De).torrent
2012-04-07 12:22 - 2011-09-27 13:33 - 0028654 ____A C:\Users\Asteroide\Downloads\Touch.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33169 (1).torrent
2012-04-07 06:14 - 2011-02-13 19:30 - 0028404 ____A C:\Users\Asteroide\Downloads\Monster.DVDRip.%5Bwww.DivxTotal.com%5Dsisibuto.t30548.torrent
2012-04-07 06:13 - 2012-04-02 11:12 - 0028634 ____A C:\Users\Asteroide\Downloads\Touch.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33269.torrent
2012-04-06 05:48 - 2012-04-23 06:14 - 0019015 ____A C:\Users\Asteroide\Downloads\Louies.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32925.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0018854 ____A C:\Users\Asteroide\Downloads\Louie.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33061.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0014474 ____A C:\Users\Asteroide\Downloads\Louie.1x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33225.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0014094 ____A C:\Users\Asteroide\Downloads\Louie.1x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33262.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0013934 ____A C:\Users\Asteroide\Downloads\Louie.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33123.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0013934 ____A C:\Users\Asteroide\Downloads\Louie.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33123 (1).torrent
2012-04-06 05:48 - 2012-02-27 00:47 - 0018934 ____A C:\Users\Asteroide\Downloads\Louie.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32969.torrent
2012-04-05 01:23 - 2012-01-27 09:13 - 0032100 ____A C:\Users\Asteroide\Downloads\La.Conspiracion.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33259.torrent
2012-04-04 10:39 - 2011-09-09 01:04 - 0033741 ____A C:\Users\Asteroide\Downloads\Mis_dias_sin_ti.docx
2012-04-02 11:11 - 2012-03-29 02:18 - 0028774 ____A C:\Users\Asteroide\Downloads\Touch.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33227.torrent
2012-04-01 10:28 - 2012-02-04 07:15 - 0029033 ____A C:\Users\Asteroide\Downloads\Perros.de.Paja.%28www.DivxTotal.com%29.t12702 (1).torrent
2012-04-01 09:06 - 2012-04-13 08:42 - 0029539 ____A C:\Users\Asteroide\Downloads\La.Voz.Dormida.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33100.torrent
2012-04-01 09:06 - 2012-03-19 08:59 - 0030634 ____A C:\Users\Asteroide\Downloads\Somewhere.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33223.torrent
2012-04-01 09:06 - 2011-03-07 00:18 - 0028397 ____A C:\Users\Asteroide\Downloads\Animals.United.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33207.torrent
2012-03-31 10:37 - 2012-03-29 02:18 - 0022195 ____A C:\Users\Asteroide\Downloads\Dexter.6x10.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33232.torrent
2012-03-31 04:37 - 2011-05-12 02:57 - 0011548 ____A C:\Users\Asteroide\Downloads\07DAD37DA98A1177F101AF1EAFC67F5EC2175007.torrent
2012-03-31 04:36 - 2012-01-07 16:11 - 0016320 ____A C:\Users\Asteroide\Downloads\3437D4B62E9DD136553EFED19F669675D5541F6A.torrent
2012-03-30 06:43 - 2010-11-03 10:41 - 0000000 ____D C:\Users\Asteroide\Desktop\Trash
2012-03-29 02:18 - 2012-04-07 12:22 - 0028654 ____A C:\Users\Asteroide\Downloads\Touch.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33169.torrent
2012-03-29 02:18 - 2012-03-18 04:47 - 0021974 ____A C:\Users\Asteroide\Downloads\Dexter.6x09.HDTV.XviD.www.DivxTotaL.com%5D.t33175.torrent

