ya los elimine tanto elbhhm.dll, como el se.dll aunque al eliminar este ultimo me da un error al reiniciar y me pone que no se encuentra modulo especificago. te envi nuevo log:
Logfile of HijackThis v1.99.1
Scan saved at 8:30:22, on 29/03/2005
Platform: Windows 2000 SP4 (WinNT 5.00.2195)
MSIE: Internet Explorer v5.00 SP4 (5.00.2920.0000)
Running processes:
C:\Documents and Settings\Administrador\WINDOWS\System32\smss.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\services.exe
C:\WINNT\system32\lsass.exe
C:\WINNT\System32\termsrv.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\system32\spoolsv.exe
C:\WINNT\System32\msdtc.exe
C:\WINNT\System32\svchost.exe
C:\Archivos de programa\InterBase Corp\InterBase\bin\ibguard.exe
C:\WINNT\System32\llssrv.exe
C:\WINNT\system32\regsvc.exe
C:\WINNT\system32\MSTask.exe
C:\WINNT\System32\lserver.exe
C:\WINNT\System32\WBEM\WinMgmt.exe
C:\WINNT\system32\svchost.exe
C:\WINNT\System32\inetsrv\inetinfo.exe
C:\WINNT\system32\Dfssvc.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\WINNT\system32\csrss.exe
C:\WINNT\system32\winlogon.exe
C:\Archivos de programa\InterBase Corp\InterBase\bin\ibserver.exe
C:\WINNT\System32\svchost.exe
C:\WINNT\Explorer.EXE
C:\WINNT\SOUNDMAN.EXE
C:\Archivos de programa\Trust\Ami Mouse 300 Wireless Dual Scroll\Amoumain.exe
C:\Archivos de programa\Viewpoint\Viewpoint Manager\ViewMgr_.exe
C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe
C:\WINNT\system32\wuauclt.exe
C:\Documents and Settings\Administrador\Escritorio\HijackThis\Hijac kThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\se.dll/spage.html
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Bar = res://C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\se.dll/spage.html
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about
:blank
R1 - HKCU\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about
:blank
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant = about
:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page = C:\WINNT\system32\blank.htm
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about
:blank
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,HomeOldSP = about
:blank
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
F2 - REG:system.ini: UserInit=C:\WINNT\system32\userinit.exe,
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - c:\archivos de programa\mis programas\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\ARCHIV~1\MISPRO~1\Spybotsd\SPYBOT~1\SDHelper.dl l
O2 - BHO: (no name) - {BD1A612A-63B7-42CD-8DDF-D606BAD438B2} - C:\WINNT\system32\bhhm.dll (file missing)
O3 - Toolbar: @msdxmLC.dll,-1@3082,&Radio - {8E718888-423F-11D2-876E-00A0C9082467} - C:\WINNT\System32\msdxm.ocx
O4 - HKLM\..\Run: [SoundMan] SOUNDMAN.EXE
O4 - HKLM\..\Run: [NeroCheck] C:\WINNT\system32\NeroCheck.exe
O4 - HKLM\..\Run: [WheelMouse] Amoumain.exe
O4 - HKLM\..\Run: [ViewMgr] C:\Archivos de programa\Viewpoint\Viewpoint Manager\ViewMgr_.exe
O4 - HKLM\..\Run: [CloneCDTray] "C:\Archivos de programa\MIS PROGRAMAS\CloneCD\CloneCDTray.exe" /s
O4 - HKLM\..\Run: [sp] rundll32 C:\DOCUME~1\ADMINI~1\CONFIG~1\Temp\se.dll,DllInsta ll
O4 - HKCU\..\Run: [SpySweeper] "C:\Archivos de programa\Webroot\Spy Sweeper\SpySweeper.exe" /0
O4 - Global Startup: Microsoft Office.lnk = C:\Archivos de programa\Microsoft Office\Office\OSA9.EXE
O10 - Broken Internet access because of LSP provider 'c:\documents and settings\administrador\windows\system32\rnr20.dll' missing
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) -
http://www.pandasoftware.com/activescan/as5/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{100CC790-2336-4A47-A2EE-9BE860D79159}: NameServer = 194.224.52.4,194.224.52.6
O17 - HKLM\System\CS1\Services\Tcpip\..\{100CC790-2336-4A47-A2EE-9BE860D79159}: NameServer = 194.224.52.4,194.224.52.6
O17 - HKLM\System\CS2\Services\Tcpip\..\{100CC790-2336-4A47-A2EE-9BE860D79159}: NameServer = 194.224.52.4,194.224.52.6
O18 - Filter: text/html - {6E67ACB9-6AD2-4C03-A971-A2E56FFBDEFA} - C:\WINNT\system32\bhhm.dll
O18 - Filter: text/plain - {6E67ACB9-6AD2-4C03-A971-A2E56FFBDEFA} - C:\WINNT\system32\bhhm.dll
O23 - Service: Servicio de alerta (Alerter) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Administración de aplicaciones (AppMgmt) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: ASP.NET State Service (aspnet_state) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\Microsoft.NET\Frame work\v1.1.4322\aspnet_state.exe (file missing)
O23 - Service: Servicio de transferencia inteligente en segundo plano (BITS) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Examinador de equipos (Browser) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Portafolios (ClipSrv) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\clipsrv.ex e (file missing)
O23 - Service: Sistema de archivos distribuido (Dfs) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\Dfssvc.exe (file missing)
O23 - Service: Cliente DHCP (Dhcp) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Servicio del administrador de discos lógicos (dmadmin) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\dmadmin.ex e (file missing)
O23 - Service: Administrador de discos lógicos (dmserver) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Cliente DNS (Dnscache) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Registro de sucesos (Eventlog) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Servicio de fax (Fax) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\faxsvc.exe (file missing)
