| no se si tengo un virus o el ordenador estropeado (Terminado) Saludos y gracias de antemano. Ojala alguien pueda ayudarme.
Un dia abri un archivo en elcorreo que el Outlook Express me recomendo no abrir. No se si casualmente en ese momento se estropeo el ordenador o el archivo estaba infectado, por que a partir de entonces el ordenador funcionaba fatal, se colgaba a menudo y arrancaba cuando queria. Ya se que parece bastante logico que tengo un virus, pero es que he formateado el disco, he pasado todos los antivirus y antispywares que tengo -AVG, Ad-Ware, Spy-Sweeper, intentaba pasar el Norton Antivirus 2005 antes de formatearlo y siempre llegaba un punto en que quedaba colgado- y sigo sin solucion. Una vez se me abrio la ventana del Errorsafe, pero no le hize caso y no ha vuelto a salir. Despues de formatearlo instale el Windows xp y no me arranca nunca. Asi que voy tirando con el Windows XP 64b Edition, he vuelto a pasar los programas antes mencionados -el norton no por que no funciona con esta version de Windows-, y nada. Ahora el ordenador no se queda colgado, pero tarda mucho en arrancar y una vez que arranca funciona con normalidad salvo continuos cortes en los que se queda parado y no reacciona, el cursor se queda quieto y todos los procesos se quedan parados durante varios segundos hasta que recupera el control.
Ahi va el log del hijackthis:
Logfile of HijackThis v1.99.1
Scan saved at 8:36:49 PM, on 3/14/2006
Platform: Windows 2003 SP1 (WinNT 5.02.3790)
MSIE: Internet Explorer v6.00 SP1 (6.00.3790.1830)
Running processes:
D:\PROGRA~2\Grisoft\AVG7\avgamsvr.exe
D:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
D:\PROGRA~2\Grisoft\AVG7\avgrssvc.exe
D:\PROGRA~2\Grisoft\AVG7\avgemc.exe
D:\WINDOWS\SysWOW64\CTsvcCDA.EXE
D:\Program Files (x86)\Lavasoft\Personal Firewall\lpfw.exe
D:\Program Files (x86)\Creative\MediaSource\Detector\CTDetect.exe
D:\Program Files (x86)\Creative\MediaSource\Go\CTCMSGo.exe
D:\Program Files (x86)\Trend Micro\Tmas\Tmas.exe
D:\Program Files (x86)\Webroot\Spy Sweeper\WRSSSDK.exe
D:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe
D:\Program Files (x86)\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe
D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe
D:\WINDOWS\system32\CTHELPER.EXE
D:\Program Files (x86)\Webroot\Spy Sweeper\SpySweeper.exe
D:\PROGRA~2\Grisoft\AVG7\avgcc.exe
D:\Program Files (x86)\Creative\MediaSource\CTCMS.exe
D:\Program Files (x86)\Creative\SBAudigy4\Surround Mixer\SurMixer.exe
D:\PROGRA~2\Grisoft\AVG7\avgw.exe
D:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
D:\Program Files (x86)\Microsoft Office\Office10\WINWORD.EXE
D:\Program Files (x86)\WinAce\WinAce.exe
D:\Documents and Settings\Administrator\Desktop\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
F2 - REG:system.ini: UserInit=userinit
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\PROGRA~2\SPYBOT~1\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O2 - BHO: Google Toolbar Helper - {AA58ED58-01DD-4d91-8333-CF10577473F7} - d:\program files (x86)\google\googletoolbar2.dll
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - d:\program files (x86)\google\googletoolbar2.dll
O4 - HKLM\..\Run: [SunJavaUpdateSched] "D:\Program Files (x86)\Java\jre1.5.0_06\bin\jusched.exe"
O4 - HKLM\..\Run: [stnospy] "D:\Program Files (x86)\SinEspias\no-spy.exe" /autorun
O4 - HKLM\..\Run: [CTSysVol] "D:\Program Files (x86)\Creative\SBAudigy4\Surround Mixer\CTSysVol.exe" /r
O4 - HKLM\..\Run: [RCSystem] "D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" RCSystem * -Startup
O4 - HKLM\..\Run: [AudioDrvEmulator] "D:\Program Files (x86)\Creative\Shared Files\Module Loader\DLLML.exe" -1 AudioDrvEmulator "D:\Program Files (x86)\Creative\Shared Files\Module Loader\Audio Emulator\AudDrvEm.dll"
O4 - HKLM\..\Run: [CTHelper] CTHELPER.EXE
O4 - HKLM\..\Run: [UpdReg] D:\WINDOWS\UpdReg.EXE
O4 - HKLM\..\Run: [SpySweeper] "D:\Program Files (x86)\Webroot\Spy Sweeper\SpySweeper.exe" /startintray