============ 3 Months Modified Files and Folders =============

2012-04-27 20:12 - 2012-04-27 20:11 - 0000000 ____D C:\FRST
2012-04-27 18:55 - 2012-04-27 18:55 - 536870912 __ASH C:\WinPEpge.sys
2012-04-27 18:55 - 2012-04-27 18:55 - 0000000 ____D C:\$WINDOWS.~BT
2012-04-27 09:30 - 2012-04-27 03:57 - 0156116 ____A C:\Windows\ntbtlog.txt
2012-04-27 03:39 - 2011-10-25 04:41 - 0863300 ____A C:\Users\Asteroide\AppData\Local\census.cache
2012-04-27 03:39 - 2011-10-25 04:41 - 0097536 ____A C:\Users\Asteroide\AppData\Local\ars.cache
2012-04-27 03:39 - 2011-06-15 15:03 - 1302895 ____A C:\Windows\WindowsUpdate.log
2012-04-27 03:39 - 2010-12-30 07:31 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Skype
2012-04-27 03:35 - 2010-12-13 12:13 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\uTorrent
2012-04-27 03:30 - 2012-02-17 12:41 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Orbit
2012-04-27 03:01 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At14.job
2012-04-27 03:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At38.job
2012-04-27 02:54 - 2010-12-13 12:05 - 0001066 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1068431273-4020526499-88977139-1001UA.job
2012-04-27 02:53 - 2012-03-20 13:08 - 0031136 ____A C:\Windows\setupact.log
2012-04-27 02:23 - 2009-07-13 20:45 - 0017360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2012-04-27 02:23 - 2009-07-13 20:45 - 0017360 ___AH C:\Windows\System32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2012-04-27 02:21 - 2010-12-13 00:46 - 0738700 ____A C:\Windows\System32\perfh00A.dat
2012-04-27 02:21 - 2010-12-13 00:46 - 0158380 ____A C:\Windows\System32\perfc00A.dat
2012-04-27 02:21 - 2009-07-13 21:13 - 1680288 ____A C:\Windows\System32\PerfStringBackup.INI
2012-04-27 02:16 - 2009-07-13 21:08 - 0000006 ___AH C:\Windows\Tasks\SA.DAT
2012-04-26 12:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At47.job
2012-04-26 12:00 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At23.job
2012-04-26 11:04 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At22.job
2012-04-26 11:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At46.job
2012-04-26 11:00 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\rescache
2012-04-26 10:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At45.job
2012-04-26 10:00 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At21.job
2012-04-26 09:19 - 2011-01-03 10:55 - 0000000 ____D C:\Users\Asteroide\AppData\Local\Mirillis
2012-04-26 09:14 - 2012-04-26 04:32 - 0037888 ____A C:\Users\Asteroide\Documents\XI.doc
2012-04-26 09:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At44.job
2012-04-26 09:00 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At20.job
2012-04-26 08:47 - 2012-04-26 08:47 - 0034541 ____A C:\Users\Asteroide\Downloads\Millennium.Los.Hombres.Que.No.Amaban.A.Las.Mujeres.%5BUSA%5D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33442.torrent
2012-04-26 08:47 - 2012-04-26 08:47 - 0027529 ____A C:\Users\Asteroide\Downloads\XP3D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33443.torrent
2012-04-26 08:47 - 2012-04-26 08:47 - 0025475 ____A C:\Users\Asteroide\Downloads\Juego.De.Tronos.2x01.%5BReparado%5D.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33440.torrent
2012-04-26 08:04 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At19.job
2012-04-26 08:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At43.job
2012-04-26 07:45 - 2010-12-13 11:51 - 0000000 ___SD C:\Users\Asteroide\Desktop\jocs
2012-04-26 07:39 - 2012-04-26 07:39 - 0005366 ____A C:\Users\Asteroide\Downloads\327319971 (7).xls
2012-04-26 07:33 - 2012-04-20 09:04 - 0000000 ____D C:\Users\Asteroide\AppData\Local\BlueStacks
2012-04-26 07:32 - 2012-03-25 14:55 - 0008770 ____A C:\Windows\PFRO.log
2012-04-26 07:32 - 2009-07-13 20:45 - 0308064 ____A C:\Windows\System32\FNTCACHE.DAT
2012-04-26 07:32 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\SysWOW64\es-ES
2012-04-26 07:32 - 2009-07-13 19:20 - 0000000 ____D C:\Windows\System32\es-ES
2012-04-26 07:31 - 2012-04-26 07:31 - 0005366 ____A C:\Users\Asteroide\Downloads\327319971 (8).txt
2012-04-26 07:25 - 2012-04-26 07:25 - 0000000 ____D C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
2012-04-26 07:25 - 2010-12-29 05:39 - 0007601 ____A C:\Users\Asteroide\AppData\Local\Resmon.ResmonCfg
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At48.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At40.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At39.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At37.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At36.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At35.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At34.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At33.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At32.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At31.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At30.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At29.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At28.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At27.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At26.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At25.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At9.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At8.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At7.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At6.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At5.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At4.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At3.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At24.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At2.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At16.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At15.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At13.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At12.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At11.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At10.job
2012-04-26 07:24 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At1.job
2012-04-26 07:23 - 2009-07-13 21:08 - 0032608 ____A C:\Windows\Tasks\SCHEDLGU.TXT
2012-04-26 07:22 - 2011-01-23 06:45 - 1646244 ____A C:\Windows\SysWOW64\PerfStringBackup.INI
2012-04-26 07:07 - 2010-12-14 00:18 - 0000000 ____D C:\Games
2012-04-26 07:06 - 2010-12-13 12:05 - 0001014 ____A C:\Windows\Tasks\GoogleUpdateTaskUserS-1-5-21-1068431273-4020526499-88977139-1001Core.job
2012-04-26 07:00 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At42.job
2012-04-26 07:00 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At18.job
2012-04-26 06:46 - 2010-12-15 03:43 - 0000000 ____D C:\Users\Asteroide\AppData\Local\SKIDROW
2012-04-26 06:46 - 2010-12-14 23:29 - 0000000 ____D C:\Users\Asteroide\Documents\My Games
2012-04-26 06:01 - 2012-04-26 05:29 - 0000342 ____A C:\Windows\Tasks\At41.job
2012-04-26 06:01 - 2012-04-26 05:29 - 0000340 ____A C:\Windows\Tasks\At17.job
2012-04-26 05:19 - 2012-04-26 05:19 - 0000000 __ASH C:\Windows\System32\dds_trash_log.cmd
2012-04-26 05:17 - 2012-04-26 05:17 - 0000000 ____D C:\Windows\system64
2012-04-26 03:10 - 2012-04-26 03:10 - 0014271 ____A C:\Users\Asteroide\Downloads\26AB110B1D7B66B1F5F33F3FE88D2152B5C1BFC1.torrent
2012-04-26 00:49 - 2012-04-26 00:49 - 0014725 ____A C:\Users\Asteroide\Downloads\Fireburst.%5BMULTI5%5D%5BPCDVD%5D%5BSKIDROW%5D%5BWwW.GamesTorrents.CoM%5D.t9042.torrent
2012-04-25 10:41 - 2012-04-25 10:41 - 0000000 ____D C:\Users\Asteroide\Desktop\Kingston 1gb
2012-04-25 10:29 - 2012-04-25 10:27 - 47835136 ____A C:\Users\Asteroide\Downloads\beini-1.2.3.iso
2012-04-25 10:12 - 2012-04-25 10:12 - 4781102 ____A C:\Users\Asteroide\Downloads\AiroWizard_Setup-Beta_1-rev.250.exe
2012-04-25 09:21 - 2012-04-25 09:21 - 0030965 ____A C:\Users\Asteroide\Downloads\Un.Lugar.Para.Sonyar.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33428.torrent
2012-04-25 09:21 - 2012-04-25 09:21 - 0029261 ____A C:\Users\Asteroide\Downloads\Attack.The.Block.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33425.torrent
2012-04-25 09:21 - 2012-04-25 09:21 - 0027752 ____A C:\Users\Asteroide\Downloads\El.Topo.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33426.torrent
2012-04-24 14:14 - 2012-04-24 14:14 - 0000000 ____D C:\Users\All Users\RELOADED
2012-04-24 14:14 - 2012-04-24 14:14 - 0000000 ____D C:\ProgramData\RELOADED
2012-04-24 14:14 - 2011-11-16 17:46 - 0000000 ____D C:\Users\Asteroide\Documents\Telltale Games
2012-04-24 13:30 - 2012-04-24 13:30 - 0019410 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.Episode.1.%5BEnglish%5D%5BPC%5D%5BRELOADED%5D%5BWwW.GamesTorrents.CoM%5D.t9034.torrent
2012-04-24 08:38 - 2012-04-24 08:38 - 0023485 ____A C:\Users\Asteroide\Downloads\Problemas.De.Mujeres.DVD.XviD.%5Bwww.DivxTotaL.com%5D.avi.t33411.torrent
2012-04-24 08:24 - 2012-04-13 06:00 - 0000907 ____A C:\Users\Asteroide\Desktop\Diario virtual.txt
2012-04-24 08:23 - 2012-04-24 08:23 - 0005277 ____A C:\Users\Asteroide\Downloads\327319971 (7).txt
2012-04-24 03:59 - 2012-04-24 03:59 - 0036864 ____A C:\Users\Asteroide\Downloads\Infidelidad..doc
2012-04-23 13:11 - 2012-04-23 10:42 - 1822536 ____A C:\Users\Asteroide\Desktop\GPU-Z Sensor Log.txt
2012-04-23 12:59 - 2012-04-23 12:59 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (6).xls
2012-04-23 11:08 - 2012-04-23 11:08 - 0018766 ____A C:\Users\Asteroide\Downloads\Intimidad.%5Bwww.DivxTotal.com%5D.avi.c33404.torrent
2012-04-23 11:00 - 2012-04-23 11:00 - 0444974 ____A C:\Users\Asteroide\Downloads\e-AU12-002981052.pdf
2012-04-23 10:58 - 2012-04-23 10:58 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (6).txt
2012-04-23 10:56 - 2012-04-23 10:56 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (5).xls
2012-04-23 10:54 - 2012-04-23 10:54 - 0004434 ____A C:\Users\Asteroide\Downloads\327319971 (4).xls
2012-04-23 06:14 - 2012-04-23 06:14 - 0014513 ____A C:\Users\Asteroide\Downloads\Louie.1x08.HDTV.XviD.www.DivxTotaL.com%5D.t33385.torrent
2012-04-23 06:14 - 2012-04-23 06:14 - 0014474 ____A C:\Users\Asteroide\Downloads\Louie.1x07.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33309.torrent
2012-04-23 06:09 - 2011-12-26 06:08 - 0000000 ____D C:\Program Files (x86)\NCH Software
2012-04-23 06:09 - 2011-11-20 13:11 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\JAM Software
2012-04-22 12:36 - 2010-12-13 11:55 - 0000000 ____D C:\Users\Asteroide\Documents\Mis archivos recibidos
2012-04-22 11:54 - 2012-04-22 11:54 - 0026112 ____A C:\Users\Asteroide\Documents\Qué llevas ahí.doc
2012-04-22 03:32 - 2012-04-22 03:32 - 0067773 ____A C:\Users\Asteroide\Downloads\CutPicture.com_2012-Apr-22_07_32_10.jpg
2012-04-22 03:24 - 2012-04-22 03:24 - 0048099 ____A C:\Users\Asteroide\Downloads\leminiscata_infinito-19.jpg
2012-04-22 02:47 - 2012-04-22 02:47 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (3).xls
2012-04-22 02:40 - 2012-04-22 02:40 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (2).xls
2012-04-22 02:38 - 2012-04-22 02:38 - 0004275 ____A C:\Users\Asteroide\Downloads\327319971 (5).txt
2012-04-21 07:39 - 2012-04-21 07:39 - 0001301 ____A C:\Users\Asteroide\Downloads\sorry.aspx
2012-04-21 07:39 - 2012-04-21 07:39 - 0001301 ____A C:\Users\Asteroide\Downloads\sorry (1).aspx
2012-04-21 07:35 - 2012-04-21 07:35 - 0027894 ____A C:\Users\Asteroide\Downloads\Jane.Eyre.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33395.torrent
2012-04-21 07:34 - 2012-04-21 07:34 - 0022777 ____A C:\Users\Asteroide\Downloads\Sherlock.Holmes.Juego.De.Sombras.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33376.torrent
2012-04-21 07:34 - 2012-04-21 07:34 - 0021914 ____A C:\Users\Asteroide\Downloads\Dexter.6x12.HDTV.XviD.www.DivxTotaL.com%5D.t33393.torrent
2012-04-21 06:15 - 2012-04-21 06:15 - 0015538 ____A C:\Users\Asteroide\Downloads\B4B060BE67704A8C25E40C3BD503360AAB0EFE1C.torrent
2012-04-21 04:01 - 2012-04-21 04:01 - 0234813 ____A C:\Users\Asteroide\Documents\IMG_21042012_140110.png
2012-04-20 14:25 - 2012-04-15 06:07 - 0407679 ____A C:\Users\Asteroide\Desktop\Tú eres mi equilibrio.jpg
2012-04-20 10:11 - 2012-04-20 10:11 - 0028614 ____A C:\Users\Asteroide\Downloads\Touch.1x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33387.torrent
2012-04-20 09:05 - 2012-04-20 09:05 - 0001829 ____A C:\Users\Public\Desktop\Start BlueStacks.lnk
2012-04-20 09:05 - 2012-04-20 09:05 - 0001604 ____A C:\Users\Asteroide\Desktop\Android Apps.lnk
2012-04-20 09:05 - 2012-04-20 09:05 - 0000000 ____D C:\Users\All Users\BlueStacks
2012-04-20 09:05 - 2012-04-20 09:05 - 0000000 ____D C:\ProgramData\BlueStacks
2012-04-20 09:05 - 2012-04-20 09:05 - 0000000 ____D C:\Program Files (x86)\BlueStacks
2012-04-20 09:05 - 2012-04-20 09:04 - 0000000 ____D C:\Users\Asteroide\AppData\Local\BlueStacksSetup
2012-04-20 09:04 - 2012-04-20 09:04 - 3785056 ____A (BlueStack Systems, Inc.) C:\Users\Asteroide\Desktop\BlueStacks-ThinInstaller_0.6.3.2215.exe
2012-04-19 11:55 - 2012-04-19 11:55 - 0003842 ____A C:\Users\Asteroide\Downloads\327319971 (4).txt
2012-04-19 08:02 - 2012-04-19 08:01 - 0403949 ____A C:\Users\Asteroide\Documents\IMG_19042012_180123.png
2012-04-19 05:17 - 2012-04-19 05:17 - 0031513 ____A C:\Users\Asteroide\Downloads\22.Balas.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33355.torrent
2012-04-19 05:17 - 2012-04-19 05:17 - 0029955 ____A C:\Users\Asteroide\Downloads\No.Tengas.Miedo.A.La.oscuridad.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33358.torrent
2012-04-19 04:49 - 2012-04-19 04:48 - 27157081 ____A C:\Users\Asteroide\Downloads\xperia neo.rar
2012-04-18 08:48 - 2012-04-18 08:39 - 0141635 ____A C:\Users\Asteroide\Desktop\Nuevo Documento de Microsoft Office Word.docx
2012-04-18 08:13 - 2012-04-18 08:13 - 0003209 ____A C:\Users\Asteroide\Downloads\327319971 (3).txt
2012-04-17 13:32 - 2012-04-17 13:31 - 1112188 ____A C:\Users\Asteroide\Documents\IMG_3847.JPG
2012-04-17 13:31 - 2012-04-17 13:30 - 1178859 ____A C:\Users\Asteroide\Documents\IMG_3840.JPG
2012-04-17 13:30 - 2012-04-17 13:29 - 0974061 ____A C:\Users\Asteroide\Documents\IMG_3833.JPG
2012-04-17 13:17 - 2012-04-17 13:17 - 0042672 ____A C:\Users\Asteroide\Documents\IMG_17042012_231712.png
2012-04-17 13:06 - 2012-04-17 13:06 - 0002597 ____A C:\Users\Asteroide\Desktop\Lo soy.png
2012-04-17 07:09 - 2012-04-17 07:09 - 0022175 ____A C:\Users\Asteroide\Downloads\Dexter.6x11.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33342.torrent
2012-04-16 12:06 - 2012-04-16 12:06 - 0028760 ____A C:\Users\Asteroide\Downloads\Un.Dios.Salvaje.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33339.torrent
2012-04-16 12:06 - 2012-04-16 12:06 - 0027542 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x20.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33340.torrent
2012-04-16 03:07 - 2011-11-26 08:00 - 0286743 ____N C:\Windows\Minidump\041612-19734-01.dmp
2012-04-16 03:07 - 2011-04-01 15:02 - 0000000 ____D C:\Windows\Minidump
2012-04-15 17:45 - 2011-02-11 12:34 - 0000000 ____D C:\Users\Asteroide\Desktop\Slaves
2012-04-15 10:52 - 2012-04-15 10:52 - 0075413 ____A C:\Users\Asteroide\Desktop\borrador.pdf
2012-04-15 07:46 - 2012-04-15 06:10 - 0037376 ____A C:\Users\Asteroide\Documents\Estoy destrozado.doc
2012-04-13 08:42 - 2012-04-13 08:42 - 0028633 ____A C:\Users\Asteroide\Downloads\Touch.1x04.HDTV.XviD.www.DivxTotaL.com%5D.t33319.torrent
2012-04-13 08:42 - 2012-04-13 08:42 - 0027130 ____A C:\Users\Asteroide\Downloads\La.Venganza.De.Wyatt.Earp.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33321.torrent
2012-04-11 03:16 - 2012-04-11 03:16 - 0027902 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x19.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33283.torrent
2012-04-10 09:38 - 2012-03-01 03:03 - 0039424 ____A C:\Users\Asteroide\Documents\Mi vida era una mierda.doc
2012-04-09 11:04 - 2012-04-09 11:04 - 0075933 ____A C:\Users\Asteroide\Downloads\Anatomy_of_a_murder_(Eng_-Sp-_Fr-_It-De).torrent
2012-04-07 12:22 - 2012-04-07 12:22 - 0028654 ____A C:\Users\Asteroide\Downloads\Touch.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33169 (1).torrent
2012-04-07 07:00 - 2012-04-19 04:52 - 0000000 ____D C:\Users\Asteroide\Desktop\xperia neo
2012-04-07 06:14 - 2012-04-07 06:14 - 0028404 ____A C:\Users\Asteroide\Downloads\Monster.DVDRip.%5Bwww.DivxTotal.com%5Dsisibuto.t30548.torrent
2012-04-07 06:13 - 2012-04-07 06:13 - 0028634 ____A C:\Users\Asteroide\Downloads\Touch.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33269.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0019015 ____A C:\Users\Asteroide\Downloads\Louies.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32925.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0018934 ____A C:\Users\Asteroide\Downloads\Louie.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32969.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0018854 ____A C:\Users\Asteroide\Downloads\Louie.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33061.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0014474 ____A C:\Users\Asteroide\Downloads\Louie.1x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33225.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0014094 ____A C:\Users\Asteroide\Downloads\Louie.1x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33262.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0013934 ____A C:\Users\Asteroide\Downloads\Louie.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33123.torrent
2012-04-06 05:48 - 2012-04-06 05:48 - 0013934 ____A C:\Users\Asteroide\Downloads\Louie.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33123 (1).torrent
2012-04-05 05:30 - 2012-03-08 03:45 - 0028160 ____A C:\Users\Asteroide\Documents\Faltan fragmenos.doc
2012-04-05 01:23 - 2012-04-05 01:23 - 0032100 ____A C:\Users\Asteroide\Downloads\La.Conspiracion.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33259.torrent
2012-04-04 10:39 - 2012-04-04 10:39 - 0033741 ____A C:\Users\Asteroide\Downloads\Mis_dias_sin_ti.docx
2012-04-02 11:12 - 2012-04-02 11:11 - 0028774 ____A C:\Users\Asteroide\Downloads\Touch.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33227.torrent
2012-04-02 02:51 - 2012-03-30 06:43 - 0000000 ____D C:\Users\Asteroide\Desktop\Trash
2012-04-01 10:28 - 2012-04-01 10:28 - 0029033 ____A C:\Users\Asteroide\Downloads\Perros.de.Paja.%28www.DivxTotal.com%29.t12702 (1).torrent
2012-04-01 09:06 - 2012-04-01 09:06 - 0030634 ____A C:\Users\Asteroide\Downloads\Somewhere.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33223.torrent
2012-04-01 09:06 - 2012-04-01 09:06 - 0029539 ____A C:\Users\Asteroide\Downloads\La.Voz.Dormida.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33100.torrent
2012-04-01 09:06 - 2012-04-01 09:06 - 0028397 ____A C:\Users\Asteroide\Downloads\Animals.United.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33207.torrent
2012-03-31 10:37 - 2012-03-31 10:37 - 0022195 ____A C:\Users\Asteroide\Downloads\Dexter.6x10.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33232.torrent
2012-03-31 09:23 - 2009-07-13 21:32 - 0000000 ____D C:\Windows\Downloaded Program Files
2012-03-31 04:50 - 2011-03-06 02:15 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Rovio
2012-03-31 04:37 - 2012-03-31 04:37 - 0011548 ____A C:\Users\Asteroide\Downloads\07DAD37DA98A1177F101AF1EAFC67F5EC2175007.torrent
2012-03-31 04:36 - 2012-03-31 04:36 - 0016320 ____A C:\Users\Asteroide\Downloads\3437D4B62E9DD136553EFED19F669675D5541F6A.torrent
2012-03-29 02:18 - 2012-03-29 02:18 - 0028654 ____A C:\Users\Asteroide\Downloads\Touch.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33169.torrent
2012-03-29 02:18 - 2012-03-29 02:18 - 0021974 ____A C:\Users\Asteroide\Downloads\Dexter.6x09.HDTV.XviD.www.DivxTotaL.com%5D.t33175.torrent
2012-03-28 17:00 - 2010-12-13 00:25 - 57249312 ____A (Microsoft Corporation) C:\Windows\System32\MRT.exe
2012-03-26 07:51 - 2012-03-26 07:51 - 0029064 ____A C:\Users\Asteroide\Downloads\Perros.De.Paja.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32717.torrent
2012-03-26 06:58 - 2012-03-26 06:55 - 58720786 ____A C:\Users\Asteroide\Downloads\1993LLbyGunSh.rar
2012-03-25 15:39 - 2012-03-25 15:38 - 0077026 ____A C:\Users\Asteroide\Documents\felicidad.jpg
2012-03-25 10:44 - 2011-04-29 02:02 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\shrink_pic
2012-03-24 02:17 - 2012-03-24 02:17 - 0020715 ____A C:\Users\Asteroide\Downloads\Medianeras.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33118.torrent
2012-03-24 02:15 - 2012-03-24 02:15 - 0014791 ____A C:\Users\Asteroide\Downloads\Un.Plan.Cencillo.%5Bwww.DivxTotal.com%5D.c33146.torrent
2012-03-22 10:46 - 2010-12-13 11:50 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Winamp
2012-03-21 04:14 - 2012-03-21 04:14 - 0024463 ____A C:\Users\Asteroide\Downloads\5.Metros.Cuadrados.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33091.torrent
2012-03-21 04:13 - 2012-03-21 04:13 - 0035195 ____A C:\Users\Asteroide\Downloads\Inmortales.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33098.torrent
2012-03-20 13:08 - 2012-03-20 13:08 - 0000000 ____A C:\Windows\setuperr.log
2012-03-20 12:03 - 2012-03-20 12:03 - 0028525 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x13.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33092.torrent
2012-03-20 01:34 - 2012-03-20 01:34 - 0028669 ____A C:\Users\Asteroide\Downloads\La.Guerra.De.Los.Botones.DVD.XviD.%5Bwww.DivxTotal.com%5D.t33085.torrent