O23 - Service: InterBase Guardian (InterBaseGuardian) - InterBase Software Corp. - C:\Archivos de programa\InterBase Corp\InterBase\bin\ibguard.exe
O23 - Service: InterBase Server (InterBaseServer) - InterBase Software Corp. - C:\Archivos de programa\InterBase Corp\InterBase\bin\ibserver.exe
O23 - Service: Servidor (lanmanserver) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Estación de trabajo (lanmanworkstation) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Servicio de registro de licencias (LicenseService) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\llssrv.exe (file missing)
O23 - Service: Servicio de ayuda TCP/IP NetBIOS (LmHosts) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Mensajero (Messenger) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: DDE de red (NetDDE) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\netdde.exe (file missing)
O23 - Service: DSDM de DDE de red (NetDDEdsdm) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\netdde.exe (file missing)
O23 - Service: Inicio de sesión en red (Netlogon) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Conexiones de red (Netman) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Réplica de archivos (NtFrs) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\ntfrs.exe (file missing)
O23 - Service: Proveedor de asistencia de seguridad LM de Windows NT (NtLmSsp) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Medios de almacenamiento extraíbles (NtmsSvc) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Plug and Play (PlugPlay) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Agente de directivas IPSEC (PolicyAgent) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\lsass.exe (file missing)
O23 - Service: Almacenamiento protegido (ProtectedStorage) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Administrador de conexión automática de acceso remoto (RasAuto) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Administrador de conexión de acceso remoto (RasMan) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Servicio de Registro remoto (RemoteRegistry) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\regsvc.exe (file missing)
O23 - Service: Localizador de llamadas a procedimiento remoto (RPC) (RpcLocator) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\locator.ex e (file missing)
O23 - Service: Llamada a procedimiento remoto(RPC) (RpcSs) - Unknown owner - C:\Documents.exe (file missing)
O23 - Service: QoS RSVP (RSVP) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\rsvp.exe (file missing)
O23 - Service: Administrador de cuentas de seguridad (SamSs) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\lsass.exe (file missing)
O23 - Service: Sistema de ayuda de tarjeta inteligente (SCardDrv) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\SCardSvr.e xe (file missing)
O23 - Service: Tarjeta inteligente (SCardSvr) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\SCardSvr.e xe (file missing)
O23 - Service: Programador de tareas (Schedule) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\MSTask.exe (file missing)
O23 - Service: Servicio RunAs (seclogon) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Notificación de sucesos del sistema (SENS) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\svchost.ex e (file missing)
O23 - Service: Conexión compartida a Internet (SharedAccess) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Cola de impresión (Spooler) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\spoolsv.ex e (file missing)
O23 - Service: Registros y alertas de rendimiento (SysmonLog) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\smlogsvc.e xe (file missing)
O23 - Service: Telefonía (TapiSrv) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Servicios de Terminal Server (TermService) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\termsrv.ex e (file missing)
O23 - Service: Licencias de Servicios de Terminal Server (TermServLicensing) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\lserver.ex e (file missing)
O23 - Service: Telnet (TlntSvr) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\tlntsvr.ex e (file missing)
O23 - Service: Servidor de seguimiento de vínculos distribuidos (TrkSvr) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Cliente de seguimiento de vinculos distribuidos (TrkWks) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\services.e xe (file missing)
O23 - Service: Sistema de alimentación ininterrumpida (UPS) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\ups.exe (file missing)
O23 - Service: Administrador de utilidades (UtilMan) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\UtilMan.ex e (file missing)
O23 - Service: Horario de Windows (W32Time) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\services.e xe (file missing)
O23 - Service: Instrumental de administración de Windows (WinMgmt) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\WBEM\WinMg mt.exe (file missing)
O23 - Service: Portable Media Serial Number Service (WmdmPmSN) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)
O23 - Service: Exten. controlador Instrumental de admon. de Windows (Wmi) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\Services.e xe (file missing)
O23 - Service: Actualizaciones automáticas (wuauserv) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\system32\svchost.ex e (file missing)
O23 - Service: Configuración inalámbrica (WZCSVC) - Unknown owner - C:\Documents and Settings\Administrador\WINDOWS\System32\svchost.ex e (file missing)