Sorry, there is where you find the file, copy and paste one last time
ComboFix 15-01-22.02 - Agustín 24/01/2015 16:23:50.1.2 - x86
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.598.3082.18.1955.1038 [GMT -3:00]
Running from: c:\users\Agustín\Desktop\ComboFix.exe
AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B}
FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
.
((((((((((((((((((((((((((((((((((((((( Other Deletions )))))))))))))))))))))))))))))))))))))))))))))))))
.
.
c:\programdata\9916583973350453139
c:\programdata\9916583973350453139\cd5b15e575e1c3d0c22dfba2780ddd6b.ini
.
.
((((((((((((((((((((((((( Files Created from 2014-12-24 to 2015-01-24 )))))))))))))))))))))))))))))))
.
.
2015-01-24 19:31 . 2015-01-24 19:31 -------- d-----w- c:\users\Default\AppData\Local\temp
2015-01-24 10:42 . 2015-01-24 10:42 62576 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D0E54E29-332B-4046-9CA3-FE5C14A61B8A}\offreg.dll
2015-01-24 09:47 . 2015-01-24 09:58 -------- d-----w- C:\FRST
2015-01-24 02:25 . 2014-05-14 16:23 45536 ----a-w- c:\windows\system32\wups2.dll
2015-01-24 02:25 . 2014-05-14 16:23 54240 ----a-w- c:\windows\system32\wuauclt.exe
2015-01-24 02:25 . 2014-05-14 16:17 2425856 ----a-w- c:\windows\system32\wucltux.dll
2015-01-24 02:25 . 2014-05-14 16:23 1973728 ----a-w- c:\windows\system32\wuaueng.dll
2015-01-24 02:25 . 2014-05-14 16:23 36320 ----a-w- c:\windows\system32\wups.dll
2015-01-24 02:25 . 2014-05-14 16:17 92672 ----a-w- c:\windows\system32\wudriver.dll
2015-01-24 02:25 . 2014-05-14 16:23 581600 ----a-w- c:\windows\system32\wuapi.dll
2015-01-24 02:24 . 2014-05-14 12:23 179656 ----a-w- c:\windows\system32\wuwebv.dll
2015-01-24 02:24 . 2014-05-14 12:17 33792 ----a-w- c:\windows\system32\wuapp.exe
2015-01-24 02:11 . 2015-01-24 12:40 -------- d-----w- c:\programdata\{127222aa-73e4-49ea-1272-222aa73e8aa9}
2015-01-24 01:57 . 2015-01-24 01:57 -------- d-----w- c:\users\Agustín\AppData\Roaming\ParetoLogic
2015-01-24 01:57 . 2015-01-24 02:16 -------- d-----w- c:\programdata\ParetoLogic
2015-01-23 14:08 . 2015-01-23 14:08 -------- d-----w- c:\windows\system32\SPReview
2015-01-23 14:07 . 2015-01-23 14:07 -------- d-----w- c:\windows\system32\EventProviders
2015-01-23 13:58 . 2015-01-23 14:06 -------- d-----w- c:\windows\system32\MRT
2015-01-23 13:57 . 2014-12-02 11:01 9054624 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{D0E54E29-332B-4046-9CA3-FE5C14A61B8A}\mpengine.dll
2015-01-22 19:12 . 2015-01-22 19:12 -------- d-----w- c:\users\Agustín\AppData\Local\Adobe
2015-01-21 02:18 . 2015-01-21 02:19 -------- d-----w- C:\SMCLpav
2015-01-19 20:41 . 2015-01-19 20:41 -------- d-----w- c:\program files\ESET
2015-01-19 20:03 . 2015-01-19 20:03 -------- d-----w- c:\program files\CCleaner
2015-01-19 17:10 . 2015-01-20 14:47 -------- d-----w- c:\users\Agustín\AppData\Roaming\Panda Security
2015-01-19 17:09 . 2015-01-20 01:27 -------- d-----w- c:\program files\Panda Security
2015-01-19 11:00 . 2015-01-20 01:27 -------- d-----w- c:\programdata\Panda Security
2015-01-19 10:47 . 2013-09-20 12:49 18968 ----a-w- c:\windows\system32\sdnclean.exe
2015-01-19 10:47 . 2015-01-24 00:59 -------- d-----w- c:\programdata\Spybot - Search & Destroy
2015-01-19 10:46 . 2015-01-24 01:01 -------- d-----w- c:\program files\Spybot - Search & Destroy 2
2015-01-19 09:42 . 2015-01-21 01:51 -------- d-----w- c:\users\Agustín\Start Menu
2015-01-19 09:37 . 2015-01-21 01:51 -------- d-----w- c:\program files\Stronghold AntiMalware
2015-01-19 09:24 . 2015-01-21 02:36 -------- d-----w- c:\program files\Unlocker