2012-03-20 01:34 - 2012-03-20 01:34 - 0028502 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x17.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33083.torrent
2012-03-20 01:34 - 2012-03-20 01:34 - 0028482 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x18.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33084.torrent
2012-03-19 09:33 - 2012-03-19 09:33 - 0000000 ____D C:\Users\Asteroide\.revenge_of_the_titans_1.80
2012-03-19 09:33 - 2010-12-13 00:18 - 0000000 ____D C:\users\Asteroide
2012-03-19 08:59 - 2012-03-19 08:59 - 0005051 ____A C:\Users\Asteroide\Downloads\Sol.Survivor-CPY_(No_Rar)_(No_Mount).5436554.TPB.torrent
2012-03-19 05:36 - 2012-03-19 05:36 - 0014514 ____A C:\Users\Asteroide\Downloads\Mi mejor amigo [DVDRIP][Castellano].torrent
2012-03-19 05:35 - 2012-03-19 05:35 - 0014810 ____A C:\Users\Asteroide\Downloads\Mi_mejor_amigo.3870206.TPB.torrent
2012-03-19 04:56 - 2012-03-19 04:56 - 1944895 ____A C:\Users\Asteroide\Downloads\mj_Rise-of-the-Tower.zip
2012-03-18 06:12 - 2012-03-18 06:12 - 0028634 ____A C:\Users\Asteroide\Downloads\Fringe.4x01.HDTV.XviD.www.DivxTotaL.com%5D.t33070.torrent
2012-03-18 05:53 - 2012-03-18 05:53 - 0149836 ____A C:\Users\Asteroide\Documents\5008922119_3793c3066c.jpg
2012-03-18 04:47 - 2012-03-18 04:47 - 0022175 ____A C:\Users\Asteroide\Downloads\Dexter.6x08.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33069.torrent
2012-03-17 03:47 - 2012-03-17 03:47 - 0028900 ____A C:\Users\Asteroide\Downloads\Frenesi.%28www.DivexTotal.com%29.t13265.torrent
2012-03-17 02:32 - 2012-03-16 10:09 - 0028160 ____A C:\Users\Asteroide\Documents\Epílogo.doc
2012-03-15 08:13 - 2012-02-06 11:24 - 0028672 ____A C:\Users\Asteroide\Documents\Sentimiento Universal.doc
2012-03-15 07:35 - 2012-03-15 07:35 - 0014826 ____A C:\Users\Asteroide\Downloads\torrentdownloads net Klass [DVDRip][Xvid][ com].torrent
2012-03-15 07:28 - 2012-03-15 07:28 - 0015448 ____A C:\Users\Asteroide\Downloads\Klass.DVDRIP.(spanish)..5904839.TPB.torrent
2012-03-15 07:28 - 2012-02-18 06:36 - 0000000 ____D C:\Users\Asteroide\Documents\UseNeXT
2012-03-15 03:20 - 2012-03-15 03:20 - 0018432 ____A C:\Users\Asteroide\Downloads\DetalleLlamadas (1).xls
2012-03-15 01:48 - 2012-03-15 01:48 - 0014542 ____A C:\Users\Asteroide\Downloads\Klass_[DVDRip__Castellano__Drama].4405509.TPB.torrent
2012-03-14 10:43 - 2012-03-14 10:43 - 0028545 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x12.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33022.torrent
2012-03-14 09:55 - 2012-03-14 09:55 - 0000071 ____A C:\Users\Asteroide\Downloads\d023_tot.rpm
2012-03-14 09:24 - 2012-03-14 09:24 - 0028548 ____A C:\Users\Asteroide\Downloads\Eva.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33036 (1).torrent
2012-03-14 09:00 - 2012-03-14 09:00 - 0028548 ____A C:\Users\Asteroide\Downloads\Eva.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t33036.torrent
2012-03-14 07:35 - 2012-03-14 07:35 - 0028502 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x12.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32952 (1).torrent
2012-03-14 07:35 - 2012-03-14 07:35 - 0028501 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x13.HDTV.XviD.www.DivxTotaL.com%5D.t33027.torrent
2012-03-14 06:10 - 2012-03-14 06:10 - 0014613 ____A C:\Users\Asteroide\Downloads\[kat.ph]klass.dvd.rip.xvid.mp3.spanish.www.bajandoxvid.com.avi.torrent
2012-03-14 06:07 - 2012-03-14 06:07 - 0014474 ____A C:\Users\Asteroide\Downloads\[mnova.eu] Klass_(DVDRip_Castellano_Drama).torrent
2012-03-13 11:15 - 2012-03-11 05:45 - 0042496 ____A C:\Users\Asteroide\Documents\Habían llegado temprano a la plataforma de lanzamiento.doc
2012-03-13 04:59 - 2012-03-13 04:59 - 0028590 ____A C:\Users\Asteroide\Downloads\Dejame.Entrar.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t22316.torrent
2012-03-13 04:58 - 2012-03-13 04:58 - 0028566 ____A C:\Users\Asteroide\Downloads\Klass.DVD.XviD.MP3.%5Bwww.DivxTotaL.com%5D.t17207.torrent
2012-03-12 12:36 - 2012-03-12 12:36 - 0014904 ____A C:\Users\Asteroide\Downloads\download (2).php
2012-03-12 12:35 - 2012-03-12 12:35 - 0021206 ____A C:\Users\Asteroide\Downloads\download (1).php
2012-03-12 12:34 - 2012-03-12 12:34 - 0014904 ____A C:\Users\Asteroide\Downloads\download.php
2012-03-12 12:33 - 2012-03-12 12:33 - 0018488 ____A C:\Users\Asteroide\Downloads\Gattaca.%5BDivxtotal%5D.avi.c28711.torrent
2012-03-12 11:39 - 2012-03-12 11:39 - 0023693 ____A C:\Users\Asteroide\Downloads\El.Erizo.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t26491.torrent
2012-03-12 11:38 - 2012-03-12 11:38 - 0021726 ____A C:\Users\Asteroide\Downloads\Dexter.6x07.%5BReparado%5D.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33016.torrent
2012-03-11 07:16 - 2011-05-18 09:19 - 0000000 ___RD C:\Program Files (x86)\Skype
2012-03-11 05:22 - 2012-03-11 05:22 - 0027621 ____A C:\Users\Asteroide\Downloads\Nunca.Me.Abandones.DVD.torrent
2012-03-11 00:54 - 2012-03-11 00:54 - 0021715 ____A C:\Users\Asteroide\Downloads\Dexter.6x07.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t33002.torrent
2012-03-09 01:58 - 2012-03-09 01:58 - 0036186 ____A C:\Users\Asteroide\Downloads\Amanecer.Parte.1.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32986.torrent
2012-03-09 01:58 - 2012-03-09 01:58 - 0026324 ____A C:\Users\Asteroide\Downloads\Todo.Un.Hombre.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32985.torrent
2012-03-08 09:00 - 2011-10-02 02:46 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Mipony
2012-03-08 08:57 - 2011-10-02 02:53 - 0000000 ____D C:\Users\Asteroide\Documents\Mipony
2012-03-07 12:10 - 2012-03-07 12:10 - 0035180 ____A C:\Users\Asteroide\Downloads\Melancolia.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32974.torrent
2012-03-07 12:10 - 2012-03-07 12:10 - 0033789 ____A C:\Users\Asteroide\Downloads\Detras.De.Las.Paredes.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32958.torrent
2012-03-06 13:49 - 2012-03-06 11:29 - 734263296 ____A C:\Users\Asteroide\Downloads\Los.Inadaptados.yamil.avi
2012-03-06 12:38 - 2012-03-06 11:26 - 723884841 ____A C:\Users\Asteroide\Downloads\Donnie+Darko+krneo.rar
2012-03-06 11:22 - 2012-03-06 11:22 - 0014743 ____A C:\Users\Asteroide\Downloads\Donnie.Darko..Spanish..%5BDVDRip.XviD.www.DivxTotaL.com%5D.avi.c27095.torrent
2012-03-06 10:04 - 2012-03-06 10:04 - 0028525 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x11.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32951.torrent
2012-03-06 10:04 - 2012-03-06 10:04 - 0028502 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x12.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32952.torrent
2012-03-06 01:23 - 2012-03-06 01:23 - 0028242 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x16.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32946.torrent
2012-03-06 01:23 - 2012-03-06 01:23 - 0022335 ____A C:\Users\Asteroide\Downloads\Dexter.6x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32945.torrent
2012-03-05 11:04 - 2012-03-05 11:04 - 0278282 ____A C:\Users\Asteroide\Downloads\CI0547075467 (2).pdf
2012-03-05 11:04 - 2012-03-05 11:04 - 0278282 ____A C:\Users\Asteroide\Downloads\CI0547075467 (1).pdf
2012-03-05 11:04 - 2012-03-05 11:04 - 0253147 ____A C:\Users\Asteroide\Downloads\CI0540363338 (2).pdf
2012-03-05 11:04 - 2012-03-05 11:04 - 0253147 ____A C:\Users\Asteroide\Downloads\CI0540363338 (1).pdf
2012-03-05 11:02 - 2012-03-05 11:02 - 0289158 ____A C:\Users\Asteroide\Downloads\CI0553799954.pdf
2012-03-05 09:53 - 2011-04-22 15:35 - 0062976 ____A C:\Users\Asteroide\Documents\Oscuridad.doc
2012-03-05 07:02 - 2011-12-30 07:42 - 0032256 ____A C:\Users\Asteroide\Documents\Sonata.doc
2012-03-05 06:43 - 2011-04-07 17:05 - 0000000 ____D C:\Users\Asteroide\AppData\Local\ElevatedDiagnostics
2012-03-04 09:50 - 2011-01-19 08:22 - 0000000 ____D C:\Users\Asteroide\Desktop\LLibreta
2012-03-04 08:47 - 2012-03-04 08:47 - 0028525 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x10.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32936.torrent
2012-03-03 08:17 - 2012-03-03 06:25 - 1310683136 ____A C:\Users\Asteroide\Downloads\Lahistormgrandjamvendi.by.Dok.avi
2012-03-02 12:13 - 2011-07-06 18:51 - 0002545 ____A C:\Users\Public\Desktop\Skype.lnk
2012-03-02 12:13 - 2010-12-30 07:31 - 0000000 ____D C:\Users\All Users\Skype
2012-03-02 12:13 - 2010-12-30 07:31 - 0000000 ____D C:\ProgramData\Skype
2012-03-02 10:07 - 2012-03-01 13:03 - 0027136 ____A C:\Users\Asteroide\Documents\Consejos Noctalia.doc
2012-03-01 23:17 - 2012-03-01 23:17 - 0028448 ____A C:\Users\Asteroide\Downloads\lolita-una-pasion.torrent
2012-03-01 12:56 - 2012-03-01 12:56 - 0028224 ____A C:\Users\Asteroide\Downloads\Melissa.P.DVDrip.XViD.MP3.[www.DivxTotaL.CoM].torrent
2012-03-01 12:56 - 2012-03-01 12:56 - 0026805 ____A C:\Users\Asteroide\Downloads\Melissa.P.XviD.MP3.Screener.[DTL].torrent
2012-02-29 22:54 - 2012-04-26 07:17 - 0022896 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\fs_rec.sys
2012-02-29 22:45 - 2012-04-26 07:17 - 0220672 ____A (Microsoft Corporation) C:\Windows\System32\wintrust.dll
2012-02-29 22:40 - 2012-04-26 07:17 - 0080896 ____A (Microsoft Corporation) C:\Windows\System32\imagehlp.dll
2012-02-29 22:35 - 2012-04-26 07:17 - 0005120 ____A (Microsoft Corporation) C:\Windows\System32\wmi.dll
2012-02-29 21:49 - 2012-04-26 07:17 - 0172544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2012-02-29 21:45 - 2012-04-26 07:17 - 0158720 ____A (Microsoft Corporation) C:\Windows\SysWOW64\imagehlp.dll
2012-02-29 21:40 - 2012-04-26 07:17 - 0005120 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wmi.dll
2012-02-29 08:25 - 2012-02-29 08:25 - 0034183 ____A C:\Users\Asteroide\Downloads\que-pasa-con-la-gravedad-2007-spanish-doc-dsr-xvid-www-torrentmas-org[www.spatorrent.com].torrent
2012-02-29 06:45 - 2012-02-29 06:45 - 0013210 ____A C:\Users\Asteroide\Downloads\6.Relajacion.Animales.Pantanos.www.todotorrent.com.rar.t32900.torrent
2012-02-29 01:18 - 2012-02-29 01:18 - 0028542 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x11.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32893.torrent
2012-02-28 12:47 - 2012-02-28 12:47 - 0032256 ____A C:\Users\Asteroide\Documents\La verdad es que no sé muy bien cómo empezar.doc
2012-02-28 11:26 - 2012-02-28 11:26 - 0029208 ____A C:\Users\Asteroide\Downloads\el_orgasmo_de_ella_[hdtv][spanish].torrent
2012-02-28 11:26 - 2012-02-28 11:26 - 0028984 ____A C:\Users\Asteroide\Downloads\el_orgasmo_de_el_[hdtv][spanish].torrent
2012-02-28 11:24 - 2012-02-28 11:24 - 0016064 ____A C:\Users\Asteroide\Downloads\dinero-es-deuda-dvdrip.torrent
2012-02-28 11:23 - 2012-02-28 11:23 - 0021180 ____A C:\Users\Asteroide\Downloads\El_Imperio_de_los_Virus_2_de_2_[Documental_C_Odisea][Satrip].torrent
2012-02-28 11:23 - 2012-02-28 11:23 - 0021140 ____A C:\Users\Asteroide\Downloads\El_Imperio_de_los_Virus_1_de_2_[Documental_C_Odisea][Satrip].torrent
2012-02-28 11:17 - 2012-02-28 11:17 - 0027762 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x15.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32883.torrent
2012-02-27 22:35 - 2012-04-26 07:16 - 1501184 ____A (Microsoft Corporation) C:\Windows\System32\urlmon.dll
2012-02-27 22:35 - 2012-04-26 07:16 - 1197568 ____A (Microsoft Corporation) C:\Windows\System32\wininet.dll
2012-02-27 22:35 - 2012-04-26 07:16 - 0134144 ____A (Microsoft Corporation) C:\Windows\System32\url.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 9335296 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 1026560 ____A (Microsoft Corporation) C:\Windows\System32\mstime.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 0703488 ____A (Microsoft Corporation) C:\Windows\System32\msfeeds.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 0097280 ____A (Microsoft Corporation) C:\Windows\System32\mshtmled.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 0082944 ____A (Microsoft Corporation) C:\Windows\System32\msfeedsbs.dll
2012-02-27 22:33 - 2012-04-26 07:16 - 0057856 ____A (Microsoft Corporation) C:\Windows\System32\licmgr10.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 2458624 ____A (Microsoft Corporation) C:\Windows\System32\iertutil.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 12372480 ____A (Microsoft Corporation) C:\Windows\System32\ieframe.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 0445952 ____A (Microsoft Corporation) C:\Windows\System32\iedkcs32.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 0256000 ____A (Microsoft Corporation) C:\Windows\System32\iepeers.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 0247808 ____A (Microsoft Corporation) C:\Windows\System32\ieui.dll
2012-02-27 22:32 - 2012-04-26 07:16 - 0064512 ____A (Microsoft Corporation) C:\Windows\System32\jsproxy.dll
2012-02-27 22:29 - 2012-04-26 07:16 - 0012288 ____A (Microsoft Corporation) C:\Windows\System32\msfeedssync.exe
2012-02-27 21:40 - 2012-04-26 07:16 - 1230336 ____A (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2012-02-27 21:40 - 2012-04-26 07:16 - 0981504 ____A (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2012-02-27 21:40 - 2012-04-26 07:16 - 0132096 ____A (Microsoft Corporation) C:\Windows\SysWOW64\url.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 5998592 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0606208 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mstime.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0599552 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0067072 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0064512 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedsbs.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0048128 ____A (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2012-02-27 21:38 - 2012-04-26 07:16 - 0044544 ____A (Microsoft Corporation) C:\Windows\SysWOW64\licmgr10.dll
2012-02-27 21:37 - 2012-04-26 07:16 - 2072576 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2012-02-27 21:37 - 2012-04-26 07:16 - 10991104 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2012-02-27 21:37 - 2012-04-26 07:16 - 0381440 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2012-02-27 21:37 - 2012-04-26 07:16 - 0185856 ____A (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2012-02-27 21:37 - 2012-04-26 07:16 - 0176640 ____A (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2012-02-27 21:35 - 2012-04-26 07:16 - 0012800 ____A (Microsoft Corporation) C:\Windows\SysWOW64\msfeedssync.exe
2012-02-27 21:17 - 2012-04-26 07:16 - 0482816 ____A (Microsoft Corporation) C:\Windows\System32\html.iec
2012-02-27 20:35 - 2012-04-26 07:16 - 1638912 ____A (Microsoft Corporation) C:\Windows\System32\mshtml.tlb
2012-02-27 20:31 - 2012-04-26 07:16 - 0386048 ____A (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2012-02-27 19:57 - 2012-04-26 07:16 - 1638912 ____A (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2012-02-27 09:13 - 2012-02-27 09:13 - 0025168 ____A C:\Users\Asteroide\Downloads\30.Minutos.O.Menos.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32879.torrent
2012-02-27 04:50 - 2012-02-27 04:50 - 0027364 ____A C:\Users\Asteroide\Downloads\el_guerrero_definitivo_[dvdrip][spanish].torrent
2012-02-27 04:42 - 2012-02-27 04:42 - 0013573 ____A C:\Users\Asteroide\Downloads\el-lenguaje-corporal.torrent
2012-02-27 04:36 - 2012-02-27 04:36 - 0022273 ____A C:\Users\Asteroide\Downloads\Dexter.6x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32850.torrent
2012-02-27 00:47 - 2012-02-27 00:47 - 0013485 ____A C:\Users\Asteroide\Downloads\Los_ojos_de_Julia[DVDRip][AC35.1][spanish].6243994.TPB.torrent
2012-02-26 12:28 - 2012-02-26 10:14 - 0031744 ____A C:\Users\Asteroide\Documents\Progenia.doc
2012-02-26 01:45 - 2011-10-07 04:31 - 0000000 ____D C:\Users\Asteroide\Desktop\Kingstone
2012-02-26 00:03 - 2012-02-26 00:03 - 0031866 ____A C:\Users\Asteroide\Downloads\Timidos.Anonimos.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32858.torrent
2012-02-25 13:43 - 2012-02-25 13:43 - 0000000 ____D C:\Users\All Users\3DMGAME
2012-02-25 13:43 - 2012-02-25 13:43 - 0000000 ____D C:\ProgramData\3DMGAME
2012-02-25 13:41 - 2012-02-25 13:41 - 0007976 ____A C:\Users\Asteroide\Downloads\Wargame.European.Escalation.Crack.Only-3DM.7052898.TPB.torrent
2012-02-25 04:00 - 2012-02-25 04:00 - 0034266 ____A C:\Users\Asteroide\Downloads\Wargame.European.Escalation.%5BMULTI%5D%5BPCDVD%5D%5BNO.CRACK%5D%5BSTEAM.UNLOCK%5D%5BWwW.GamesTorrents.CoM%5D.t8820.torrent
2012-02-24 05:50 - 2012-02-24 05:50 - 0001968 ____A C:\Users\Asteroide\Downloads\3a3ecf2a68b265f2b04400ec054e5684.ccf
2012-02-24 04:15 - 2012-02-24 04:15 - 0038950 ____A C:\Users\Asteroide\Downloads\[NetShowBT]?02.23.12?[Wargame.European.Escalation.STEAM.UNLOCK-ALI213][????:????STEAM???] (1).torrent
2012-02-24 04:13 - 2012-02-24 04:13 - 0028385 ____A C:\Users\Asteroide\Downloads\[NetShowBT]?02.23.12?[Wargame.European.Escalation.Fullrepack-ALI213][????:?????????].torrent
2012-02-24 01:11 - 2010-12-13 12:14 - 0000000 ____D C:\Program Files (x86)\uTorrent
2012-02-23 12:24 - 2012-02-23 12:24 - 0014780 ____A C:\Users\Asteroide\Downloads\PROBLEMAS DE ECUACIONES DE PRIMER GRADO.docx
2012-02-23 10:02 - 2012-02-23 10:01 - 0038950 ____A C:\Users\Asteroide\Downloads\[NetShowBT]?02.23.12?[Wargame.European.Escalation.STEAM.UNLOCK-ALI213][????:????STEAM???].torrent
2012-02-23 07:44 - 2011-07-14 03:01 - 0000000 ____D C:\Program Files (x86)\Steam
2012-02-23 07:07 - 2011-02-10 08:43 - 0000000 ____D C:\Users\Asteroide\Desktop\relats 2011
2012-02-23 03:26 - 2012-02-23 03:26 - 0038962 ____A C:\Users\Asteroide\Downloads\Wargame_European_Escalation_STEAM_UNLOCK_-_ALI213.7052196.TPB.torrent
2012-02-22 11:16 - 2012-02-22 11:16 - 0324227 ____A C:\Users\Asteroide\Downloads\71679.jpg
2012-02-22 09:18 - 2012-02-22 09:18 - 0028523 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x09.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32818.torrent
2012-02-22 09:18 - 2012-02-22 09:18 - 0028520 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x10.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32825.torrent
2012-02-22 09:18 - 2012-02-22 09:18 - 0021793 ____A C:\Users\Asteroide\Downloads\Dexter.6x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32816.torrent
2012-02-22 09:17 - 2012-02-22 09:17 - 0028326 ____A C:\Users\Asteroide\Downloads\Mientras.Duermes.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32823.torrent
2012-02-22 06:52 - 2012-02-22 06:52 - 0093158 ____A C:\Users\Asteroide\Documents\37142_100249403373969_100001667280617_624_2733411_n.jpg
2012-02-22 06:41 - 2012-02-22 06:41 - 0046398 ____A C:\Users\Asteroide\Documents\cumpledekarmen015.jpg
2012-02-22 06:40 - 2012-02-22 06:40 - 0019349 ____A C:\Users\Asteroide\Documents\cumplecarmen033.jpg
2012-02-22 06:38 - 2012-02-22 06:38 - 0047777 ____A C:\Users\Asteroide\Documents\15-10-2006038.jpg
2012-02-22 06:36 - 2012-02-22 06:36 - 0037424 ____A C:\Users\Asteroide\Documents\12-08-2006026[2].jpg
2012-02-22 06:35 - 2012-02-22 06:35 - 0025734 ____A C:\Users\Asteroide\Documents\14-08-2006020.jpg
2012-02-22 06:34 - 2012-02-22 06:34 - 0032528 ____A C:\Users\Asteroide\Documents\14-08-2006009.jpg
2012-02-22 06:34 - 2012-02-22 06:34 - 0019127 ____A C:\Users\Asteroide\Documents\12-08-2006038[2].jpg
2012-02-21 13:14 - 2011-07-06 10:13 - 0002257 ____A C:\Users\Asteroide\Desktop\Price.txt
2012-02-20 11:56 - 2012-02-20 11:56 - 0007521 ____A C:\Users\Asteroide\Downloads\www.GamesPeru.com_AutoClick.rar
2012-02-20 11:55 - 2012-02-20 11:55 - 0367937 ____A (Conduit) C:\Users\Asteroide\Downloads\Brothersoftdownloader_for_AutoClick.exe
2012-02-20 06:06 - 2011-04-09 11:58 - 0000000 ____D C:\Users\Asteroide\AppData\Local\LogiShrd
2012-02-20 06:06 - 2011-04-09 11:58 - 0000000 ____D C:\Program Files (x86)\Logitech
2012-02-20 06:05 - 2010-12-13 11:46 - 0000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2012-02-20 06:03 - 2012-02-20 06:03 - 0033412 ____A C:\Users\Asteroide\Documents\autoclick-1.0.6.rar
2012-02-20 04:16 - 2012-02-17 10:57 - 0024576 ____A C:\Users\Asteroide\Documents\Dicen que el canal escrito es uno de los más fríos que existen.doc
2012-02-19 14:40 - 2012-02-19 14:40 - 0076166 ____A C:\Users\Asteroide\Downloads\velvettearsrulez
2012-02-19 11:38 - 2012-02-19 11:38 - 1320179 ____A C:\Users\Asteroide\Documents\IMG_2394.JPG
2012-02-19 11:38 - 2012-02-19 11:38 - 0836306 ____A C:\Users\Asteroide\Documents\IMG_2398.JPG
2012-02-19 11:30 - 2012-02-19 11:29 - 1069311 ____A C:\Users\Asteroide\Documents\IMG_2393.JPG
2012-02-19 11:25 - 2012-02-19 11:25 - 1184264 ____A C:\Users\Asteroide\Documents\IMG_2388.JPG
2012-02-19 11:22 - 2012-02-19 11:21 - 1302157 ____A C:\Users\Asteroide\Documents\IMG_2361.JPG
2012-02-19 11:18 - 2012-02-19 11:18 - 1061966 ____A C:\Users\Asteroide\Documents\IMG_2225.JPG
2012-02-19 11:17 - 2012-02-19 11:17 - 1193844 ____A C:\Users\Asteroide\Documents\IMG_2212.JPG
2012-02-19 11:17 - 2012-02-19 11:16 - 1033034 ____A C:\Users\Asteroide\Documents\IMG_2181.JPG
2012-02-19 11:16 - 2012-02-19 11:16 - 1019418 ____A C:\Users\Asteroide\Documents\IMG_2163.JPG
2012-02-19 11:16 - 2012-02-19 11:15 - 0921613 ____A C:\Users\Asteroide\Documents\IMG_2160.JPG
2012-02-19 11:15 - 2012-02-19 11:15 - 1180509 ____A C:\Users\Asteroide\Documents\IMG_2128.JPG
2012-02-19 11:15 - 2012-02-19 11:14 - 1334913 ____A C:\Users\Asteroide\Documents\IMG_2090.JPG
2012-02-19 11:15 - 2012-02-19 11:14 - 0764247 ____A C:\Users\Asteroide\Documents\IMG_2113.JPG
