Marca y dale a FIX sobre las siguientes entradas:
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
http://www.jcyl.es
R1 - HKCU\Software\Microsoft\Internet Connection Wizard,ShellNext =
http://www.jcyl.es/cylnet.pac
R1 - HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings,AutoConfigURL =
http://www.jcyl.es/cylnet.pac
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O17 - HKLM\System\CCS\Services\Tcpip\..\{07CD2972-27A3-4C58-8DBB-F9C4AF0D9A26}: NameServer = 10.16.129.16,10.17.64.10
O17 - HKLM\System\CS1\Services\Tcpip\..\{07CD2972-27A3-4C58-8DBB-F9C4AF0D9A26}: NameServer = 10.16.129.16,10.17.64.10
Si no utilizas el programa RemotelyAnywhere, detén estos procesos:
ra_scp.exe
ra_sftp.exe
ra_ssh.exe
raabout.exe
ragui.exe
ramaint.exe
rareboot.exe
remotelyanywhere.exe
rz.exe
sc.exe
sz.exe
tsclient.exe
Elimina luego manualmente estos ficheros:
email.sma
file.sma
license.html
moduli
monitoringscript.txt
processes.sma
ra.inc
ra_scp.exe
ra_sftp.exe
ra_ssh.exe
ra_ssh_seed.dat
ra_ssh1_hostkey.dat
ra_ssh2_hostkey.dat
ra_ssh2_hostkey.pub.dat
raabout.exe
ragui.exe
rahook.dll
rainfo.sys
ramaint.exe
ramirr.dll
ramirr.inf
ramirr.sys
rareboot.exe
readme.txt
remotelyanywhere.exe
remotelyanywhere.log
remotelyanywhere.pdf
rz.exe
sc.exe
services.sma
smalldoc.pdf
sz.exe
tsclient.exe
wapclients.cfg
Reinicia la máquina y nos cuentas los resultados.
Saludos.