2015-01-19 08:51 . 2015-01-24 19:16 114904 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys
2015-01-19 08:49 . 2014-11-21 09:14 51928 ----a-w- c:\windows\system32\drivers\mwac.sys
2015-01-19 08:49 . 2014-11-21 09:14 75480 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys
2015-01-19 08:49 . 2014-11-21 09:14 23256 ----a-w- c:\windows\system32\drivers\mbam.sys
2015-01-19 08:49 . 2015-01-23 21:46 -------- d-----w- c:\program files\Malwarebytes Anti-Malware
2015-01-19 08:49 . 2015-01-21 01:51 -------- d-----w- c:\programdata\Malwarebytes
2015-01-19 07:59 . 2015-01-19 20:04 -------- d-----w- c:\users\Agustín\AppData\Local\Dxtory Software
2015-01-18 00:03 . 2015-01-21 06:26 -------- d-----w- c:\users\Agustín\AppData\Local\ElevatedDiagnostics
2015-01-17 14:33 . 2015-01-17 14:33 -------- d-----w- c:\programdata\Intel
2015-01-17 14:33 . 2012-05-15 08:20 104448 ----a-w- c:\windows\system32\IntelOpenCL32.dll
2015-01-17 14:33 . 2012-05-15 08:20 17920 ----a-w- c:\windows\system32\OpenCL.dll
2015-01-13 12:13 . 2015-01-13 12:13 -------- d-----w- c:\windows\system32\Wat
2015-01-08 14:27 . 2015-01-08 14:27 -------- d-----w- C:\found.000
2015-01-07 16:19 . 2015-01-07 16:20 -------- d-----w- c:\program files\TeamSpeak 3 Client
2015-01-03 03:20 . 2015-01-03 03:20 -------- d-----w- c:\users\Agustín\AppData\Roaming\Unity
2015-01-03 03:16 . 2015-01-03 03:16 -------- d-----w- c:\users\Agustín\AppData\Local\Unity
2014-12-31 00:11 . 2015-01-22 19:13 -------- d-----w- c:\users\Agustín\AppData\Roaming\Adobe
2014-12-28 21:16 . 2015-01-24 18:53 -------- d-----w- c:\users\Agustín\AppData\Local\LogMeIn Hamachi
2014-12-28 21:16 . 2014-12-28 21:16 -------- d-----w- c:\users\Agustín\AppData\Local\LogMeIn
2014-12-28 21:16 . 2014-12-28 21:16 -------- d-----w- c:\programdata\LogMeIn
.
.
.
(((((((((((((((((((((((((((((((((((((((( Find3M Report ))))))))))))))))))))))))))))))))))))))))))))))))))))
.
2015-01-23 14:18 . 2009-07-14 02:05 152576 ----a-w- c:\windows\system32\msclmd.dll
2015-01-23 03:39 . 2014-12-21 04:58 71344 ----a-w- c:\windows\system32\FlashPlayerCPLApp.cpl
2015-01-23 03:39 . 2014-12-21 04:58 701616 ----a-w- c:\windows\system32\FlashPlayerApp.exe
2015-01-23 01:05 . 2014-12-13 02:35 96680 ----a-w- c:\windows\system32\WindowsAccessBridge.dll
2015-01-17 15:14 . 2014-12-14 10:47 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup-2\Markup.dll
2015-01-14 17:18 . 2014-12-13 05:00 48648 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCEClientUX\UpdateableMarkup\Markup.dll
2015-01-14 17:18 . 2014-12-17 13:34 404816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight-2\SpotlightResources.dll
2015-01-13 12:13 . 2009-07-13 23:24 811520 ----a-w- c:\windows\system32\user32(46).dll
2015-01-10 18:47 . 2014-12-13 05:00 404816 ----a-w- c:\programdata\Microsoft\eHome\Packages\MCESpotlight\MCESpotlight\SpotlightResources.dll
2015-01-08 11:55 . 2014-12-13 03:15 249488 ------w- c:\windows\system32\MpSigStub.exe
2014-12-13 04:38 . 2014-12-13 04:37 787800 ----a-w- c:\windows\system32\drivers\aswsnx.sys
2014-12-13 04:38 . 2014-12-13 04:37 423784 ----a-w- c:\windows\system32\drivers\aswsp.sys
2014-12-13 04:37 . 2014-12-13 04:37 91496 ----a-w- c:\windows\system32\drivers\aswStm.sys
2014-12-13 04:37 . 2014-12-13 04:37 49944 ----a-w- c:\windows\system32\drivers\aswRvrt.sys
2014-12-13 04:37 . 2014-12-13 04:37 206248 ----a-w- c:\windows\system32\drivers\aswVmm.sys
2014-12-13 04:37 . 2014-12-13 04:37 70384 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys
