El inmortal STARPAGE 19.AO (soluciondo) He seguido los pasos indicados en los tutoriales, incluso en temas que plantean problemas similares, pero el no puedo eliminar de mi sistema el StarPage 19.AO de porquería. El antivirus (AVG actualizado) solamente lo detecta cuando se activa y le ordeno que elimine el archivo que me indica (siempre un .dll de nombre diferente).
He aquí los pasos y logs que he seguido:
Ejecuto el SpSeHjfix112.exe y obtengo este log:
(7/28/05 07:31:31 p.m.) SPSeHjFix started v1.1.2
(7/28/05 07:31:31 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 07:31:31 p.m.) Language: español
(7/28/05 07:31:31 p.m.) Win-Path: C:\WINDOWS
(7/28/05 07:31:31 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 07:31:31 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 07:31:32 p.m.) Disinfection started
(7/28/05 07:31:32 p.m.) Bad-Dll(IEP): c:\windows\system32\bdkzi.dll
(7/28/05 07:31:32 p.m.) UBF: 4 - UBB: 0 - UBR: 59
(7/28/05 07:31:32 p.m.) UBF: 4 - UBB: 0 - UBR: 59
(7/28/05 07:31:32 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\bdkzi.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\bdkzi.dll/sp.html#37049
(7/28/05 07:31:32 p.m.) Stealth-String not found
(7/28/05 07:31:32 p.m.) No locked Files to delete. End without Reboot
(7/28/05 07:54:38 p.m.) SPSeHjFix started v1.1.2
(7/28/05 07:54:38 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 07:54:38 p.m.) Language: español
(7/28/05 07:54:38 p.m.) Win-Path: C:\WINDOWS
(7/28/05 07:54:38 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 07:54:38 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 07:54:40 p.m.) Disinfection started
(7/28/05 07:54:40 p.m.) Bad-Dll(IEP): c:\windows\system32\efafq.dll
(7/28/05 07:54:40 p.m.) UBF: 4 - UBB: 0 - UBR: 58
(7/28/05 07:54:40 p.m.) UBF: 4 - UBB: 0 - UBR: 58
(7/28/05 07:54:40 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\efafq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\efafq.dll/sp.html#37049
(7/28/05 07:54:40 p.m.) Stealth-String not found
(7/28/05 07:54:40 p.m.) No locked Files to delete. End without Reboot
(7/28/05 08:11:28 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:11:28 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:11:28 p.m.) Language: español
(7/28/05 08:11:28 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:11:28 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:11:28 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:11:31 p.m.) Disinfection started
(7/28/05 08:11:31 p.m.) Bad-Dll(IEP): c:\windows\system32\zqnih.dll
(7/28/05 08:11:31 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:11:31 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:11:31 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\zqnih.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\zqnih.dll/sp.html#55135
(7/28/05 08:11:31 p.m.) Stealth-String not found
(7/28/05 08:11:31 p.m.) No locked Files to delete. End without Reboot
(7/28/05 08:13:40 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:13:40 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:13:40 p.m.) Language: español
(7/28/05 08:13:40 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:13:40 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:13:40 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:13:42 p.m.) Disinfection started
(7/28/05 08:13:42 p.m.) Bad-Dll(IEP): (not found)
(7/28/05 08:13:42 p.m.) Bad-Dll(IEP) in BHO: (not found)
(7/28/05 08:13:42 p.m.) UBF: 4 - UBB: 8 - UBR: 53
