Hola de nuevo!
En el killbox ahora pude borrar: C:\WINDOWS\system32\ISHOST.EXE ,
C:\WINDOWS\system32\ismini.exe y C:\WINDOWS\system32\ztmnwp.dll pero no pude borrar C:\WINDOWS\W?nSxS\w?auboot.exe porque me decia: "the file does not seem to exist".
En el hijackthis todo funcionó bien y te pase el ewido y salio esto.

__________________________________________________
ewido anti-spyware online scanner
http://www.ewido.net
__________________________________________________


Name: Adware.Generic
Path: HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer\Browser Helper Objects\{f4d74aaa-a178-4463-846b-b4bc87a024e0}
Risk: Medium

Name: Adware.WinHound
Path: HKLM\SOFTWARE\WinHound.com
Risk: Medium

Name: Adware.WinHound
Path: HKLM\SOFTWARE\WinHound.com\WinHound
Risk: Medium

Name: Adware.WinHound
Path: HKLM\SOFTWARE\WinHound.com\WinHound\WinHound
Risk: Medium

Name: Adware.WinHound
Path: HKLM\SOFTWARE\WinHound.com\WinHound\WinHound\Licen se
Risk: Medium

Name: Adware.Generic
Path: HKU\S-1-5-21-117609710-1972579041-725345543-1004\Software\Microsoft\Windows\CurrentVersion\Ext \Stats\{F4D74AAA-A178-4463-846B-B4BC87A024E0}
Risk: Medium

Name: Adware.SaveNow
Path: [3744] C:\ARCHIV~1\MOZILL~1\extensions\{BEE3E87E-E1C6-4bfe-BE9D-48E84271AB34}\components\whenu_ff.dll
Risk: Medium

Name: Downloader.Zlob.bdq
Path: C:\!Submit\ISHOST.EXE
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\!Submit\ismini.exe
Risk: High

Name: Adware.PurityScan
Path: C:\!Submit\ztmnwp.dll
Risk: Medium

Name: Trojan.Sinowal.bh
Path: C:\Archivos de programa\Archivos comunes\Microsoft Shared\Web Folders\ibm00002.dll
Risk: High

Name: Downloader.Small.ece
Path: C:\Archivos de programa\ipwins\Services.dll
Risk: High

Name: Adware.SaveNow
Path: C:\Archivos de programa\Mozilla Firefox\extensions\{BEE3E87E-E1C6-4bfe-BE9D-48E84271AB34}\components\whenu_ff.dll
Risk: Medium

Name: TrackingCookie.Atdmt
Path: :mozilla.12:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.18:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.19:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.20:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.21:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.22:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.23:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.24:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.25:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.26:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.27:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.28:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.29:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.30:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.31:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.32:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.33:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.34:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.35:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.36:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.37:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.38:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.39:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Advertising
Path: :mozilla.40:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Fastclick
Path: :mozilla.47:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.48:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.49:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adserver
Path: :mozilla.50:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Tradedoubler
Path: :mozilla.51:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Doubleclick
Path: :mozilla.60:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.61:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Adtech
Path: :mozilla.62:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.73:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.74:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.75:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.76:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Serving-sys
Path: :mozilla.77:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.78:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Ru4
Path: :mozilla.79:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.80:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: TrackingCookie.Sexcounter
Path: :mozilla.81:C:\Documents and Settings\Administrador\Datos de programa\Mozilla\Firefox\Profiles\qhoa0vp7.default \cookies.txt
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\Config.xml
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\dwld
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\dwld\WhiteList.xip
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\persist.dbs
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\report
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\report\ag_ShopperReport s.xml
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\report\ag_ShopperReport s.xml.db
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\report\send_ShopperRepo rts.xml
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\report\send_ShopperRepo rts.xml.db
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\res1
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\cs\res1\WhiteList.dbs
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\shprrprt.log
Risk: Medium