2014-12-13 04:37 . 2014-12-13 04:37 24184 ----a-w- c:\windows\system32\drivers\aswHwid.sys
2014-12-13 04:37 . 2014-12-13 04:37 81768 ----a-w- c:\windows\system32\drivers\aswRdr2.sys
2014-12-13 04:37 . 2014-12-13 04:37 291352 ----a-w- c:\windows\system32\aswBoot.exe
2014-12-13 04:37 . 2014-12-13 04:37 43152 ----a-w- c:\windows\avastSS.scr
2014-12-13 04:36 . 2014-12-13 04:37 26136 ----a-w- c:\windows\system32\drivers\aswKbd.sys
2014-12-13 04:36 . 2014-12-13 04:36 38984 ----a-w- c:\windows\system32\drivers\aswTap.sys
2014-12-13 04:36 . 2014-12-13 04:36 271288 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys
2014-12-04 02:20 . 2014-12-13 15:02 337920 ----a-w- c:\windows\system32\generaltel.dll
2014-12-04 02:20 . 2014-12-13 15:02 610304 ----a-w- c:\windows\system32\invagent.dll
2014-12-04 02:20 . 2014-12-13 15:02 315392 ----a-w- c:\windows\system32\devinv.dll
2014-12-04 02:20 . 2014-12-13 15:02 728576 ----a-w- c:\windows\system32\appraiser.dll
2014-12-01 23:27 . 2014-12-13 15:02 1160872 ----a-w- c:\windows\system32\aitstatic.exe
2013-05-11 19:40 . 2013-05-11 19:34 4167680 -c--a-w- c:\program files\GUT320.tmp
.
.
((((((((((((((((((((((((((((((((((((( Reg Loading Points ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
*Note* empty entries & legit default entries are not shown
REGEDIT4
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast]
@="{472083B0-C522-11CF-8763-00608CC02F24}"
[HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}]
2014-12-13 04:36 723976 ----a-w- c:\program files\AVAST Software\Avast\ashShell.dll
.
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"ISUSPM"="c:\programdata\FLEXnet\Connect\11\ISUSPM.exe" [2009-05-05 222496]
"GoogleChromeAutoLaunch_E5F7503F08744F2BA784D1A3E51A726F"="c:\program files\Google\Chrome\Application\chrome.exe" [2015-01-21 843592]
"CCleaner Monitoring"="c:\program files\CCleaner\CCleaner.exe" [2014-12-12 5489944]
.
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run]
"AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-01-23 5227112]
"IndexSearch"="c:\program files\Nuance\PaperPort\IndexSearch.exe" [2011-08-02 46952]
"PaperPort PTD"="c:\program files\Nuance\PaperPort\pptd40nt.exe" [2011-08-02 30568]
"PDFHook"="c:\program files\Nuance\PDF Viewer Plus\pdfpro5hook.exe" [2010-03-05 636192]
"PDF5 Registry Controller"="c:\program files\Nuance\PDF Viewer Plus\RegistryController.exe" [2010-03-05 62752]
"ControlCenter4"="c:\program files\ControlCenter4\BrCcBoot.exe" [2012-09-07 143360]
"BrStsMon00"="c:\program files\Browny02\Brother\BrStMonW.exe" [2012-06-06 3076096]
"APSDaemon"="c:\program files\Common Files\Apple\Apple Application Support\APSDaemon.exe" [2013-09-13 59720]
"QuickTime Task"="c:\program files\QuickTime\QTTask.exe" [2014-10-02 421888]
"LogMeIn Hamachi Ui"="c:\program files\LogMeIn Hamachi\hamachi-2-ui.exe" [2014-12-13 3838800]
"Stronghold AntiMalware"="c:\program files\Stronghold AntiMalware\StrongholdAntiMalware.exe" [2014-12-18 6653088]
"SunJavaUpdateSched"="c:\program files\Common Files\Java\Java Update\jusched.exe" [2014-12-18 508800]
"IgfxTray"="c:\windows\system32\igfxtray.exe" [2014-04-09 145904]
"HotKeysCmds"="c:\windows\system32\hkcmd.exe" [2014-04-09 181232]
"Persistence"="c:\windows\system32\igfxpers.exe" [2014-04-09 189936]
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system]
"ConsentPromptBehaviorAdmin"= 5 (0x5)
"ConsentPromptBehaviorUser"= 3 (0x3)
"EnableUIADesktopToggle"= 0 (0x0)
"SoftwareSASGeneration"= 1 (0x1)
.
[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\drivers32]
"aux"=wdmaud.drv
.
