Hola :dedosarri
•» Descarga el
Disk Cleaner
•» Desactiva la opcion de
Restaurar Sistema, una vez limpio la puedes volver a activar.
•» Asegura que tu sistema
Muestre los archivos y carpetas ocultos
•»
Reinicia en modo a prueba de fallos
•» Ejecuta el HijackThis
•» Selecciona las siguientes entradas y dale en Fix Checked:
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = res://C:\WINDOWS\system32\emwld.dll/sp.html#12345
R3 - Default URLSearchHook is missing
O2 - BHO: (no name) - {5AD1C8F8-A89B-7AC1-A165-9D86BEDAA202} - C:\WINDOWS\crbd32.dll
O4 - HKLM\..\Run: [97.tmp] C:\DOCUME~1\Moyica\CONFIG~1\Temp\97.tmp.exe 0 10001
O4 - HKLM\..\Run: [85.tmp.exe] C:\DOCUME~1\Moyica\CONFIG~1\Temp\85.tmp.exe 1 10001
O4 - HKLM\..\Run: [97.tmp.exe] C:\DOCUME~1\Moyica\CONFIG~1\Temp\97.tmp.exe 0 10001
O4 - HKLM\..\Run: [appwm32.exe] C:\WINDOWS\system32\appwm32.exe
O4 - HKLM\..\Run: [87.tmp.exe] C:\DOCUME~1\Moyica\CONFIG~1\Temp\87.tmp.exe 4 10001
O4 - HKLM\..\Run: [d3xl.exe] C:\WINDOWS\system32\d3xl.exe
O15 - Trusted Zone: *.05p.com
O15 - Trusted Zone: *.awmdabest.com
O15 - Trusted Zone: *.clickspring.net
O15 - Trusted Zone: *.frame.crazywinnings.com
O15 - Trusted Zone: *.mt-download.com
O15 - Trusted Zone: *.my-internet.info
O15 - Trusted Zone: *.scoobidoo.com
O15 - Trusted Zone: *.searchmiracle.com
O15 - Trusted Zone: *.static.topconverting.com
O15 - Trusted Zone: *.05p.com (HKLM)
O15 - Trusted Zone: *.awmdabest.com (HKLM)
O15 - Trusted Zone: *.clickspring.net (HKLM)
O15 - Trusted Zone: *.frame.crazywinnings.com (HKLM)
O15 - Trusted Zone: *.mt-download.com (HKLM)
O15 - Trusted Zone: *.my-internet.info (HKLM)
O15 - Trusted Zone: *.scoobidoo.com (HKLM)
O15 - Trusted Zone: *.searchmiracle.com (HKLM)
O15 - Trusted Zone: *.static.topconverting.com (HKLM)
O15 - Trusted IP range: 206.161.125.149
O15 - Trusted IP range: 206.161.125.149 (HKLM)
O23 - Service: Remote Procedure Call (RPC) Helper - Unknown - C:\WINDOWS\atljj32.exe
•» Busca y elimina lo siguiente:
C:\WINDOWS\system32\emwld.dll
C:\WINDOWS\crbd32.dll
C:\WINDOWS\system32\appwm32.exe
C:\WINDOWS\system32\d3xl.exe
C:\WINDOWS\atljj32.exe
•» Limpia la papelera
•» Reinicia normalmente
•» Utiliza el Disck Clenaer para eliminar todos los archivos temporales de tu sistema
•» Toma otro log del HijackThis y dejalo aqui
Saludos