Name: Adware.HotBar
Path: C:\Documents and Settings\Bonaventura\Datos de programa\ShopperReports\shprrprt_1135331226.log
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\BrowserSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\BrowserSearch\BrowserSearch.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\BrowserSearch\BrowserSearch.xml. backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ErrorSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ErrorSearch\ErrorSearchOptions.x ml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ErrorSearch\ErrorSearchOptions.x ml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Games
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Games\GamesOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Games\GamesOptions.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\JokeSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\JokeSearch\JokeSearchOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\JokeSearch\JokeSearchOptions.xml .backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Layouts
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Layouts\PreferencesLayout.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Layouts\PreferencesLayout.xml.ba ckup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Layouts\ToolbarLayout.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Layouts\ToolbarLayout.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Manager
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Manager\ManagerOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Manager\ManagerOptions.xml.backu p
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Movies
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Movies\MoviesOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Movies\MoviesOptions.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Pranks
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Pranks\PranksOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Pranks\PranksOptions.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\RelatedSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\RelatedSearch\RelatedSearchOptio ns.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\RelatedSearch\RelatedSearchOptio ns.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ScreensaversMarketingSitePager
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ScreensaversMarketingSitePager\S creensaversMarketingSitePagerOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ScreensaversMarketingSitePager\S creensaversMarketingSitePagerOptions.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchAssistPlus
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchAssistPlus\SearchAssistPlu sOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchAssistPlus\SearchAssistPlu sOptions.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchMatch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchMatch\SearchMatchOptions.x ml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SearchMatch\SearchMatchOptions.x ml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SmileyTown
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SmileyTown\SmileyTownOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\SmileyTown\SmileyTownOptions.xml .backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Toolbar
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Toolbar\TBProductsOptions.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\Toolbar\TBProductsOptions.xml.ba ckup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarLogo
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarLogo\ToolbarLogoOptions.x ml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarLogo\ToolbarLogoOptions.x ml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarSearch\ToolbarSearchOptio ns.xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\ToolbarSearch\ToolbarSearchOptio ns.xml.backup
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\TravelSearch
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\TravelSearch\TravelSearchOptions .xml
Risk: Medium

Name: Adware.Starware
Path: C:\Documents and Settings\Bonaventura\Datos de programa\Starware\TravelSearch\TravelSearchOptions .xml.backup
Risk: Medium

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP1\A0001006.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP1\A0002004.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP1\A0003005.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP1\A0003029.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP1\A0003096.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP2\A0004096.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP2\A0005096.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP2\A0006096.exe
Risk: High

Name: Downloader.Zlob.bdo
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP3\A0006229.exe
Risk: High

Name: Downloader.Zlob.bdq
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP3\A0006257.EXE
Risk: High

Name: Adware.PurityScan
Path: C:\System Volume Information\_restore{0FE187F6-96C2-4D5B-9774-BACB41AB844B}\RP3\A0006258.dll
Risk: Medium