(7/28/05 08:13:42 p.m.) UBF: 4 - UBB: 8 - UBR: 53
(7/28/05 08:13:42 p.m.) Bad IE-pages: (none)
(7/28/05 08:13:42 p.m.) Stealth-String not found
(7/28/05 08:13:42 p.m.) Not infected->END
(7/28/05 08:32:46 p.m.) SPSeHjFix started v1.1.2
(7/28/05 08:32:46 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/28/05 08:32:46 p.m.) Language: español
(7/28/05 08:32:46 p.m.) Win-Path: C:\WINDOWS
(7/28/05 08:32:46 p.m.) System-Path: C:\WINDOWS\system32
(7/28/05 08:32:46 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/28/05 08:32:48 p.m.) Disinfection started
(7/28/05 08:32:48 p.m.) Bad-Dll(IEP): c:\windows\system32\tvfnb.dll
(7/28/05 08:32:48 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:48 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:48 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\tvfnb.dll/sp.html#55135
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\tvfnb.dll/sp.html#55135
(7/28/05 08:32:48 p.m.) Stealth-String not found
(7/28/05 08:32:48 p.m.) No locked Files to delete. End without Reboot
(7/28/05 08:32:50 p.m.) Disinfection started
(7/28/05 08:32:50 p.m.) Bad-Dll(IEP): c:\windows\system32\tvfnb.dll
(7/28/05 08:32:50 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:50 p.m.) UBF: 4 - UBB: 0 - UBR: 53
(7/28/05 08:32:50 p.m.) Bad IE-pages: (none)
(7/28/05 08:32:50 p.m.) Stealth-String not found
(7/28/05 08:32:50 p.m.) No locked Files to delete. End without Reboot
(7/29/05 07:15:41 p.m.) SPSeHjFix started v1.1.2
(7/29/05 07:15:41 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/29/05 07:15:41 p.m.) Language: español
(7/29/05 07:15:41 p.m.) Win-Path: C:\WINDOWS
(7/29/05 07:15:41 p.m.) System-Path: C:\WINDOWS\system32
(7/29/05 07:15:41 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/29/05 07:15:50 p.m.) Disinfection started
(7/29/05 07:15:50 p.m.) Bad-Dll(IEP): c:\windows\system32\lrmxq.dll
(7/29/05 07:15:50 p.m.) UBF: 4 - UBB: 1 - UBR: 66
(7/29/05 07:15:50 p.m.) UBF: 4 - UBB: 1 - UBR: 66
(7/29/05 07:15:50 p.m.) Bad IE-pages:
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKCU\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Bar: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Search Page: res://c:\windows\system32\lrmxq.dll/sp.html#37049
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Start Page: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Page_URL: about:blank
deleted: HKLM\Software\Microsoft\Internet Explorer\Main, Default_Search_URL: res://c:\windows\system32\lrmxq.dll/sp.html#37049
(7/29/05 07:15:50 p.m.) Stealth-String not found
(7/29/05 07:15:50 p.m.) No locked Files to delete. End without Reboot
(7/29/05 07:18:56 p.m.) SPSeHjFix started v1.1.2
(7/29/05 07:18:56 p.m.) OS: WinXP Service Pack 2 (5.1.2600)
(7/29/05 07:18:56 p.m.) Language: español
(7/29/05 07:18:56 p.m.) Win-Path: C:\WINDOWS
(7/29/05 07:18:56 p.m.) System-Path: C:\WINDOWS\system32
(7/29/05 07:18:56 p.m.) Temp-Path: C:\DOCUME~1\Raul\CONFIG~1\Temp\
(7/29/05 07:18:57 p.m.) Disinfection started
(7/29/05 07:18:57 p.m.) Bad-Dll(IEP): (not found)
(7/29/05 07:18:57 p.m.) Bad-Dll(IEP) in BHO: (not found)
(7/29/05 07:18:57 p.m.) UBF: 4 - UBB: 12 - UBR: 59
(7/29/05 07:18:57 p.m.) UBF: 4 - UBB: 12 - UBR: 59
(7/29/05 07:18:57 p.m.) Bad IE-pages: (none)
(7/29/05 07:18:57 p.m.) Stealth-String not found
(7/29/05 07:18:57 p.m.) Not infected->END
Después ejecuto el HijackThis.exe, con el siguiente log:
Logfile of HijackThis v1.99.1