2012-02-19 11:14 - 2012-02-19 11:13 - 1216594 ____A C:\Users\Asteroide\Documents\IMG_2087.JPG
2012-02-19 11:14 - 2012-02-19 11:12 - 1738284 ____A C:\Users\Asteroide\Documents\IMG_2086.JPG
2012-02-19 11:11 - 2012-02-19 11:11 - 0077026 ____A C:\Users\Asteroide\Documents\page.jpg
2012-02-19 11:11 - 2012-02-19 11:10 - 0549489 ____A C:\Users\Asteroide\Documents\IMG_2190.JPG
2012-02-18 11:36 - 2012-02-18 11:36 - 0000000 ____D C:\Users\Asteroide\Documents\Remedy
2012-02-18 09:27 - 2012-02-18 09:21 - 34606349 ____A C:\Users\Asteroide\Downloads\Alan.Wake.v1.01.16.3292.Update-SKIDROW.rar
2012-02-18 06:35 - 2012-02-18 06:35 - 2922547 ____A (Tangysoft Ltd. ) C:\Users\Asteroide\Downloads\UseNeXT_freetrial_416143w.exe
2012-02-18 06:33 - 2012-02-18 06:33 - 0003440 ____A C:\Users\Asteroide\Downloads\7fb9fed7b09016898609315b10ca9aa3 (1).ccf
2012-02-18 06:33 - 2012-02-18 06:33 - 0003440 ____A C:\Users\Asteroide\Downloads\7624a84efbc060483a1434a8a53a8253 (1).ccf
2012-02-18 06:33 - 2012-02-18 06:33 - 0002768 ____A C:\Users\Asteroide\Downloads\ac74c6902909c08adbe1b91b9436e849.ccf
2012-02-18 06:30 - 2012-02-18 06:30 - 0003440 ____A C:\Users\Asteroide\Downloads\7fb9fed7b09016898609315b10ca9aa3.ccf
2012-02-18 06:28 - 2012-02-18 06:28 - 0003440 ____A C:\Users\Asteroide\Downloads\7624a84efbc060483a1434a8a53a8253.ccf
2012-02-18 04:59 - 2012-02-18 04:59 - 0039027 ____A C:\Users\Asteroide\Downloads\Alan Wake-SKIDROW[1337x.org].torrent
2012-02-18 04:11 - 2012-02-18 04:11 - 9707370 ____A C:\Users\Asteroide\Downloads\KP502_VDS_Spain-0520_Out.pdf
2012-02-17 12:41 - 2012-02-17 12:41 - 0001017 ____A C:\Users\Asteroide\Desktop\Orbit.lnk
2012-02-17 12:41 - 2012-02-17 12:41 - 0000174 ___SH C:\Users\Asteroide\Start Menu\Programs\Startup\desktop.ini
2012-02-17 12:41 - 2012-02-17 12:41 - 0000174 ___SH C:\Users\Asteroide\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\desktop.ini
2012-02-17 12:41 - 2012-02-17 12:41 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\ProgSense
2012-02-17 12:41 - 2012-02-17 12:41 - 0000000 ____D C:\Program Files (x86)\Orbitdownloader
2012-02-17 12:40 - 2012-02-17 12:40 - 4380272 ____A (www.orbitdownloader.com ) C:\Users\Asteroide\Downloads\OrbitSetup4.1.02.exe
2012-02-17 12:40 - 2012-02-17 12:40 - 4380272 ____A (www.orbitdownloader.com ) C:\Users\Asteroide\Downloads\OrbitSetup4.1.02 (1).exe
2012-02-17 12:35 - 2012-02-17 12:35 - 0001325 ____A C:\Users\Asteroide\Desktop\Install Orbit Downloader.lnk
2012-02-17 12:34 - 2012-02-17 12:34 - 0463080 ____A (CNET Download.com) C:\Users\Asteroide\Downloads\cnet2_OrbitDownloaderSetup_exe.exe
2012-02-17 03:48 - 2012-02-17 03:48 - 0028598 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x09.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32778.torrent
2012-02-17 03:48 - 2012-02-17 03:48 - 0028598 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x08.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32777.torrent
2012-02-16 10:48 - 2012-02-16 10:48 - 0028597 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x07.DVB.XviD.%5Bwww.DivxTotaL.com%5D.t32768.torrent
2012-02-16 10:48 - 2012-02-16 10:48 - 0028597 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x06.DVB.XviD.%5Bwww.DivxTotaL.com%5D.t32767.torrent
2012-02-16 10:48 - 2012-02-16 10:48 - 0028597 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x05.DVB.XviD.%5Bwww.DivxTotaL.com%5D.t32766.torrent
2012-02-16 04:41 - 2012-02-02 09:24 - 0011365 ____A C:\Windows\System32\lvcoinst.log
2012-02-16 04:41 - 2012-02-02 09:24 - 0000000 ____D C:\Program Files\Common Files\Logishrd
2012-02-15 11:42 - 2012-02-15 11:42 - 0028520 ____A C:\Users\Asteroide\Downloads\Dracula.de.Bram.Stoker.%5BSpanish-English.DVDRip%5D.%5BXviD%5D.%5Bwww.DivxTotal.com%5D.t17511.torrent
2012-02-15 06:39 - 2012-02-15 06:39 - 0028788 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x10.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32537.torrent
2012-02-14 22:27 - 2012-04-26 07:16 - 1031680 ____A (Microsoft Corporation) C:\Windows\System32\rdpcore.dll
2012-02-14 21:44 - 2012-04-26 07:16 - 0826368 ____A (Microsoft Corporation) C:\Windows\SysWOW64\rdpcore.dll
2012-02-14 20:47 - 2012-04-26 07:16 - 0204800 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\rdpwd.sys
2012-02-14 20:46 - 2012-04-26 07:16 - 0023552 ____A (Microsoft Corporation) C:\Windows\System32\Drivers\tdtcp.sys
2012-02-14 09:49 - 2012-02-14 09:49 - 0028523 ____A C:\Users\Asteroide\Downloads\The.Walking.Dead.2x08.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32752.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0029247 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x07.HDTV.XviD.www.divxTotaL.com%5D.t32249.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0029039 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x09.%5BReparado%5D.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32494.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0028768 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x08.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32406.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0028679 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x11.%5BReparado%5D.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32669.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0028590 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x04.HDTV.XviD.www.DivxTotaL.com%5D.t32070.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0028530 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32000.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0027620 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x13.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32743.torrent
2012-02-14 07:19 - 2012-02-14 07:19 - 0022648 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x12.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32673.torrent
2012-02-14 07:18 - 2012-02-14 07:18 - 0028688 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32186.torrent
2012-02-14 07:18 - 2012-02-14 07:18 - 0028607 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x05.HDTV.XviD.%5Bww.DivxTotaL.com%5D.t32128.torrent
2012-02-14 07:18 - 2012-02-14 07:18 - 0028540 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x09.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32753.torrent
2012-02-13 06:13 - 2012-02-08 09:43 - 0030720 ____A C:\Users\Asteroide\Documents\Alicia se aferró al pasamanos y sintió el frío metal en su palma.doc
2012-02-13 06:10 - 2012-02-13 06:10 - 0028518 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32737.torrent
2012-02-13 06:10 - 2012-02-13 06:10 - 0028518 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32670.torrent
2012-02-13 06:10 - 2012-02-13 06:10 - 0022113 ____A C:\Users\Asteroide\Downloads\Dexter.6x03.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32731.torrent
2012-02-13 06:10 - 2012-02-13 06:10 - 0022093 ____A C:\Users\Asteroide\Downloads\Dexter.6x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32558.torrent
2012-02-13 06:10 - 2012-02-13 06:10 - 0021933 ____A C:\Users\Asteroide\Downloads\Dexter.6x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32643.torrent
2012-02-12 13:28 - 2012-02-12 13:28 - 0014518 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32439 (1).torrent
2012-02-12 07:12 - 2012-02-12 07:12 - 0014498 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32440.torrent
2012-02-12 07:12 - 2012-02-12 07:12 - 0014498 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32440 (1).torrent
2012-02-12 07:11 - 2012-02-12 07:11 - 0014538 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x04.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32580.torrent
2012-02-12 07:11 - 2012-02-12 07:11 - 0014518 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32720.torrent
2012-02-12 07:11 - 2012-02-12 07:11 - 0014518 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x05.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32654.torrent
2012-02-12 07:11 - 2012-02-12 07:11 - 0014517 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x03.HDTV.XviD.www.DivxTotaL.com%5D.t32506.torrent
2012-02-11 09:24 - 2012-02-11 09:24 - 0028550 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x02.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t31933.torrent
2012-02-11 09:23 - 2012-02-11 09:23 - 0022530 ____A C:\Users\Asteroide\Downloads\American.Horror.Story.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t31864.torrent
2012-02-11 08:35 - 2012-02-11 08:35 - 0278282 ____A C:\Users\Asteroide\Downloads\CI0547075467.pdf
2012-02-11 08:35 - 2012-02-11 08:35 - 0076184 ____A C:\Users\Asteroide\Downloads\CI0547075467.zip
2012-02-11 07:33 - 2012-02-11 07:33 - 0014518 ____A C:\Users\Asteroide\Downloads\Suburgatory.1x01.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32439.torrent
2012-02-11 07:02 - 2012-02-11 07:02 - 0028540 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x06.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32524.torrent
2012-02-11 05:41 - 2012-02-11 05:41 - 0029033 ____A C:\Users\Asteroide\Downloads\Perros.de.Paja.%28www.DivxTotal.com%29.t12702.torrent
2012-02-09 22:18 - 2012-04-26 07:16 - 1541120 ____A (Microsoft Corporation) C:\Windows\System32\DWrite.dll
2012-02-09 22:17 - 2012-04-26 07:16 - 1837568 ____A (Microsoft Corporation) C:\Windows\System32\d3d10warp.dll
2012-02-09 22:17 - 2012-04-26 07:16 - 0902656 ____A (Microsoft Corporation) C:\Windows\System32\d2d1.dll
2012-02-09 22:17 - 2012-04-26 07:16 - 0320512 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1core.dll
2012-02-09 22:17 - 2012-04-26 07:16 - 0197120 ____A (Microsoft Corporation) C:\Windows\System32\d3d10_1.dll
2012-02-09 21:41 - 2012-04-26 07:16 - 1170944 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10warp.dll
2012-02-09 21:41 - 2012-04-26 07:16 - 1074176 ____A (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2012-02-09 21:41 - 2012-04-26 07:16 - 0739840 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d2d1.dll
2012-02-09 21:41 - 2012-04-26 07:16 - 0218624 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1core.dll
2012-02-09 21:41 - 2012-04-26 07:16 - 0161792 ____A (Microsoft Corporation) C:\Windows\SysWOW64\d3d10_1.dll
2012-02-09 11:18 - 2012-02-09 11:18 - 0028517 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x02.HDTV.XviD.www.DivxTotaL.com%5D.t32597.torrent
2012-02-09 11:18 - 2012-02-09 11:18 - 0028517 ____A C:\Users\Asteroide\Downloads\Los.Kennedy.1x01.HDTV.XviD.www.DivxTotaL.com%5D.t32596.torrent
2012-02-08 10:03 - 2012-02-07 10:47 - 0000000 ____D C:\Users\Asteroide\AppData\Local\Conduit
2012-02-08 10:03 - 2010-12-13 00:18 - 0000000 ____D C:\Users\Asteroide\AppData\LocalLow
2012-02-08 09:25 - 2012-02-08 09:25 - 0033888 ____A C:\Users\Asteroide\Downloads\Criadas.Y.Senyoras.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32662 (1).torrent
2012-02-07 17:22 - 2012-02-07 17:22 - 0016173 ____A C:\Users\Asteroide\Downloads\200041597.rar
2012-02-07 15:37 - 2012-02-07 15:37 - 0028520 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x08.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32681.torrent
2012-02-07 15:37 - 2012-02-07 15:37 - 0028520 ____A C:\Users\Asteroide\Downloads\XIII.La.Serie.1x07.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32613.torrent
2012-02-07 14:10 - 2012-02-07 14:10 - 0166400 ____A C:\Users\Asteroide\Desktop\Novela 1948.doc
2012-02-07 11:53 - 2012-02-07 11:53 - 0023040 ____A C:\Users\Asteroide\Downloads\No.Habra.Paz.Para.Los.Malvados.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32680.torrent
2012-02-07 11:53 - 2012-02-07 11:53 - 0000363 ____A C:\Users\Asteroide\Downloads\Criadas.Y.Senyoras.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32662.torrent
2012-02-07 11:45 - 2012-02-07 11:45 - 0007720 ____A C:\Users\Asteroide\Downloads\Alcatraz.S01E05.HDTV.XviD-LOL [AGENT][1337x.org].torrent
2012-02-07 11:36 - 2012-02-07 10:46 - 0000000 ____D C:\Users\Asteroide\AppData\Local\FLVService
2012-02-07 11:32 - 2012-02-07 10:46 - 0000000 ____D C:\Users\Asteroide\Documents\Freecorder
2012-02-07 11:07 - 2012-02-07 11:07 - 0155856 ____A C:\Users\Asteroide\Downloads\m.23-flv_download-9538c305acb9.zip
2012-02-07 11:07 - 2012-02-07 11:07 - 0032178 ____A C:\Users\Asteroide\Downloads\flv_download_1.3.14.crx
2012-02-07 10:47 - 2012-02-07 10:47 - 0000000 ____D C:\Program Files (x86)\Conduit
2012-02-07 10:46 - 2012-02-07 10:46 - 6652976 ____A (Applian Technologies Inc.) C:\Users\Asteroide\Downloads\FCTBSetup.exe
2012-02-06 14:17 - 2010-12-13 13:46 - 0004425 ____A C:\Windows\SysWOW64\k10stat.dat
2012-02-06 14:16 - 2012-02-06 14:16 - 0027595 ____A C:\Users\Asteroide\Downloads\270225.rar
2012-02-06 13:53 - 2012-02-06 13:53 - 0045442 ____A C:\Users\Asteroide\Downloads\269296.rar
2012-02-06 13:53 - 2012-02-06 13:53 - 0043445 ____A C:\Users\Asteroide\Downloads\269203.rar
2012-02-06 13:47 - 2012-02-06 13:47 - 0045023 ____A C:\Users\Asteroide\Downloads\268501.zip
2012-02-06 13:14 - 2012-02-06 13:14 - 0015359 ____A C:\Users\Asteroide\Downloads\In Time (2011)ss[1337x.org] (1).torrent
2012-02-06 11:53 - 2012-02-06 11:53 - 0015655 ____A C:\Users\Asteroide\Downloads\Real Steel[2011]DVDRip XviD-ExtraTorrentRG[1337x.org].torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0022069 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x03.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32451.torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0022049 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x02.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32450.torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0022049 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x01.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32449 (1).torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0021609 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x04.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32452.torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0019541 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x08.%5B%5BReparado%5D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32652 (1).torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0019329 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x07.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32466.torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0019329 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x06.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32460.torrent
2012-02-06 11:52 - 2012-02-06 11:52 - 0019309 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x05.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32459.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0022049 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x01.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32449.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0021229 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x11.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32491.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0019541 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x12.%5B%5BReparado%5D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32653.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0019541 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x08.%5B%5BReparado%5D.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32652.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0019409 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x10.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32479.torrent
2012-02-06 11:51 - 2012-02-06 11:51 - 0019329 ____A C:\Users\Asteroide\Downloads\High.School.Of.The.Dead.1x09.DVD.XviD.%5Bwww.DivxTotaL.com%5D.t32478.torrent
2012-02-05 10:40 - 2012-02-05 10:39 - 0023552 ____A C:\Users\Asteroide\Downloads\DetalleLlamadas.xls
2012-02-05 09:30 - 2009-07-13 18:34 - 0000842 ____A C:\Windows\win.ini
2012-02-05 07:54 - 2012-02-05 07:54 - 0033316 ____A C:\Users\Asteroide\Downloads\Novela 1948.zip
2012-02-04 11:55 - 2012-02-04 11:55 - 0032630 ____A C:\Users\Asteroide\Downloads\268822.rar
2012-02-04 11:35 - 2012-02-04 11:35 - 1076078 ____A C:\Users\Asteroide\Downloads\alta_dubai.zip
2012-02-04 11:10 - 2012-02-04 11:10 - 1777603 ____A C:\Users\Asteroide\Downloads\IN26135_driver_para_winVista.rar
2012-02-04 09:28 - 2012-02-04 09:26 - 0025730 ____A C:\Users\Asteroide\Downloads\271548.rar
2012-02-04 09:25 - 2012-02-04 09:25 - 0026588 ____A C:\Users\Asteroide\Downloads\271190.zip
2012-02-04 08:40 - 2012-02-04 08:40 - 0056800 ____A C:\Users\Asteroide\Downloads\Vampires.2010.FRENCH.DVDRiP.XViD-SLiM[L-S79].6454220.TPB.torrent
2012-02-04 08:27 - 2012-02-04 08:27 - 0019566 ____A C:\Users\Asteroide\Downloads\269350.rar
2012-02-04 08:22 - 2012-02-04 08:22 - 0013368 ____A C:\Users\Asteroide\Downloads\270081.rar
2012-02-04 08:19 - 2012-02-04 08:19 - 0035996 ____A C:\Users\Asteroide\Downloads\270159.zip
2012-02-04 08:18 - 2012-02-04 08:18 - 0017278 ____A C:\Users\Asteroide\Downloads\270111.rar
2012-02-04 08:15 - 2012-02-04 08:15 - 0042366 ____A C:\Users\Asteroide\Downloads\270502.rar
2012-02-04 08:08 - 2012-02-04 08:08 - 0015359 ____A C:\Users\Asteroide\Downloads\In Time (2011)ss[1337x.org].torrent
2012-02-04 08:04 - 2012-02-04 08:04 - 0026889 ____A C:\Users\Asteroide\Downloads\269970.rar
2012-02-04 07:22 - 2012-02-04 07:22 - 0014606 ____A C:\Users\Asteroide\Downloads\Vampires.2010.DVDrip.SBT.t19045.torrent
2012-02-04 07:15 - 2012-02-04 07:15 - 0028939 ____A C:\Users\Asteroide\Downloads\Perfect.Sense.2011.DVDRip.XviD-3LT0N[1337x.org].torrent
2012-02-04 07:11 - 2012-02-04 07:11 - 0057462 ____A C:\Users\Asteroide\Downloads\Answer.This.2010.DVDRip.XviD-NYDIC.6945089.TPB.torrent
2012-02-04 07:07 - 2012-02-04 07:07 - 0029635 ____A C:\Users\Asteroide\Downloads\The.Thing.2011.DVDRip.XviD-ALLiANCE.6963889.TPB.torrent
2012-02-04 07:03 - 2012-02-04 07:03 - 0015184 ____A C:\Users\Asteroide\Downloads\Anonymous[2011]BRRip XviD-ETRG[1337x.org].torrent
2012-02-04 06:48 - 2012-02-04 06:48 - 0015245 ____A C:\Users\Asteroide\Downloads\In_Time_2011_DVDRip_XviD-sD.6982025.TPB.torrent
2012-02-04 06:36 - 2012-02-04 06:36 - 0029418 ____A C:\Users\Asteroide\Downloads\L_Ultimo_Terrestre_2011_DVDRip_XviD-iLG.6878225.TPB.torrent
2012-02-02 20:16 - 2012-04-26 07:16 - 3143168 ____A (Microsoft Corporation) C:\Windows\System32\win32k.sys
2012-02-02 12:04 - 2012-02-02 12:04 - 0422206 ____A C:\Users\Asteroide\Downloads\AACACM.zip
2012-02-02 12:00 - 2012-02-02 12:00 - 0413062 ____A C:\Users\Asteroide\Downloads\vsfilter.2.39_nt.exe
2012-02-02 11:20 - 2012-02-02 11:20 - 0069120 ____A C:\Users\Asteroide\Downloads\ForceSkypeHDVideo.exe
2012-02-02 11:20 - 2012-02-02 11:20 - 0000237 ____A C:\user.js
2012-02-02 11:19 - 2012-02-02 11:19 - 0569864 ____A C:\Users\Asteroide\Downloads\FLVPlayerSetup.exe
2012-02-02 11:19 - 2012-02-02 11:19 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Babylon
2012-02-02 11:19 - 2012-02-02 11:19 - 0000000 ____D C:\Users\Asteroide\AppData\Local\Babylon
2012-02-02 11:19 - 2012-02-02 11:19 - 0000000 ____D C:\Users\All Users\Babylon
2012-02-02 11:19 - 2012-02-02 11:19 - 0000000 ____D C:\ProgramData\Babylon
2012-02-02 10:39 - 2012-02-02 10:39 - 15122648 ____A (Logitech Inc.) C:\Users\Asteroide\Downloads\LogitechVidSetup.exe
2012-02-02 09:28 - 2012-02-02 09:28 - 0000000 ____D C:\Users\Asteroide\AppData\Local\Logitech® Webcam Software
2012-02-02 09:25 - 2012-02-02 09:25 - 0000000 ____D C:\Users\Asteroide\AppData\Roaming\Leadertech
2012-02-02 09:25 - 2012-02-02 09:25 - 0000000 ____D C:\Users\All Users\LogiShrd
2012-02-02 09:25 - 2012-02-02 09:25 - 0000000 ____D C:\ProgramData\LogiShrd
2012-02-02 09:24 - 2012-02-02 09:24 - 0001594 ____A C:\Users\Public\Desktop\Logitech Webcam Software .lnk
2012-02-02 09:24 - 2012-02-02 09:24 - 0000000 ____D C:\Users\All Users\Logitech
2012-02-02 09:24 - 2012-02-02 09:24 - 0000000 ____D C:\ProgramData\Logitech
2012-02-02 09:22 - 2012-02-02 09:20 - 140002824 ____A (Logitech, Inc.) C:\Users\Asteroide\Downloads\lws230_full.exe
2012-02-02 05:29 - 2012-02-02 05:29 - 0021625 ____A C:\Users\Asteroide\Downloads\100041441.rar
2012-02-02 05:29 - 2012-02-02 05:29 - 0021625 ____A C:\Users\Asteroide\Downloads\100041441 (1).rar
2012-02-01 09:53 - 2012-02-01 09:53 - 0125372 ____A C:\Users\Asteroide\Downloads\Apollo 18 2011 720p BRRip x264 vice[1337x.org].torrent
2012-02-01 09:52 - 2012-02-01 09:52 - 0006906 ____A C:\Users\Asteroide\Downloads\Apollo.18.2011.720p.BRRip.x264.AAC-ViSiON.torrent[1337x.org].torrent
2012-02-01 09:49 - 2012-02-01 09:49 - 0048176 ____A C:\Users\Asteroide\Downloads\7191.srt
2012-02-01 09:49 - 2012-02-01 09:49 - 0014530 ____A C:\Users\Asteroide\Downloads\Alcatraz.1x04.HDTV.Xvid.Mp3.%5BSBT%5D.19327.torrent
2012-02-01 09:48 - 2012-02-01 09:48 - 0018525 ____A C:\Users\Asteroide\Downloads\The.Rum.Diary.2011.BRRip.XviD.AC3.SBT.t19293.torrent
2012-02-01 09:48 - 2012-02-01 09:48 - 0014714 ____A C:\Users\Asteroide\Downloads\A.Dangerous.Method.2011.DVDRip.SBT.t19331.torrent
2012-01-31 06:18 - 2012-01-25 13:24 - 0026112 ____A C:\Users\Asteroide\Documents\Estrella juega con un jueguete.doc
2012-01-31 05:36 - 2012-01-31 05:36 - 0027880 ____A C:\Users\Asteroide\Downloads\El.Mentalista.4x12.HDTV.XviD.%5Bwww.DivxTotaL.com%5D.t32602.torrent
2012-01-30 11:26 - 2012-01-30 11:26 - 0014885 ____A C:\Users\Asteroide\Downloads\La.Gran.Evasion.%28www.DIVXTotal.com%29.t11921.torrent
2012-01-29 12:24 - 2012-01-29 12:24 - 0000162 ___AH C:\Users\Asteroide\Documents\~$curidad.doc