O4 - HKLM\..\Run: [AVG7_CC] D:\PROGRA~2\Grisoft\AVG7\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [Personal Firewall] "D:\Program Files (x86)\Lavasoft\Personal Firewall\lpfw.exe" /waitservice
O4 - HKCU\..\Run: [Creative Detector] D:\Program Files (x86)\Creative\MediaSource\Detector\CTDetect.exe /R
O4 - HKCU\..\Run: [Creative MediaSource Go] "D:\Program Files (x86)\Creative\MediaSource\Go\CTCMSGo.exe" /SCB
O4 - Global Startup: Microsoft Office.lnk = D:\Program Files (x86)\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Trend Micro Anti-Spyware.lnk = D:\Program Files (x86)\Trend Micro\Tmas\Tmas.exe
O8 - Extra context menu item: &Google Search - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmcache.html
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://D:\PROGRA~2\MICROS~2\Office10\EXCEL.EXE/3000
O8 - Extra context menu item: Similar Pages - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://d:\program files (x86)\google\GoogleToolbar2.dll/cmtrans.html
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - D:\Program Files (x86)\Java\jre1.5.0_06\bin\ssv.dll
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - D:\Program Files\Messenger\msmsgs.exe
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O17 - HKLM\System\CCS\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O17 - HKLM\System\CCS\Services\Tcpip\..\{AC8F51A8-7858-4887-B487-037C6071C251}: NameServer = 80.58.0.33
O17 - HKLM\System\CS1\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O17 - HKLM\System\CS2\Services\Tcpip\..\{396C5A76-D232-44EC-BE26-87EEC23F46FB}: NameServer = 80.58.0.33
O20 - AppInit_DLLs: D:\PROGRA~2\Lavasoft\PERSON~1\wl_hook.dll
O20 - Winlogon Notify: dimsntfy - D:\WINDOWS\SYSTEM32\dimsntfy.dll
O20 - Winlogon Notify: EFS - D:\WINDOWS\SYSTEM32\sclgntfy.dll
O20 - Winlogon Notify: WRNotifier - D:\WINDOWS\SYSTEM32\WRLogonNTF.dll
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgupsvc.exe
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgrssvc.exe
O23 - Service: AVG E-mail Scanner (AVGEMS) - GRISOFT, s.r.o. - D:\PROGRA~2\Grisoft\AVG7\avgemc.exe
O23 - Service: Creative Service for CDROM Access - Creative Technology Ltd - D:\WINDOWS\system32\CTsvcCDA.EXE
O23 - Service: Logical Disk Manager Administrative Service (dmadmin) - Unknown owner - D:\WINDOWS\System32\dmadmin.exe (file missing)
O23 - Service: Event Log (Eventlog) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: HTTP SSL (HTTPFilter) - Unknown owner - D:\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: IMAPI CD-Burning COM Service (ImapiService) - Unknown owner - D:\WINDOWS\system32\imapi.exe (file missing)
O23 - Service: Lavasoft Personal Firewall Service (LavasoftFirewall) - Agnitum Ltd. - D:\Program Files (x86)\Lavasoft\Personal Firewall\lpfw.exe
O23 - Service: Distributed Transaction Coordinator (MSDTC) - Unknown owner - D:\WINDOWS\system32\msdtc.exe (file missing)
O23 - Service: Net Logon (Netlogon) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: NT LM Security Support Provider (NtLmSsp) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - D:\WINDOWS\system32\services.exe (file missing)
O23 - Service: IPSEC Services (PolicyAgent) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Protected Storage (ProtectedStorage) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Remote Desktop Help Session Manager (RDSessMgr) - Unknown owner - (no file)
O23 - Service: Security Accounts Manager (SamSs) - Unknown owner - D:\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Webroot Spy Sweeper Engine (svcWRSSSDK) - Webroot Software, Inc. - D:\Program Files (x86)\Webroot\Spy Sweeper\WRSSSDK.exe
O23 - Service: Virtual Disk Service (vds) - Unknown owner - D:\WINDOWS\System32\vds.exe (file missing)
O23 - Service: Volume Shadow Copy (VSS) - Unknown owner - D:\WINDOWS\System32\vssvc.exe (file missing)
O23 - Service: WMI Performance Adapter (WmiApSrv) - Unknown owner - D:\WINDOWS\system32\wbem\wmiapsrv.exe (file missing)
Esto es todo, gracias y un saludo. |