[HKEY_LOCAL_MACHINE\system\currentcontrolset\control\session manager]
BootExecute REG_MULTI_SZ autocheck autochk *\0sdnclean.exe
.
R2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys [2014-12-13 91496]
R2 MBAMScheduler;MBAMScheduler;c:\program files\Malwarebytes Anti-Malware\mbamscheduler.exe [2014-11-21 1871160]
R2 MBAMService;MBAMService;c:\program files\Malwarebytes Anti-Malware\mbamservice.exe [2014-11-21 969016]
R2 SkypeUpdate;Skype Updater;c:\program files\Skype\Updater\Updater.exe [2014-12-11 315496]
R3 aswTap;avast! SecureLine TAP Adapter v3;c:\windows\system32\DRIVERS\aswTap.sys [2014-12-13 38984]
R3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys [2014-11-21 23256]
R3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys [2014-11-21 51928]
R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys [2010-11-20 52224]
R3 WatAdminSvc;Servicio de tecnologías de activación de Windows;c:\windows\system32\Wat\WatAdminSvc.exe [2015-01-13 1343400]
S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys [2014-12-13 271288]
S0 aswRvrt;avast! Revert;
S0 aswVmm;avast! VM Monitor;
S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys [2014-12-13 26136]
S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys [2014-12-13 787800]
S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys [2014-12-13 423784]
S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys [2014-12-13 24184]
S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys [2014-12-13 70384]
S2 avast! Firewall;avast! Firewall;c:\program files\AVAST Software\Avast\afwServ.exe [2014-12-13 104416]
S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [2014-07-14 1390176]
S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [2014-07-14 1767520]
S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files\LogMeIn Hamachi\hamachi-2.exe [2014-12-13 1895760]
S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files\LogMeIn Hamachi\LMIGuardianSvc.exe [2014-12-02 411920]
S2 PDFProFiltSrvPP;PDFProFiltSrvPP;c:\program files\Nuance\PaperPort\PDFProFiltSrvPP.exe [2011-08-02 145256]
S2 ServiceSAM;Stronghold Anti Malware Service;c:\program files\Stronghold AntiMalware\StrongholdAntiMalwareService.exe [2014-12-18 3053728]
S3 BrYNSvc;BrYNSvc;c:\program files\Browny02\BrYNSvc.exe [2012-06-05 266240]
S3 ICCS;Intel(R) Integrated Clock Controller Service - Intel(R) ICCS;c:\program files\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe [2012-04-24 169752]
S3 L1c;NDIS Miniport Driver for Qualcomm Atheros AR81xx PCI-E Ethernet Controller;c:\windows\system32\DRIVERS\L1C60x86.sys [2013-07-16 104648]
S3 MEI;Intel(R) Management Engine Interface ;c:\windows\system32\DRIVERS\HECI.sys [2010-10-20 41088]
.
.
[HKEY_LOCAL_MACHINE\software\microsoft\active setup\installed components\{8A69D345-D564-463c-AFF1-A69D9E530F96}]
2015-01-23 22:33 1086280 ----a-w- c:\program files\Google\Chrome\Application\40.0.2214.91\Installer\chrmstp.exe
.
Contents of the 'Scheduled Tasks' folder
.
2015-01-24 c:\windows\Tasks\Adobe Flash Player Updater.job
- c:\windows\system32\Macromed\Flash\FlashPlayerUpdateService.exe [2014-12-21 03:39]
.
2015-01-24 c:\windows\Tasks\DriverToolkit Autorun.job
- c:\program files\DriverToolkit\DriverToolkit.exe [2014-12-12 12:12]
.
2015-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineCore.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-28 01:12]
.
2015-01-24 c:\windows\Tasks\GoogleUpdateTaskMachineUA.job
- c:\program files\Google\Update\GoogleUpdate.exe [2012-12-28 01:12]
.
.
------- Supplementary Scan -------
.
TCP: Interfaces\{CBE37A57-5D83-4D8F-9A16-6987208813D2}: NameServer = 200.40.220.245 200.40.30.245
.
.
--------------------- LOCKED REGISTRY KEYS ---------------------
.
[HKEY_LOCAL_MACHINE\SYSTEM\ControlSet001\Control\PCW\Security]
@Denied: (Full) (Everyone)
.
Completion time: 2015-01-24 16:33:16
ComboFix-quarantined-files.txt 2015-01-24 19:33
ComboFix2.txt 2015-01-20 16:11
ComboFix3.txt 2015-01-20 01:50
.
Pre-Run: 451.086.262.272 bytes libres
Post-Run: 451.574.005.760 bytes libres
.
- - End Of File - - 7A166F409361138A1D1455568D0347BC
A36C5E4F47E84449FF07ED3517B43A31