========================= Known DLLs (Whitelisted) ============


========================= Bamital & volsnap Check ============

C:\Windows\System32\winlogon.exe => MD5 is legit
C:\Windows\System32\wininit.exe => MD5 is legit
C:\Windows\SysWOW64\wininit.exe => MD5 is legit
C:\Windows\explorer.exe => MD5 is legit
C:\Windows\SysWOW64\explorer.exe => MD5 is legit
C:\Windows\System32\svchost.exe => MD5 is legit
C:\Windows\SysWOW64\svchost.exe => MD5 is legit
C:\Windows\System32\User32.dll => MD5 is legit
C:\Windows\SysWOW64\User32.dll => MD5 is legit
C:\Windows\System32\Drivers\volsnap.sys => MD5 is legit

========================= Memory info ======================

Percentage of memory in use: 12%
Total physical RAM: 4095.3 MB
Available physical RAM: 3569.93 MB
Total Pagefile: 4093.45 MB
Available Pagefile: 3564.69 MB
Total Virtual: 8192 MB
Available Virtual: 8191.9 MB

======================= Partitions =========================

1 Drive c: () (Fixed) (Total:270.21 GB) (Free:109.96 GB) NTFS
2 Drive d: () (Fixed) (Total:195.45 GB) (Free:134.66 GB) NTFS
3 Drive f: () (Removable) (Total:7.44 GB) (Free:4.07 GB) FAT32 ==>[System with boot components (obtained from reading drive)]
4 Drive x: (Boot) (Fixed) (Total:0.03 GB) (Free:0.03 GB) NTFS
5 Drive y: (System Reserved) (Fixed) (Total:0.1 GB) (Free:0.08 GB) NTFS ==>[System with boot components (obtained from reading drive)]

Disk ### Status Size Free Dyn Gpt
-------- ------------- ------- ------- --- ---
Disk 0 Online 465 GB 0 B
Disk 1 Online 7632 MB 0 B

Partitions of Disk 0:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 100 MB 1024 KB
Partition 2 Primary 270 GB 101 MB
Partition 0 Extended 195 GB 270 GB
Partition 3 Logical 195 GB 270 GB

======================================================================================================

Disk: 0
Partition 1
Type : 07
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 0 Y System Rese NTFS Partition 100 MB Healthy

======================================================================================================

Disk: 0
Partition 2
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 1 C NTFS Partition 270 GB Healthy

======================================================================================================

Disk: 0
Partition 3
Type : 07
Hidden: No
Active: No

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 2 D NTFS Partition 195 GB Healthy

======================================================================================================

Partitions of Disk 1:
===============

Partition ### Type Size Offset
------------- ---------------- ------- -------
Partition 1 Primary 7631 MB 31 KB

======================================================================================================

Disk: 1
Partition 1
Type : 0C
Hidden: No
Active: Yes

Volume ### Ltr Label Fs Type Size Status Info
---------- --- ----------- ----- ---------- ------- --------- --------
* Volume 3 F FAT32 Removable 7631 MB Healthy

======================================================================================================

==========================================================

Last Boot: 2012-04-19 05:35

======================= End Of Log ==========================

Edited by Asteroide, 27 April 2012 - 01:58 PM.


BC AdBot (Login to Remove)

 


#2 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 01:52 PM

Hi Asteroide,

Welcome to the forum.

Please no need to attach the logs unless it is requested. Also please just copy and paste the log instead of putting them in the codebox.

I see the computer is infected. We can fix that. But before doing that please tell me if you altered the log:

Tcpip\Parameters: [DhcpNameServer] 6x.81.29.254 6x.42.230.24



#3 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 01:57 PM

Hi, thanks for fast response (:
I delete the log right now and put it w/o quotes.
And yes, I changed one number (because I didn't want to show my ip to world wide :S). I reverse the change too right now.

Edit: Done.