Scan saved at 07:19:48 p.m., on 29/07/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
C:\Archivos de programa\Archivos comunes\Microsoft Shared\VS7Debug\mdm.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\sysvq32.exe
C:\WINDOWS\SOUNDMAN.EXE
C:\Archivos de programa\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgcc.exe
C:\ARCHIV~1\Grisoft\AVGFRE~1\avgemc.exe
C:\ARCHIV~1\PESTPA~1\PPControl.exe
C:\ARCHIV~1\PESTPA~1\PPMemCheck.exe
C:\ARCHIV~1\PESTPA~1\CookiePatrol.exe
C:\WINDOWS\system32\ctfmon.exe
C:\Archivos de programa\WinZip\WZQKPICK.EXE
C:\WINDOWS\system32\wuauclt.exe
C:\WINDOWS\system32\NOTEPAD.EXE
C:\hjk\HijackThis.exe
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R3 - Default URLSearchHook is missing
O2 - BHO: Class - {344A6FA4-D907-A113-AE32-AD1D33AAF46D} - C:\WINDOWS\sdkya.dll
O2 - BHO: Class - {63EC0566-AADA-7B19-96E8-E6A70595EAC3} - C:\WINDOWS\ietg32.dll
O2 - BHO: Class - {6EB9121A-3517-F0F4-C72C-70B7B624BBD3} - C:\WINDOWS\javact32.dll
O2 - BHO: Class - {927E57D6-F30D-0656-3454-9DCE557E5E8E} - C:\WINDOWS\system32\sysxr32.dll
O2 - BHO: Class - {93BFB8F2-03A3-99FE-9334-80CF27AC5B53} - C:\WINDOWS\addtp32.dll
O2 - BHO: Class - {9B8792A5-DF6B-F04D-6FA8-5369E8EDCD35} - C:\WINDOWS\mfced.dll
O2 - BHO: Class - {AC5DA795-EB4D-33C1-2B1B-233A235E8A80} - C:\WINDOWS\ntup.dll
O2 - BHO: Class - {B74D7ADF-0D9A-236B-88D0-5341D065D6CE} - C:\WINDOWS\system32\iejx32.dll
O2 - BHO: Class - {CF536988-EE50-E2B0-2D9E-8E95C2CE963D} - C:\WINDOWS\mfcqo.dll
O2 - BHO: Class - {D2F5D9A4-C618-A8DE-BD9E-602C1BFB1EA1} - C:\WINDOWS\addas32.dll
O2 - BHO: Class - {E7F1CA25-18BA-5AA2-86D0-F9E3A0C2CA0D} - C:\WINDOWS\sysvq32.dll
O2 - BHO: Class - {F3F316D9-A203-593F-7A70-A6A52D8F46FA} - C:\WINDOWS\system32\mfcge.dll
O2 - BHO: Class - {FEE368F6-CDED-E405-5743-6CA2066D78A7} - C:\WINDOWS\system32\sdkak.dll
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [MMTray] C:\Archivos de programa\MUSICMATCH\MUSICMATCH Jukebox\mm_tray.exe
O4 - HKLM\..\Run: [NeroFilterCheck] C:\WINDOWS\system32\NeroCheck.exe
O4 - HKLM\..\Run: [RemoteControl] "C:\Archivos de programa\CyberLink\PowerDVD\PDVDServ.exe"
O4 - HKLM\..\Run: [AVG7_CC] C:\ARCHIV~1\Grisoft\AVGFRE~1\avgcc.exe /STARTUP
O4 - HKLM\..\Run: [AVG7_EMC] C:\ARCHIV~1\Grisoft\AVGFRE~1\avgemc.exe
O4 - HKLM\..\Run: [netkr.exe] C:\WINDOWS\netkr.exe
O4 - HKLM\..\Run: [mfcir32.exe] C:\WINDOWS\system32\mfcir32.exe
O4 - HKLM\..\Run: [sdkhx32.exe] C:\WINDOWS\system32\sdkhx32.exe
O4 - HKLM\..\Run: [netwt32.exe] C:\WINDOWS\netwt32.exe
O4 - HKLM\..\Run: [addvd.exe] C:\WINDOWS\addvd.exe
O4 - HKLM\..\Run: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe
O4 - HKLM\..\Run: [nethx.exe] C:\WINDOWS\nethx.exe
O4 - HKLM\..\Run: [mscq32.exe] C:\WINDOWS\system32\mscq32.exe
O4 - HKLM\..\Run: [syspm.exe] C:\WINDOWS\syspm.exe
O4 - HKLM\..\Run: [sdkif32.exe] C:\WINDOWS\system32\sdkif32.exe
O4 - HKLM\..\Run: [winae.exe] C:\WINDOWS\winae.exe
O4 - HKLM\..\Run: [mfcbi32.exe] C:\WINDOWS\system32\mfcbi32.exe
O4 - HKLM\..\Run: [atlvv.exe] C:\WINDOWS\system32\atlvv.exe
O4 - HKLM\..\Run: [netxf.exe] C:\WINDOWS\netxf.exe
O4 - HKLM\..\Run: [ipep.exe] C:\WINDOWS\ipep.exe
O4 - HKLM\..\Run: [PestPatrol Control Center] C:\ARCHIV~1\PESTPA~1\PPControl.exe
O4 - HKLM\..\Run: [PPMemCheck] C:\ARCHIV~1\PESTPA~1\PPMemCheck.exe
O4 - HKLM\..\Run: [CookiePatrol] C:\ARCHIV~1\PESTPA~1\CookiePatrol.exe
O4 - HKLM\..\Run: [msvp32.exe] C:\WINDOWS\msvp32.exe
O4 - HKLM\..\Run: [winfz32.exe] C:\WINDOWS\winfz32.exe
O4 - HKLM\..\Run: [winrj32.exe] C:\WINDOWS\winrj32.exe