Name: Adware.PurityScan
Path: C:\WINDOWS\system32\jztzn.dll
Risk: Medium

--------------------------------------------- Ahora te paso el Hijackthis

Logfile of HijackThis v1.99.1
Scan saved at 12:00:38, on 22/12/2006
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\csrss.exe
C:\WINDOWS\SYSTEM32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe
C:\Archivos de programa\Spyware Doctor\sdhelp.exe
C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\AVENGINE.EXE
C:\WINDOWS\system32\wdfmgr.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Update Service\livesrv.exe
C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe
C:\Archivos de programa\Softwin\BitDefender9\vsserv.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\Softwin\BITDEF~1\bdmcon.exe
C:\Archivos de programa\Softwin\BitDefender9\bdoesrv.exe
C:\ARCHIV~1\Softwin\BITDEF~1\bdnagent.exe
C:\ARCHIV~1\Softwin\BITDEF~1\bdswitch.exe
C:\Archivos de programa\MSN Messenger\msnmsgr.exe
C:\Archivos de programa\Xfire\xfire.exe
C:\WINDOWS\system32\svchost.exe
C:\Archivos de programa\Mozilla Firefox\firefox.exe
C:\Archivos de programa\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.forospyware.com/
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O3 - Toolbar: &Google - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - c:\archivos de programa\google\googletoolbar1.dll
O4 - HKLM\..\Run: [NeroFilterCheck] C:\Archivos de programa\Archivos comunes\Ahead\Lib\NeroCheck.exe
O4 - HKLM\..\Run: [BDMCon] C:\ARCHIV~1\Softwin\BITDEF~1\bdmcon.exe
O4 - HKLM\..\Run: [BDOESRV] "C:\Archivos de programa\Softwin\BitDefender9\bdoesrv.exe"
O4 - HKLM\..\Run: [BDNewsAgent] "C:\ARCHIV~1\Softwin\BITDEF~1\bdnagent.exe"
O4 - HKLM\..\Run: [BDSwitchAgent] "C:\ARCHIV~1\Softwin\BITDEF~1\bdswitch.exe"
O4 - HKCU\..\Run: [MessengerPlus3] "C:\Archivos de programa\MessengerPlus! 3\MsgPlus.exe" /WinStart
O4 - HKCU\..\Run: [msnmsgr] "C:\Archivos de programa\MSN Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}] "C:\Archivos de programa\Archivos comunes\Ahead\Lib\NMBgMonitor.exe"
O4 - Startup: Adobe Gamma.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Startup: Xfire.lnk = C:\Archivos de programa\Xfire\xfire.exe
O8 - Extra context menu item: &Google Search - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmsearch.html
O8 - Extra context menu item: &Translate English Word - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmwordtrans.html
O8 - Extra context menu item: Backward Links - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmbacklinks.html
O8 - Extra context menu item: Cached Snapshot of Page - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmcache.html
O8 - Extra context menu item: Similar Pages - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmsimilar.html
O8 - Extra context menu item: Translate Page into English - res://c:\archivos de programa\google\GoogleToolbar1.dll/cmtrans.html
O16 - DPF: {0EB0E74A-2A76-4AB3-A7FB-9BD8C29F7F75} (CKAVWebScan Object) - http://www.kaspersky.com/kos/english/kavwebscan_unicode.cab
O16 - DPF: {193C772A-87BE-4B19-A7BB-445B226FE9A1} (ewidoOnlineScan Control) - http://download.ewido.net/ewidoOnlineScan.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{935DE232-9904-4226-A595-CA8B6BD3DDF5}: NameServer = 80.58.0.33,80.58.32.97
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\ARCHIV~1\MSNMES~1\MSGRAP~1.DLL
O23 - Service: Adobe LM Service - Adobe Systems - C:\Archivos de programa\Archivos comunes\Adobe Systems Shared\Service\Adobelmsvc.exe
O23 - Service: BitDefender Scan Server (bdss) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Scan Server\bdss.exe" /service (file missing)
O23 - Service: BitDefender Desktop Update Service (LIVESRV) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Update Service\livesrv.exe" /service (file missing)
O23 - Service: NBService - Nero AG - C:\Archivos de programa\Nero\Nero 7\Nero BackItUp\NBService.exe
O23 - Service: Panda anti-virus service (PAVSRV) - Panda Software - C:\Archivos de programa\Panda Software\Panda Antivirus Titanium\Pavsrv51.exe
O23 - Service: PC Tools Spyware Doctor (SDhelper) - PC Tools - C:\Archivos de programa\Spyware Doctor\sdhelp.exe
O23 - Service: BitDefender Virus Shield (VSSERV) - Unknown owner - C:\Archivos de programa\Softwin\BitDefender9\vsserv.exe" /service (file missing)
O23 - Service: BitDefender Communicator (XCOMM) - Unknown owner - C:\Archivos de programa\Archivos comunes\Softwin\BitDefender Communicator\xcommsvr.exe" /service (file missing)

Salu2