Edited by Asteroide, 27 April 2012 - 02:20 PM.


#4 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 02:07 PM

Thank you.

I have one more request. Please don't quote my whole post. Nobody else can post anything to this thread and I know what I ask.

I advise you not to run p2p programs as long as we are not done. We don't want the system to get reinfected. There could be malware files in Downloads folder. Running them might reinfect the system or infect other users.

Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below. (To do this highlight the contents of the box, right click on it and select copy. Right-click in the open notepad and select Paste). Save it on the flashdrive as fixlist.txt

start
2 WNCPKT; C:\Windows\System32\SNPSTD3.dll [6656 2009-07-13] (Oak Technology Inc.)
C:\Windows\System32\SNPSTD3.dll
SubSystems: [Windows] ==> ZeroAccess
NETSVC: WNCPKT
cmd: del /a/f/q C:\Windows\Tasks\At*.job
end

Now please enter System Recovery Options and select Command Prompt.

Run FRST and press the Fix button just once and wait.
The tool will make a log on the flashdrive (Fixlog.txt) please post it to your reply.

Also restart, let it boot normally and tell me how it went.

#5 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 02:22 PM

Haha, I was posting from the TV. Now I'm back to the PC (:

Here's the log you asked.

Fix result of Farbar Recovery Scan Tool (FRST written by farbar) Version: 27-04-2012
Ran by SYSTEM at 2012-04-27 21:15:21 R:1
Running from F:\

==============================================

WNCPKT service deleted successfully.
C:\Windows\System32\SNPSTD3.dll moved successfully.
HKEY_LOCAL_MACHINE\System\ControlSet001\Control\Session Manager\SubSystems\\Windows Value was restored.
HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\SvcHost\\netsvcs WNCPKT Deleted successfully.

========= del /a/f/q C:\Windows\Tasks\At*.job =========


========= End of CMD: =========


==== End of Fixlog ====

#6 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 02:27 PM

Great. :thumbup2:

We nee to restore winsock entries altered by the malware.

Please download MiniRegTool64.zip and unzip it.
  • Run the tool.
  • Copy and paste the following into the edit box:

    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5]
    [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64]

  • Check Export keys radio button.
  • Press Go button and post the result.


#7 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 02:32 PM

Windows Registry Editor Version 5.00

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5]
"Num_Catalog_Entries"=dword:00000006
"Serial_Access_Num"=dword:00000030
"Num_Catalog_Entries64"=dword:00000006

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000001]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\nlasvc.dll,-1000"
"ProviderId"=hex:3a,24,42,66,a8,3b,a6,4a,ba,a5,2e,0b,d7,1f,dd,83
"SupportedNameSpace"=dword:0000000f
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000002]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\wshtcpip.dll,-60103"
"ProviderId"=hex:40,9d,05,22,9e,7e,cf,11,ae,5a,00,aa,00,a7,11,2b
"SupportedNameSpace"=dword:0000000c
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000003]
"LibraryPath"="%SystemRoot%\\System32\\winrnr.dll"
"DisplayString"="NTDS"
"ProviderId"=hex:ee,37,26,3b,80,e5,cf,11,a5,55,00,c0,4f,d8,d4,ac
"SupportedNameSpace"=dword:00000020
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000004]
"LibraryPath"="%SystemRoot%\\system32\\napinsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\napinsp.dll,-1000"
"ProviderId"=hex:a2,cb,4a,96,bc,b2,eb,40,8c,6a,a6,db,40,16,1c,ae
"SupportedNameSpace"=dword:00000025
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000005]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1000"
"ProviderId"=hex:ce,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000027
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries\000000000006]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1001"
"ProviderId"=hex:cd,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000026
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\nlasvc.dll,-1000"
"ProviderId"=hex:3a,24,42,66,a8,3b,a6,4a,ba,a5,2e,0b,d7,1f,dd,83
"SupportedNameSpace"=dword:0000000f
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\wshtcpip.dll,-60103"
"ProviderId"=hex:40,9d,05,22,9e,7e,cf,11,ae,5a,00,aa,00,a7,11,2b
"SupportedNameSpace"=dword:0000000c
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003]
"LibraryPath"="%SystemRoot%\\System32\\winrnr.dll"
"DisplayString"="NTDS"
"ProviderId"=hex:ee,37,26,3b,80,e5,cf,11,a5,55,00,c0,4f,d8,d4,ac
"SupportedNameSpace"=dword:00000020
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004]
"LibraryPath"="%SystemRoot%\\system32\\napinsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\napinsp.dll,-1000"
"ProviderId"=hex:a2,cb,4a,96,bc,b2,eb,40,8c,6a,a6,db,40,16,1c,ae
"SupportedNameSpace"=dword:00000025
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1000"
"ProviderId"=hex:ce,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000027
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1001"
"ProviderId"=hex:cd,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000026
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64]

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000001]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\nlasvc.dll,-1000"
"ProviderId"=hex:3a,24,42,66,a8,3b,a6,4a,ba,a5,2e,0b,d7,1f,dd,83
"SupportedNameSpace"=dword:0000000f
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000002]
"LibraryPath"="mswsock.dll"
"DisplayString"="@%SystemRoot%\\system32\\wshtcpip.dll,-60103"
"ProviderId"=hex:40,9d,05,22,9e,7e,cf,11,ae,5a,00,aa,00,a7,11,2b
"SupportedNameSpace"=dword:0000000c
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000003]
"LibraryPath"="%SystemRoot%\\System32\\winrnr.dll"
"DisplayString"="NTDS"
"ProviderId"=hex:ee,37,26,3b,80,e5,cf,11,a5,55,00,c0,4f,d8,d4,ac
"SupportedNameSpace"=dword:00000020
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000000
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000004]
"LibraryPath"="%SystemRoot%\\system32\\napinsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\napinsp.dll,-1000"
"ProviderId"=hex:a2,cb,4a,96,bc,b2,eb,40,8c,6a,a6,db,40,16,1c,ae
"SupportedNameSpace"=dword:00000025
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000005]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1000"
"ProviderId"=hex:ce,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000027
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\services\WinSock2\Parameters\NameSpace_Catalog5\Catalog_Entries64\000000000006]
"LibraryPath"="%SystemRoot%\\system32\\pnrpnsp.dll"
"DisplayString"="@%SystemRoot%\\system32\\pnrpnsp.dll,-1001"
"ProviderId"=hex:cd,89,fe,03,6d,76,76,49,b9,c1,bb,9b,c4,2c,7b,4d
"SupportedNameSpace"=dword:00000026
"Enabled"=dword:00000001
"Version"=dword:00000000
"StoresServiceClassInfo"=dword:00000001
"ProviderInfo"=hex:

#8 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 02:42 PM

  • Please download Attached File  Fix-64.reg   881bytes   7 downloads
    Double-click and confirm the prompt.
  • Important: Restart the computer.
  • Please download Attached File  fix.bat   553bytes   4 downloads
    Important: Right-click and select "Run as administrator".
    A command window and then a log file (log.txt) will open. Please post it to your reply.
  • Restart the computer.


#9 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 02:47 PM

Start

El cat logo Winsock se restableci¢ correctamente. (It says that cat logo winsock restablished correctly)
Debe reiniciar el equipo para completar el restablecimiento.

C:\Windows\system64 found.
C:\Windows\system64 deleted successfully.
No se encuentra el archivo (file not found)
End

Edited by Asteroide, 27 April 2012 - 02:50 PM.


#10 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 02:56 PM

Well done.

No we check for any leftovers.

Please download Malwarebytes' Anti-Malware from one of these locations:
malwarebytes.org
majorgeeks.com
  • Double Click mbam-setup.exe to install the application.
  • Make sure a checkmark is placed next to Update Malwarebytes' Anti-Malware and Launch Malwarebytes' Anti-Malware, then click Finish.
  • If an update is found, it will download and install the latest version.
  • Once the program has loaded, select "Perform Quick Scan", then click Scan.
  • The scan may take some time to finish,so please be patient.
  • When the scan is complete, click OK, then Show Results to view the results.
  • Make sure that everything is checked, and click Remove Selected.
  • When disinfection is completed, a log will open in Notepad and you may be prompted to Restart.(See Extra Note)
  • The log is automatically saved by MBAM and can be viewed by clicking the Logs tab in MBAM.
  • Copy&Paste the MBAM log.
Extra Note:
If MBAM encounters a file that is difficult to remove,you will be presented with 1 of 2 prompts,click OK to either and let MBAM proceed with the disinfection process,if asked to restart the computer,please do so immediately.


#11 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 03:24 PM

Malwarebytes Anti-Malware (Versión de Prueba) 1.61.0.1400
www.malwarebytes.org

Versión de la Base de Datos: v2012.04.27.09

Windows 7 x64 NTFS
Internet Explorer 8.0.7600.16385
Asteroide :: WINDOWS [administrador]

Protección: Habilitado

27/04/2012 22:15:49
mbam-log-2012-04-27 (22-15-49).txt

Tipos de Análisis: Análisis Rápido
Opciones de análisis activado: Memoria | Inicio | Registro | Sistema de archivos | Heurística/Extra | Heurística/Shuriken | PUP | PUM
Opciones de análisis desactivados: P2P
Objetos examinados: 199924
Tiempo transcurrido: 3 minuto(s), 51 segundo(s)

Procesos en Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Módulos de Memoria Detectados: 0
(No se han detectado elementos maliciosos)

Claves del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Valores del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Elementos de Datos del Registro Detectados: 0
(No se han detectado elementos maliciosos)

Carpetas Detectadas: 0
(No se han detectado elementos maliciosos)

Archivos Detectados: 6
C:\Users\Asteroide\Desktop\RemoveWAT.exe (HackTool.Wpakill) -> No se tomaron medidas.
C:\Users\Asteroide\Downloads\oi_fl.exe (PUP.BundleInstaller.OI) -> No se tomaron medidas.
C:\Windows\Temp\aclspq\setup.exe (Trojan.Downloader.dpt) -> En cuarentena y eliminado con éxito.
C:\Users\Asteroide\Downloads\FLVPlayerSetup.exe (Adware.Agent) -> En cuarentena y eliminado con éxito.
C:\Users\Asteroide\Downloads\R225.exe (HackTool.Wpakill) -> En cuarentena y eliminado con éxito.
C:\Users\Asteroide\Downloads\VideoConverterSetup.exe (Adware.Agent) -> En cuarentena y eliminado con éxito.

fin)

#12 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 04:00 PM

C:\Users\Asteroide\Downloads\oi_fl.exe (PUP.BundleInstaller.OI) -> No se tomaron medidas.

Didn't you want to remove this one?

Let's take a look at other things.

#13 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 04:17 PM

Finally I deteled it)
Is this all?

I wanna thank you so much your time and help.

Bedankt?)

#14 Farbar

Farbar

    Just Curious


  • Security Developer
  • 21,696 posts
  • OFFLINE
  •  
  • Gender:Male
  • Location:The Netherlands
  • Local time:11:46 PM

Posted 27 April 2012 - 04:21 PM

I just wanted to check a few important thing which might help prevent the problem.

Please download OTL by OldTimer.
  • Save it to your desktop.
  • Double click on the OTL icon on your desktop.
  • Check the "Scan All Users" checkbox.
  • Check the "Standard Output".
  • Click Run Scan button.
  • Two reports will open:
    • OTL.txt <-- Will be opened
    • Extra.txt <-- Will be minimized
  • Copy and paste OTL.txt and attach Extra.txt to your reply.


#15 Asteroide

Asteroide
  • Topic Starter

  • Members
  • 8 posts
  • OFFLINE
  •  
  • Local time:10:46 PM

Posted 27 April 2012 - 04:34 PM

OTL logfile created on: 27/04/2012 23:27:44 - Run 1
OTL by OldTimer - Version 3.2.42.1 Folder = C:\Downloads
64bit- Ultimate Edition (Version = 6.1.7600) - Type = NTWorkstation
Internet Explorer (Version = 8.0.7600.16385)
Locale: 00000403 | Country: Espanya | Language: CAT | Date Format: dd/MM/yyyy

4,00 Gb Total Physical Memory | 2,32 Gb Available Physical Memory | 58,02% Memory free
4,01 Gb Paging File | 2,10 Gb Available in Paging File | 52,26% Paging File free
Paging file location(s): c:\pagefile.sys 16 1200 [binary data]

%SystemDrive% = C: | %SystemRoot% = C:\Windows | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 270,21 Gb Total Space | 109,90 Gb Free Space | 40,67% Space Free | Partition Type: NTFS
Drive D: | 195,45 Gb Total Space | 134,66 Gb Free Space | 68,90% Space Free | Partition Type: NTFS
Drive F: | 100,00 Mb Total Space | 84,05 Mb Free Space | 84,05% Space Free | Partition Type: NTFS

Computer Name: WINDOWS | User Name: Asteroide | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: All users | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 30 Days

========== Processes (SafeList) ==========

PRC - [2012/04/27 23:27:06 | 000,595,968 | ---- | M] (OldTimer Tools) -- C:\Downloads\OTL.exe
PRC - [2012/04/10 14:22:48 | 000,385,376 | ---- | M] (BlueStack Systems, Inc.) -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
PRC - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe
PRC - [2012/04/04 15:56:38 | 000,981,680 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbam.exe
PRC - [2012/04/04 15:56:38 | 000,462,408 | ---- | M] (Malwarebytes Corporation) -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe
PRC - [2012/01/18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe
PRC - [2011/11/29 11:50:03 | 002,916,736 | ---- | M] (TeamViewer GmbH) -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe
PRC - [2011/08/15 13:59:16 | 000,890,880 | ---- | M] (Ray Adams) -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe
PRC - [2011/06/28 11:03:22 | 001,843,000 | ---- | M] (Orbitdownloader.com) -- C:\Program Files (x86)\Orbitdownloader\orbitdm.exe
PRC - [2011/06/27 11:05:26 | 000,557,056 | ---- | M] (Orbitdownloader.com) -- C:\Program Files (x86)\Orbitdownloader\orbitnet.exe
PRC - [2010/05/04 18:02:52 | 000,162,304 | ---- | M] () -- C:\K10\K10STAT.exe
PRC - [2009/09/16 13:52:29 | 005,674,352 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\MSN Messenger\msnmsgr.exe
PRC - [2007/01/19 12:54:14 | 000,097,136 | ---- | M] (Microsoft Corporation) -- C:\Program Files (x86)\MSN Messenger\usnsvc.exe
PRC - [2000/09/26 18:06:14 | 000,638,976 | ---- | M] (Espasa Calpe, S.A.) -- C:\Program Files (x86)\BSELF\BSELF.EXE


========== Modules (No Company Name) ==========

MOD - [2012/04/12 09:37:34 | 000,444,400 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
MOD - [2012/04/12 09:37:33 | 003,915,248 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll
MOD - [2012/04/12 09:36:08 | 000,122,880 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\avutil-51.dll
MOD - [2012/04/12 09:36:06 | 000,220,672 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\avformat-53.dll
MOD - [2012/04/12 09:36:05 | 001,747,456 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\avcodec-53.dll
MOD - [2012/04/12 08:51:55 | 008,743,584 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
MOD - [2012/04/12 08:51:55 | 008,743,584 | ---- | M] () -- C:\Users\ASTERO~1\AppData\Local\Google\Chrome\APPLIC~1\18.0.1025.162\gcswf32.dll
MOD - [2011/06/28 11:01:38 | 000,397,312 | ---- | M] () -- C:\Program Files (x86)\Orbitdownloader\wtlctrl.dll
MOD - [2011/02/19 23:14:48 | 000,187,904 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\raphook.dll
MOD - [2010/05/04 18:02:52 | 000,162,304 | ---- | M] () -- C:\K10\K10STAT.exe
MOD - [2008/04/17 18:45:42 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\osd_cpuload.dll
MOD - [2008/04/11 18:33:18 | 000,020,480 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_intelcpu.dll
MOD - [2008/04/09 18:08:46 | 000,016,896 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_amdcore.dll
MOD - [2007/09/14 17:35:34 | 000,020,480 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_cpuload.dll
MOD - [2007/03/07 14:26:34 | 000,077,824 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\support.dll
MOD - [2007/03/07 14:25:26 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\kbdhook.dll
MOD - [2007/01/03 22:09:46 | 000,017,408 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_xvlt.dll
MOD - [2006/12/26 19:53:28 | 000,019,456 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mg_hdddtemp.dll
MOD - [2006/12/25 11:02:24 | 000,024,576 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\mongraphsexample.dll
MOD - [2005/11/29 19:38:20 | 000,023,552 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\hddtemp.dll
MOD - [2005/11/29 19:34:38 | 000,028,672 | ---- | M] () -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\plugins\pciset.dll


