buenas tardes perdon por la tardanza de contestastar a continuacion le mando el reporte de fixwareout como decis
~~~~~ Prerun check
Successfully flushed the DNS Resolver Cache.
System was rebooted successfully.
~~~~~ Postrun check
HKLM\SOFTWARE\~\Winlogon\ "System"="lsass.exe"
....
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion "rytsc" Value deleted
HKCR\CLSID\{BED50F6E-F540-4371-ACB9-904481F17B1F}\_h\4 Deleted.
....
~~~~~ Misc files.
C:\Documents and Settings\paco\Application Data\wo.tmp Deleted
C:\WINDOWS\Help\SPAlert.chm Deleted
C:\WINDOWS\System32\filesafer23.exe Deleted
....
~~~~~ Checking for older varients.
....
~~~~~ Current runs (hklm hkcu "run" Keys Only)
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"NvCplDaemon"="RUNDLL32.EXE C:\\WINDOWS\\system32\\NvCpl.dll,NvStartup"
"SpeedTouch USB Diagnostics"=""
"SoundMAXPnP"="C:\\Program Files\\Analog Devices\\SoundMAX\\SMax4PNP.exe"
"SoundMAX"="C:\\Program Files\\Analog Devices\\SoundMAX\\Smax4.exe /tray"
"SunJavaUpdateSched"="\"C:\\Program
Files\\Java\\jre1.6.0_03\\bin\\jusched.exe\""
"nwiz"="nwiz.exe /install"
"NeroFilterCheck"="C:\\Program Files\\Common
Files\\Ahead\\Lib\\NeroCheck.exe"
"avast!"="C:\\PROGRA~1\\ALWILS~1\\Avast4\\ashDisp. exe"
"Adobe Photo Downloader"="\"C:\\Program Files\\Adobe\\Photoshop Album
Starter Edition\\3.2\\Apps\\apdproxy.exe\""
"Adobe Reader Speed Launcher"="\"C:\\Program Files\\Adobe\\Reader
8.0\\Reader\\Reader_sl.exe\""
"TomTomHOME.exe"="\"C:\\Program Files\\TomTom HOME 2\\HOMERunner.exe\" -s"
"QuickTime Task"="\"C:\\Program Files\\QuickTime\\qttask.exe\" -atboottime"
"nod32kui"="\"C:\\Program Files\\Eset\\nod32kui.exe\" /WAITSERVICE"
[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"BgMonitor_{79662E04-7C6C-4d9f-84C7-88D8A56B10AA}"="\"C:\\Program
Files\\Common Files\\Ahead\\Lib\\NMBgMonitor.exe\""
"swg"="C:\\Program
Files\\Google\\GoogleToolbarNotifier\\GoogleToolba rNotifier.exe"
"ctfmon.exe"="C:\\WINDOWS\\system32\\ctfmon.ex e"
"SUPERAntiSpyware"="C:\\Program
Files\\SUPERAntiSpyware\\SUPERAntiSpyware.exe"
....
Hosts file was reset, If you use a custom hosts file please replace it...
~~~~~ End report ~~~~~
, y ya me comentareis
un saludo.
A continuacion les mando reporterd de Delpsguard ya me comentareis
Un saludo DelPSGuard v 4.8.5
by
www.ForoSpyware.com
Escaneo a las: 20:32:01,92, 30/12/2007
SO: Microsoft Windows XP [Versi¢n 5.1.2600]
»»»»»»»»»»»» Carpetas y Archivos infectados »»»»»»»»»»»»
»»»»»»»»»»»» Programas Malwares »»»»»»»»»»»»
»»»»»»»»»»»» FIN »»»»»»»»»»»»