O4 - HKLM\..\Run: [atlxk.exe] C:\WINDOWS\system32\atlxk.exe
O4 - HKLM\..\Run: [javawg32.exe] C:\WINDOWS\system32\javawg32.exe
O4 - HKLM\..\Run: [javazi32.exe] C:\WINDOWS\system32\javazi32.exe
O4 - HKLM\..\Run: [sdkub.exe] C:\WINDOWS\system32\sdkub.exe
O4 - HKLM\..\Run: [netse.exe] C:\WINDOWS\system32\netse.exe
O4 - HKLM\..\Run: [iexr32.exe] C:\WINDOWS\iexr32.exe
O4 - HKLM\..\Run: [d3gw32.exe] C:\WINDOWS\d3gw32.exe
O4 - HKLM\..\Run: [ntpd.exe] C:\WINDOWS\system32\ntpd.exe
O4 - HKLM\..\Run: [winmg.exe] C:\WINDOWS\system32\winmg.exe
O4 - HKLM\..\Run: [msvi.exe] C:\WINDOWS\system32\msvi.exe
O4 - HKLM\..\Run: [sysor32.exe] C:\WINDOWS\sysor32.exe
O4 - HKLM\..\Run: [sysvq32.exe] C:\WINDOWS\sysvq32.exe
O4 - HKLM\..\RunOnce: [javacs32.exe] C:\WINDOWS\javacs32.exe
O4 - HKLM\..\RunOnce: [netih.exe] C:\WINDOWS\system32\netih.exe
O4 - HKLM\..\RunOnce: [addhf32.exe] C:\WINDOWS\system32\addhf32.exe
O4 - HKLM\..\RunOnce: [ieif32.exe] C:\WINDOWS\system32\ieif32.exe
O4 - HKLM\..\RunOnce: [iehe32.exe] C:\WINDOWS\system32\iehe32.exe
O4 - HKLM\..\RunOnce: [addsm.exe] C:\WINDOWS\addsm.exe
O4 - HKLM\..\RunOnce: [netfn32.exe] C:\WINDOWS\system32\netfn32.exe
O4 - HKLM\..\RunOnce: [apird32.exe] C:\WINDOWS\system32\apird32.exe
O4 - HKLM\..\RunOnce: [d3lt32.exe] C:\WINDOWS\d3lt32.exe
O4 - HKLM\..\RunOnce: [apprg32.exe] C:\WINDOWS\system32\apprg32.exe
O4 - HKLM\..\RunOnce: [ipus.exe] C:\WINDOWS\system32\ipus.exe
O4 - HKLM\..\RunOnce: [addas32.exe] C:\WINDOWS\addas32.exe
O4 - HKLM\..\RunOnce: [appgr32.exe] C:\WINDOWS\appgr32.exe
O4 - HKLM\..\RunOnce: [addbn.exe] C:\WINDOWS\addbn.exe
O4 - HKLM\..\RunOnce: [appzz.exe] C:\WINDOWS\appzz.exe
O4 - HKLM\..\RunOnce: [ntau.exe] C:\WINDOWS\ntau.exe
O4 - HKLM\..\RunOnce: [crzj.exe] C:\WINDOWS\system32\crzj.exe
O4 - HKLM\..\RunOnce: [ipwt32.exe] C:\WINDOWS\system32\ipwt32.exe
O4 - HKLM\..\RunOnce: [atlvg32.exe] C:\WINDOWS\atlvg32.exe
O4 - HKLM\..\RunOnce: [mfcpi32.exe] C:\WINDOWS\mfcpi32.exe
O4 - HKCU\..\Run: [CTFMON.EXE] C:\WINDOWS\system32\ctfmon.exe
O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office10\OSA.EXE
O4 - Global Startup: Adobe Gamma Loader.lnk = C:\Archivos de programa\Archivos comunes\Adobe\Calibration\Adobe Gamma Loader.exe
O4 - Global Startup: WinZip Quick Pick.lnk = C:\Archivos de programa\WinZip\WZQKPICK.EXE
O8 - Extra context menu item: E&xportar a Microsoft Excel - res://C:\ARCHIV~1\MICROS~2\Office10\EXCEL.EXE/3000
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Archivos de programa\Messenger\msmsgs.exe
O16 - DPF: {644E432F-49D3-41A1-8DD5-E099162EEEC5} (Symantec RuFSI Utility Class) - http://security.symantec.com/sscv6/SharedContent/common/bin/cabsa.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\javacs32.exe" /s (file missing)
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVGFRE~1\avgamsvr.exe
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - GRISOFT, s.r.o. - C:\ARCHIV~1\Grisoft\AVGFRE~1\avgupsvc.exe
Aquí marco todas las entradas R0,
la O23 - Service: Network Security Service ( 11Fßä#·ºÄÖ`I) - Unknown owner - C:\WINDOWS\javacs32.exe" /s (file missing),
Le doy a fix checked, reinicio en Modo Seguro, elimino todos los temporales, coockies, temporales de internet, etc
Ejecuto Ad-Aware SE Personal que en algunos casos elimina algunos procesos dañinos.
Reinicio
Abro el IE y...
¡SURPRISE!
El AVG me avisa que un .DLL tiene el ya parte de mi familia StarPage 19.AO.
Al volver a abrir el IE la página de inicio es about blank.
please help me!
Desde ya gracias. |