========== Win32 Services (SafeList) ==========

SRV:64bit: - [2011/10/12 22:09:44 | 000,204,288 | ---- | M] (AMD) [Auto | Running] -- C:\Windows\SysNative\atiesrxx.exe -- (AMD External Events Utility)
SRV:64bit: - [2009/07/14 03:40:01 | 000,193,536 | ---- | M] (Microsoft Corporation) [On_Demand | Stopped] -- C:\Windows\SysNative\appmgmts.dll -- (AppMgmt)
SRV - [2012/04/10 14:22:48 | 000,385,376 | ---- | M] (BlueStack Systems, Inc.) [Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe -- (BstHdLogRotatorSvc)
SRV - [2012/04/10 14:21:56 | 000,401,760 | ---- | M] (BlueStack Systems, Inc.) [On_Demand | Stopped] -- C:\Program Files (x86)\BlueStacks\HD-Service.exe -- (BstHdAndroidSvc)
SRV - [2012/04/04 15:56:40 | 000,654,408 | ---- | M] (Malwarebytes Corporation) [Auto | Running] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamservice.exe -- (MBAMService)
SRV - [2012/02/15 14:30:18 | 000,158,856 | R--- | M] (Skype Technologies) [Auto | Stopped] -- C:\Program Files (x86)\Skype\Updater\Updater.exe -- (SkypeUpdate)
SRV - [2012/01/18 08:44:52 | 000,450,848 | ---- | M] (Logitech Inc.) [Auto | Running] -- C:\Program Files (x86)\Common Files\LogiShrd\LVMVFM\UMVPFSrv.exe -- (UMVPFSrv)
SRV - [2011/11/29 11:50:03 | 002,916,736 | ---- | M] (TeamViewer GmbH) [Auto | Running] -- C:\Program Files (x86)\TeamViewer\Version7\TeamViewer_Service.exe -- (TeamViewer7)
SRV - [2011/07/27 23:44:44 | 000,411,432 | ---- | M] (Valve Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe -- (Steam Client Service)
SRV - [2011/06/06 18:36:00 | 004,005,936 | ---- | M] (INCA Internet Co., Ltd.) [On_Demand | Stopped] -- C:\Windows\SysWOW64\GameMon.des -- (npggsvc)
SRV - [2010/12/14 16:17:12 | 000,128,928 | ---- | M] (Futuremark Corporation) [On_Demand | Stopped] -- C:\Program Files (x86)\Common Files\Futuremark Shared\Futuremark SystemInfo\FMSISvc.exe -- (Futuremark SystemInfo Service)
SRV - [2010/03/18 14:16:28 | 000,130,384 | ---- | M] (Microsoft Corporation) [Auto | Stopped] -- C:\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe -- (clr_optimization_v4.0.30319_32)
SRV - [2009/06/10 23:23:09 | 000,066,384 | ---- | M] (Microsoft Corporation) [Disabled | Stopped] -- C:\Windows\Microsoft.NET\Framework\v2.0.50727\mscorsvw.exe -- (clr_optimization_v2.0.50727_32)
SRV - [2007/01/19 12:54:14 | 000,097,136 | ---- | M] (Microsoft Corporation) [On_Demand | Running] -- C:\Program Files (x86)\MSN Messenger\usnsvc.exe -- (usnjsvc)


========== Driver Services (SafeList) ==========

DRV:64bit: - [2012/04/04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) [File_System | On_Demand | Running] -- C:\Windows\SysNative\drivers\mbam.sys -- (MBAMProtector)
DRV:64bit: - [2012/03/01 08:54:38 | 000,022,896 | ---- | M] (Microsoft Corporation) [Recognizer | Boot | Unknown] -- C:\Windows\SysNative\drivers\fs_rec.sys -- (Fs_Rec)
DRV:64bit: - [2012/01/18 08:44:36 | 004,865,568 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvuvc64.sys -- (LVUVC64) Logitech HD Webcam C270(UVC)
DRV:64bit: - [2012/01/18 08:44:28 | 000,351,136 | ---- | M] (Logitech Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\lvrs64.sys -- (LVRS64)
DRV:64bit: - [2011/10/12 22:56:18 | 010,207,232 | ---- | M] (ATI Technologies Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmdag.sys -- (amdkmdag)
DRV:64bit: - [2011/10/12 21:30:42 | 000,317,952 | ---- | M] (Advanced Micro Devices, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\atikmpag.sys -- (amdkmdap)
DRV:64bit: - [2011/04/22 12:19:38 | 000,314,016 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\atksgt.sys -- (atksgt)
DRV:64bit: - [2011/04/22 12:19:38 | 000,043,680 | ---- | M] () [Kernel | Auto | Running] -- C:\Windows\SysNative\drivers\lirsgt.sys -- (lirsgt)
DRV:64bit: - [2010/12/14 08:25:16 | 000,834,544 | ---- | M] () [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\sptd.sys -- (sptd)
DRV:64bit: - [2010/06/17 11:15:36 | 000,016,440 | ---- | M] (Advanced Micro Devices Inc.) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\AtiPcie64.sys -- (AtiPcie) AMD PCI Express (3GIO)
DRV:64bit: - [2009/09/17 20:04:18 | 001,250,816 | ---- | M] (VIA Technologies, Inc.) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\viahduaa.sys -- (VIAHdAudAddService)
DRV:64bit: - [2009/07/30 20:58:42 | 000,236,544 | ---- | M] (Realtek ) [Kernel | On_Demand | Running] -- C:\Windows\SysNative\drivers\Rt64win7.sys -- (RTL8167)
DRV:64bit: - [2009/07/14 03:52:21 | 000,106,576 | ---- | M] (Advanced Micro Devices) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsata.sys -- (amdsata)
DRV:64bit: - [2009/07/14 03:52:21 | 000,028,752 | ---- | M] (Advanced Micro Devices) [Kernel | Boot | Running] -- C:\Windows\SysNative\drivers\amdxata.sys -- (amdxata)
DRV:64bit: - [2009/07/14 03:52:20 | 000,194,128 | ---- | M] (AMD Technologies Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\amdsbs.sys -- (amdsbs)
DRV:64bit: - [2009/07/14 03:48:04 | 000,065,600 | ---- | M] (LSI Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\lsi_sas2.sys -- (LSI_SAS2)
DRV:64bit: - [2009/07/14 03:47:48 | 000,077,888 | ---- | M] (Hewlett-Packard Company) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\HpSAMD.sys -- (HpSAMD)
DRV:64bit: - [2009/07/14 03:45:55 | 000,024,656 | ---- | M] (Promise Technology) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\stexstor.sys -- (stexstor)
DRV:64bit: - [2009/06/30 11:37:16 | 000,033,800 | ---- | M] (Panda Security, S.L.) [File_System | Boot | Running] -- C:\Windows\SysNative\drivers\pavboot64.sys -- (pavboot)
DRV:64bit: - [2009/06/10 22:34:33 | 003,286,016 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\evbda.sys -- (ebdrv)
DRV:64bit: - [2009/06/10 22:34:28 | 000,468,480 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\bxvbda.sys -- (b06bdrv)
DRV:64bit: - [2009/06/10 22:34:23 | 000,270,848 | ---- | M] (Broadcom Corporation) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\b57nd60a.sys -- (b57nd60a)
DRV:64bit: - [2009/06/10 22:31:59 | 000,031,232 | ---- | M] (Hauppauge Computer Works, Inc.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysNative\drivers\hcw85cir.sys -- (hcw85cir)
DRV - [2012/04/10 14:22:40 | 000,075,104 | ---- | M] (BlueStack Systems) [Kernel | Auto | Running] -- C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys -- (BstHdDrv)
DRV - [2011/08/15 13:59:52 | 000,024,736 | ---- | M] () [Kernel | System | Stopped] -- C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray64.sys -- (atitray)
DRV - [2009/07/14 03:19:10 | 000,019,008 | ---- | M] (Microsoft Corporation) [File_System | On_Demand | Stopped] -- C:\Windows\SysWOW64\drivers\wimmount.sys -- (WIMMount)
DRV - [2008/07/26 23:30:36 | 000,014,544 | ---- | M] (OpenLibSys.org) [Kernel | On_Demand | Running] -- C:\K10\WinRing0x64.sys -- (WinRing0_1_2_0)
DRV - [2005/01/02 05:43:08 | 000,004,682 | ---- | M] (INCA Internet Co., Ltd.) [Kernel | On_Demand | Stopped] -- C:\Windows\SysWOW64\npptNT2.sys -- (NPPTNT2)


========== Standard Registry (SafeList) ==========


========== Internet Explorer ==========

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://es.woofi.info
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://es.woofi.info
IE - HKLM\..\SearchScopes,DefaultScope = {61119D56-CACE-4575-9A62-2BD2CBAF6F67}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\..\SearchScopes\{61119D56-CACE-4575-9A62-2BD2CBAF6F67}: "URL" = http://es.woofi.info
IE - HKLM\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933


IE - HKU\.DEFAULT\..\SearchScopes,DefaultScope = {61119D56-CACE-4575-9A62-2BD2CBAF6F67}
IE - HKU\.DEFAULT\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

IE - HKU\S-1-5-18\..\SearchScopes,DefaultScope = {61119D56-CACE-4575-9A62-2BD2CBAF6F67}
IE - HKU\S-1-5-18\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0



IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Search Page = http://es.woofi.info
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = http://search.babylon.com/?AF=100482&babsrc=HP_ss&mntrId=b804d0dd0000000000000025220766bb
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = http://es.msn.com/
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = ca
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 15 1C BF F4 FD 9A CB 01 [binary data]
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\URLSearchHook: {1392b8d2-5c05-419f-a8f6-b9f15a596612} - No CLSID value found
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\SearchScopes,DefaultScope = {0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = http://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IE8SRC
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\SearchScopes\{0ECDF796-C2DC-4d79-A620-CCE0C0A66CC9}: "URL" = http://search.babylon.com/?q={searchTerms}&AF=100482&babsrc=SP_ss&mntrId=b804d0dd0000000000000025220766bb
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\SearchScopes\{61119D56-CACE-4575-9A62-2BD2CBAF6F67}: "URL" = http://es.woofi.info
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\SearchScopes\{afdbddaa-5d3f-42ee-b79c-185a7020515b}: "URL" = http://search.conduit.com/ResultsExt.aspx?q={searchTerms}&SearchSource=4&ctid=CT1060933
IE - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0


========== FireFox ==========

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll ()
FF - HKLM\Software\MozillaPlugins\@microsoft.com/GENUINE: disabled File not found
FF - HKLM\Software\MozillaPlugins\@pandasecurity.com/activescan: C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll (Panda Security, S.L.)
FF - HKLM\Software\MozillaPlugins\@qq.com/npqscall,version=1.0.0: %commonprogramfiles%\tencent\NPQSCALL\npqscall.dll File not found
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Users\Asteroide\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)
FF - HKCU\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Users\Asteroide\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll (Google Inc.)


[2012/02/20 16:06:25 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asteroide\AppData\Roaming\mozilla\Firefox\Profiles\duxnr607.default\extensions
[2010/12/24 10:17:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Asteroide\AppData\Roaming\mozilla\Firefox\Profiles\duxnr607.default\extensions\battlefieldplay4free@ea.com
[2012/02/02 21:20:06 | 000,000,000 | ---D | M] (Babylon) -- C:\Users\Asteroide\AppData\Roaming\mozilla\Firefox\Profiles\duxnr607.default\extensions\ffxtlbr@babylon.com

========== Chrome ==========

CHR - default_search_provider: Google (Enabled)
CHR - default_search_provider: search_url = {google:baseURL}search?{google:RLZ}{google:acceptedSuggestion}{google:originalQueryForSuggestion}{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}sourceid=chrome&ie={inputEncoding}&q={searchTerms}
CHR - default_search_provider: suggest_url = {google:baseSuggestURL}search?{google:searchFieldtrialParameter}{google:instantFieldTrialGroupParameter}client=chrome&hl={language}&q={searchTerms}
CHR - plugin: Remoting Viewer (Enabled) = internal-remoting-viewer
CHR - plugin: Native Client (Enabled) = C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\ppGoogleNaClPluginChrome.dll
CHR - plugin: Chrome PDF Viewer (Enabled) = C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\pdf.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\18.0.1025.162\gcswf32.dll
CHR - plugin: Shockwave Flash (Disabled) = C:\Users\Asteroide\AppData\Local\Google\Chrome\User Data\PepperFlash\11.1.31.203\pepflashplayer.dll
CHR - plugin: Shockwave Flash (Enabled) = C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll
CHR - plugin: Orbit Downloader (Enabled) = C:\Users\Asteroide\AppData\Local\Google\Chrome\Application\plugins\nporbit.dll
CHR - plugin: Panda ActiveScan 2.0 (Enabled) = C:\Program Files (x86)\Panda Security\ActiveScan 2.0\npwrapper.dll
CHR - plugin: Google Update (Enabled) = C:\Users\Asteroide\AppData\Local\Google\Update\1.3.21.111\npGoogleUpdate3.dll
CHR - Extension: YouTube = C:\Users\Asteroide\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.5_0\
CHR - Extension: B\u00FAsqueda de Google = C:\Users\Asteroide\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf\0.0.0.19_0\
CHR - Extension: Gmail = C:\Users\Asteroide\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia\7_0\

Hosts file not found
O2 - BHO: (Octh Class) - {000123B4-9B42-4900-B3F7-F4B073EFC214} - C:\Program Files (x86)\Orbitdownloader\orbitcth.dll (Orbitdownloader.com)
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - No CLSID value found.
O2 - BHO: (no name) - {9030D464-4C02-4ABF-8ECC-5164760863C6} - No CLSID value found.
O3 - HKU\S-1-5-21-1068431273-4020526499-88977139-1001\..\Toolbar\WebBrowser: (no name) - {1392B8D2-5C05-419F-A8F6-B9F15A596612} - No CLSID value found.
O4:64bit: - HKLM..\Run: [K10] c:\K10\K10STAT.exe ()
O4 - HKLM..\Run: [Malwarebytes' Anti-Malware] C:\Program Files (x86)\Malwarebytes' Anti-Malware\mbamgui.exe (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-20..\Run: [Sidebar] C:\Program Files (x86)\Windows Sidebar\Sidebar.exe (Microsoft Corporation)
O4 - HKU\S-1-5-21-1068431273-4020526499-88977139-1001..\Run: [ASRockOCTuner] File not found
O4 - HKU\S-1-5-21-1068431273-4020526499-88977139-1001..\Run: [AtiTrayTools] C:\Program Files (x86)\Ray Adams\ATI Tray Tools\atitray.exe (Ray Adams)
O4 - HKLM..\RunOnce: [Malwarebytes Anti-Malware (cleanup)] C:\ProgramData\Malwarebytes\Malwarebytes' Anti-Malware\cleanup.dll (Malwarebytes Corporation)
O4 - HKU\S-1-5-19..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O4 - HKU\S-1-5-20..\RunOnce: [mctadmin] C:\Windows\System32\mctadmin.exe File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableLUA = 0
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: PromptOnSecureDesktop = 0
O8:64bit: - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8:64bit: - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Download by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: &Grab video by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Do&wnload selected by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O8 - Extra context menu item: Down&load all by Orbit - C:\Program Files (x86)\Orbitdownloader\orbitmxt.dll (Orbitdownloader.com)
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {9122D757-5A4F-4768-82C5-B4171D8556A7} http://appdirectory.messenger.msn.com/AppDirectory/P4Apps/PhotoSwap/PhtPkMSN.cab (PhotoPickConvert Class)
O16 - DPF: {9191F686-7F0A-441D-8A98-2FE3AC1BD913} http://acs.pandasoftware.com/activescan/cabs/as2stubie.cab (ActiveScan 2.0 Installer Class)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters: DhcpNameServer = 62.81.29.254 62.42.230.24
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{D7750BB3-7BC8-4526-A5CB-9ECD86C5B9EB}: DhcpNameServer = 62.81.29.254 62.42.230.24
O18:64bit: - Protocol\Handler\livecall - No CLSID value found
O18:64bit: - Protocol\Handler\ms-help - No CLSID value found
O18:64bit: - Protocol\Handler\msnim - No CLSID value found
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18 - Protocol\Handler\livecall {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\msnim {828030A1-22C1-4009-854F-8E305202313F} - C:\Program Files (x86)\MSN Messenger\msgrapp.8.1.0178.00.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll (Skype Technologies)
O18:64bit: - Protocol\Filter\text/xml {807563E5-5146-11D5-A672-00B0D022E945} - C:\PROGRA~1\COMMON~1\MICROS~1\OFFICE12\MSOXMLMF.DLL (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (SystemPropertiesPerformance.exe) - C:\Windows\SysNative\SystemPropertiesPerformance.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (userinit.exe) - C:\Windows\SysWow64\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: VMApplet - (/pagefile) - File not found
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O32 - HKLM CDRom: AutoRun - 1
O33 - MountPoints2\{52e01e7a-077b-11e0-9ace-0025220766bb}\Shell - "" = AutoRun
O33 - MountPoints2\{52e01e7a-077b-11e0-9ace-0025220766bb}\Shell\AutoRun\command - "" = G:\Setup.exe
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=winsrv:ConServerDllInitialization,2)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

========== Files/Folders - Created Within 30 Days ==========

[2012/04/28 06:11:23 | 000,000,000 | ---D | C] -- C:\FRST
[2012/04/28 04:55:43 | 000,000,000 | ---D | C] -- C:\$WINDOWS.~BT
[2012/04/27 21:59:27 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\AppData\Roaming\Malwarebytes
[2012/04/27 21:59:02 | 000,024,904 | ---- | C] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[2012/04/27 21:59:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2012/04/27 21:59:01 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Malwarebytes' Anti-Malware
[2012/04/26 17:32:21 | 000,000,000 | ---D | C] -- C:\Windows\SysWow64\Wat
[2012/04/26 17:32:21 | 000,000,000 | ---D | C] -- C:\Windows\SysNative\Wat
[2012/04/26 17:25:37 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Microsoft CAPICOM 2.1.0.2
[2012/04/26 17:17:18 | 000,220,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\wintrust.dll
[2012/04/26 17:17:18 | 000,080,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\imagehlp.dll
[2012/04/26 17:17:18 | 000,022,896 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\drivers\fs_rec.sys
[2012/04/26 17:16:37 | 000,703,488 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeeds.dll
[2012/04/26 17:16:36 | 000,482,816 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\html.iec
[2012/04/26 17:16:36 | 000,386,048 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\html.iec
[2012/04/26 17:16:36 | 000,256,000 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\iepeers.dll
[2012/04/26 17:16:36 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ieui.dll
[2012/04/26 17:16:36 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\iepeers.dll
[2012/04/26 17:16:36 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\ieui.dll
[2012/04/26 17:16:36 | 000,134,144 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\url.dll
[2012/04/26 17:16:36 | 000,132,096 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\url.dll
[2012/04/26 17:16:36 | 000,097,280 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\mshtmled.dll
[2012/04/26 17:16:36 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\mshtmled.dll
[2012/04/26 17:16:36 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\licmgr10.dll
[2012/04/26 17:16:36 | 000,044,544 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\licmgr10.dll
[2012/04/26 17:16:36 | 000,012,800 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\msfeedssync.exe
[2012/04/26 17:16:36 | 000,012,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msfeedssync.exe
[2012/04/26 17:16:29 | 001,572,864 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\quartz.dll
[2012/04/26 17:16:29 | 001,328,640 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\quartz.dll
[2012/04/26 17:16:29 | 000,514,560 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\qdvd.dll
[2012/04/26 17:16:29 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\qdvd.dll
[2012/04/26 17:16:22 | 001,446,912 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\lsasrv.dll
[2012/04/26 17:16:21 | 000,395,776 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\webio.dll
[2012/04/26 17:16:21 | 000,314,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\webio.dll
[2012/04/26 17:16:21 | 000,136,192 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspicli.dll
[2012/04/26 17:16:21 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\sspisrv.dll
[2012/04/26 17:16:21 | 000,028,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\secur32.dll
[2012/04/26 17:16:19 | 001,837,568 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10warp.dll
[2012/04/26 17:16:18 | 001,541,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\DWrite.dll
[2012/04/26 17:16:18 | 000,902,656 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d2d1.dll
[2012/04/26 17:16:18 | 000,320,512 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1core.dll
[2012/04/26 17:16:17 | 000,723,456 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\EncDec.dll
[2012/04/26 17:16:17 | 000,534,528 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\EncDec.dll
[2012/04/26 17:16:17 | 000,197,120 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\d3d10_1.dll
[2012/04/26 17:16:14 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcore.dll
[2012/04/26 17:16:14 | 000,826,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\rdpcore.dll
[2012/04/26 17:16:07 | 000,634,368 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\msvcrt.dll
[2012/04/26 17:16:00 | 000,149,504 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpcorekmts.dll
[2012/04/26 17:16:00 | 000,076,288 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdpwsx.dll
[2012/04/26 17:16:00 | 000,009,216 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\rdrmemptylst.exe
[2012/04/26 17:15:59 | 000,043,520 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\csrsrv.dll
[2012/04/26 17:15:51 | 001,739,160 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\ntdll.dll
[2012/04/26 17:12:26 | 000,077,312 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysNative\packager.dll
[2012/04/26 17:12:26 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\Windows\SysWow64\packager.dll
[2012/04/25 20:41:37 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\Desktop\Kingston 1gb
[2012/04/25 00:14:56 | 000,000,000 | ---D | C] -- C:\ProgramData\RELOADED
[2012/04/20 19:05:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
[2012/04/20 19:05:17 | 000,000,000 | ---D | C] -- C:\ProgramData\BlueStacks
[2012/04/20 19:05:17 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\BlueStacks
[2012/04/20 19:04:15 | 003,785,056 | ---- | C] (BlueStack Systems, Inc.) -- C:\Users\Asteroide\Desktop\BlueStacks-ThinInstaller_0.6.3.2215.exe
[2012/04/20 19:04:14 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\AppData\Local\BlueStacksSetup
[2012/04/20 19:04:14 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\AppData\Local\BlueStacks
[2012/04/19 14:52:59 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\Desktop\xperia neo
[2012/03/31 16:30:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NAMCO BANDAI Games
[2012/03/31 14:48:56 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Rovio
[2012/03/30 16:43:30 | 000,000,000 | ---D | C] -- C:\Users\Asteroide\Desktop\Trash
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Users\Asteroide\Documents\*.tmp files -> C:\Users\Asteroide\Documents\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files - Modified Within 30 Days ==========

[2012/04/28 04:55:44 | 536,870,912 | -HS- | M] () -- C:\WinPEpge.sys
[2012/04/27 22:54:00 | 000,001,066 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1068431273-4020526499-88977139-1001UA.job
[2012/04/27 22:48:17 | 000,017,360 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2012/04/27 22:48:17 | 000,017,360 | -H-- | M] () -- C:\Windows\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2012/04/27 22:27:06 | 001,680,288 | ---- | M] () -- C:\Windows\SysNative\PerfStringBackup.INI
[2012/04/27 22:27:06 | 000,738,700 | ---- | M] () -- C:\Windows\SysNative\perfh00A.dat
[2012/04/27 22:27:06 | 000,655,054 | ---- | M] () -- C:\Windows\SysNative\perfh009.dat
[2012/04/27 22:27:06 | 000,158,380 | ---- | M] () -- C:\Windows\SysNative\perfc00A.dat
[2012/04/27 22:27:06 | 000,121,926 | ---- | M] () -- C:\Windows\SysNative\perfc009.dat
[2012/04/27 22:22:31 | 000,067,584 | --S- | M] () -- C:\Windows\bootstat.dat
[2012/04/27 13:39:15 | 000,863,300 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\census.cache
[2012/04/27 13:39:08 | 000,097,536 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\ars.cache
[2012/04/26 17:32:59 | 000,308,064 | ---- | M] () -- C:\Windows\SysNative\FNTCACHE.DAT
[2012/04/26 17:25:30 | 000,007,601 | ---- | M] () -- C:\Users\Asteroide\AppData\Local\Resmon.ResmonCfg
[2012/04/26 17:22:23 | 001,646,244 | ---- | M] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2012/04/26 17:06:02 | 000,001,014 | ---- | M] () -- C:\Windows\tasks\GoogleUpdateTaskUserS-1-5-21-1068431273-4020526499-88977139-1001Core.job
[2012/04/26 15:19:05 | 000,000,000 | -HS- | M] () -- C:\Windows\SysNative\dds_trash_log.cmd
[2012/04/21 14:01:30 | 000,234,813 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_21042012_140110.png
[2012/04/21 00:25:13 | 000,407,679 | ---- | M] () -- C:\Users\Asteroide\Desktop\Tú eres mi equilibrio.jpg
[2012/04/20 19:05:33 | 000,001,604 | ---- | M] () -- C:\Users\Asteroide\Desktop\Android Apps.lnk
[2012/04/20 19:05:20 | 000,001,829 | ---- | M] () -- C:\Users\Public\Desktop\Start BlueStacks.lnk
[2012/04/20 19:04:05 | 003,785,056 | ---- | M] (BlueStack Systems, Inc.) -- C:\Users\Asteroide\Desktop\BlueStacks-ThinInstaller_0.6.3.2215.exe
[2012/04/19 18:02:55 | 000,403,949 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_19042012_180123.png
[2012/04/17 23:32:36 | 001,112,188 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_3847.JPG
[2012/04/17 23:31:35 | 001,178,859 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_3840.JPG
[2012/04/17 23:30:37 | 000,974,061 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_3833.JPG
[2012/04/17 23:17:30 | 000,042,672 | ---- | M] () -- C:\Users\Asteroide\Documents\IMG_17042012_231712.png
[2012/04/17 23:06:08 | 000,002,597 | ---- | M] () -- C:\Users\Asteroide\Desktop\Lo soy.png
[2012/04/15 20:52:21 | 000,075,413 | ---- | M] () -- C:\Users\Asteroide\Desktop\borrador.pdf
[2012/04/04 15:56:40 | 000,024,904 | ---- | M] (Malwarebytes Corporation) -- C:\Windows\SysNative\drivers\mbam.sys
[5 C:\Windows\*.tmp files -> C:\Windows\*.tmp -> ]
[3 C:\Windows\SysWow64\*.tmp files -> C:\Windows\SysWow64\*.tmp -> ]
[1 C:\Windows\SysNative\*.tmp files -> C:\Windows\SysNative\*.tmp -> ]
[1 C:\Users\Asteroide\Documents\*.tmp files -> C:\Users\Asteroide\Documents\*.tmp -> ]
[1 C:\*.tmp files -> C:\*.tmp -> ]

========== Files Created - No Company Name ==========

[2012/04/28 04:55:44 | 536,870,912 | -HS- | C] () -- C:\WinPEpge.sys
[2012/04/26 15:19:05 | 000,000,000 | -HS- | C] () -- C:\Windows\SysNative\dds_trash_log.cmd
[2012/04/25 20:03:24 | 679,966,845 | ---- | C] () -- C:\Users\Asteroide\Desktop\Un mal día lo tiene cualquiera.avi
[2012/04/21 14:01:07 | 000,234,813 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_21042012_140110.png
[2012/04/20 19:05:33 | 000,001,604 | ---- | C] () -- C:\Users\Asteroide\Desktop\Android Apps.lnk
[2012/04/20 19:05:20 | 000,001,829 | ---- | C] () -- C:\Users\Public\Desktop\Start BlueStacks.lnk
[2012/04/19 18:01:25 | 000,403,949 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_19042012_180123.png
[2012/04/17 23:31:47 | 001,112,188 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_3847.JPG
[2012/04/17 23:30:42 | 001,178,859 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_3840.JPG
[2012/04/17 23:29:52 | 000,974,061 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_3833.JPG
[2012/04/17 23:17:28 | 000,042,672 | ---- | C] () -- C:\Users\Asteroide\Documents\IMG_17042012_231712.png
[2012/04/17 23:06:08 | 000,002,597 | ---- | C] () -- C:\Users\Asteroide\Desktop\Lo soy.png
[2012/04/15 20:52:21 | 000,075,413 | ---- | C] () -- C:\Users\Asteroide\Desktop\borrador.pdf
[2012/04/15 16:07:31 | 000,407,679 | ---- | C] () -- C:\Users\Asteroide\Desktop\Tú eres mi equilibrio.jpg
[2012/01/18 08:44:00 | 010,920,984 | ---- | C] () -- C:\Windows\SysWow64\LogiDPP.dll
[2012/01/18 08:44:00 | 000,336,408 | ---- | C] () -- C:\Windows\SysWow64\DevManagerCore.dll
[2012/01/18 08:44:00 | 000,104,472 | ---- | C] () -- C:\Windows\SysWow64\LogiDPPApp.exe
[2011/10/25 14:41:49 | 000,863,300 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\census.cache
[2011/10/25 14:41:04 | 000,097,536 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\ars.cache
[2011/10/25 14:33:12 | 000,000,036 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\housecall.guid.cache
[2011/10/11 01:42:54 | 002,580,552 | R--- | C] () -- C:\Windows\SysWow64\pbsvc.exe
[2011/10/01 14:05:44 | 000,000,043 | ---- | C] () -- C:\Users\Asteroide\AppData\Roaming\TheHunterSettings_local.cfg
[2011/07/15 23:18:44 | 000,000,032 | R--- | C] () -- C:\ProgramData\hash.dat
[2011/06/22 15:33:12 | 000,000,079 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\CrystalDiskMark30.ini
[2011/04/24 15:08:24 | 000,018,760 | ---- | C] () -- C:\Windows\SysWow64\QQVistaHelper.dll
[2011/04/12 00:40:20 | 000,008,579 | ---- | C] () -- C:\Users\Asteroide\AppData\Roaming\PStrip.bko
[2011/04/11 18:44:30 | 000,008,595 | ---- | C] () -- C:\Users\Asteroide\AppData\Roaming\PStrip.bk!
[2011/04/11 18:44:26 | 000,008,595 | ---- | C] () -- C:\Users\Asteroide\AppData\Roaming\PStrip.bak
[2011/04/11 18:32:09 | 000,008,595 | ---- | C] () -- C:\Users\Asteroide\AppData\Roaming\PStrip.ini
[2011/04/11 18:31:15 | 000,000,065 | ---- | C] () -- C:\Windows\wininit.ini
[2011/04/09 18:55:28 | 000,179,261 | ---- | C] () -- C:\Windows\SysWow64\xlive.dll.cat
[2011/03/17 19:51:44 | 000,003,929 | ---- | C] () -- C:\Windows\SysWow64\atipblag.dat
[2011/01/23 16:45:06 | 001,646,244 | ---- | C] () -- C:\Windows\SysWow64\PerfStringBackup.INI
[2010/12/30 17:32:46 | 000,000,056 | -H-- | C] () -- C:\Windows\SysWow64\ezsidmv.dat
[2010/12/29 15:39:30 | 000,007,601 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\Resmon.ResmonCfg
[2010/12/27 18:55:41 | 000,129,024 | ---- | C] () -- C:\Windows\SysWow64\AVERM.dll
[2010/12/27 18:55:41 | 000,028,672 | ---- | C] () -- C:\Windows\SysWow64\AVEQT.dll
[2010/12/26 16:56:44 | 000,004,608 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
[2010/12/15 09:59:32 | 000,000,000 | ---- | C] () -- C:\Windows\nsreg.dat
[2010/12/13 23:46:39 | 000,004,425 | ---- | C] () -- C:\Windows\SysWow64\k10stat.dat
[2010/12/13 22:40:21 | 000,000,049 | ---- | C] () -- C:\Windows\CoolRead.ini
[2010/12/13 21:53:46 | 000,000,000 | ---- | C] () -- C:\Windows\ativpsrm.bin
[2010/10/21 22:36:20 | 000,203,264 | ---- | C] () -- C:\Users\Asteroide\AppData\Local\GetToolbar.exe

========== Alternate Data Streams ==========

@Alternate Data Stream - 112 bytes -> C:\ProgramData\Temp:6C20785E
@Alternate Data Stream - 109 bytes -> C:\ProgramData\Temp:D1B5B4F1

< End of report >

Attached Files






0 user(s) are reading this topic

0 members, 0 guests, 0 anonymous users