Foro de InfoSpyware - Foro de Hijackthis - Foro de Virus

Hola, Tengo Un Problema Desde Hace Meses, Hace Poco Tuve Problemas Con La Pagina About:blank Y Me Ayudaron Mucho,mi Problema Es El Siguiente Tengo Xp Pero El Internet No Entra, Osea Se Conecta Por Unos Minutos Y Luego Dice No Se Puede Encontrar El Servidor, Pero Si Lo Pongo En Modo A Prueba De Errores Entra Sin Problemas Pero Asi Se Me Es Dificil Trabajar,le E Pasado Antivirus , El Spybot , El Ad-ware Se, Y Me Sale Limpia Tengo Como 9 Meses Con Este Problema,si Lo Conecto A Otra Pc No Da Problemas , No Quiero Formatearla
Agradecia Que Alguien Me Ayude
Gracias

Hola

Bueno, el problema puede estar causado por muchas cosas, te recomiendo que uses el ad-aware o el hijackthis para generar un reporte, luego lo pegas aquí y nos lo mandas para poder ver que está pasando.

También puedes usar el Process Explorer para generar una lista de los procesos que están siendo ejeuctados y eso nos ayudará mucho.

Trata de ejecutar esas herramientas con todos los demás programas cerrados y conectada a internet.

Estaremos pendientes.

Felicidad

Este es el resultado que me da HijackThis,pero lo pase en modo a prueba de errores no se si esta bien,de donde instalo el otro programa (PROCESS EXPLORER), y como entro no entiendo nada de ingles.
GRACIAS
Logfile of HijackThis v1.99.1
Scan saved at 9:06:22, on 05/03/2005
Platform: Windows XP (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 (6.00.2600.0000)

Running processes:
D:\WINDOWS\System32\smss.exe
D:\WINDOWS\system32\winlogon.exe
D:\WINDOWS\system32\services.exe
D:\WINDOWS\system32\lsass.exe
D:\WINDOWS\system32\svchost.exe
D:\WINDOWS\System32\svchost.exe
D:\WINDOWS\Explorer.EXE
D:\Archivos de programa\Internet Explorer\IEXPLORE.EXE
C:\hijackthis\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://www.hotmail.com
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName = Vínculos
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - D:\Archivos de programa\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - D:\ARCHIV~1\SPYBOT~1\SDHelper.dll
O2 - BHO: CNavExtBho Class - {BDF3E430-B101-42AD-A544-FADC6B084872} - D:\Archivos de programa\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: Norton AntiVirus - {42CDD1BF-3FFB-4238-8AD1-7859DF00B1D6} - D:\Archivos de programa\Norton AntiVirus\NavShExt.dll
O3 - Toolbar: &Radio - {8E718888-423F-11D2-876E-00A0C9082467} - D:\WINDOWS\System32\msdxm.ocx
O4 - HKLM\..\Run: [gcasServ] "D:\Archivos de programa\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKCU\..\Run: [MSMSGS] "D:\Archivos de programa\Messenger\msmsgs.exe" /background
O12 - Plugin for .pdf: D:\Archivos de programa\Internet Explorer\PLUGINS\nppdf32.dll
O16 - DPF: {4F1E5B1A-2A80-42CA-8532-2D05CB959537} (MSN Photo Upload Tool) - http://by2fd.bay2.hotmail.msn.com/re...s/MsnPUpld.cab
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://www.pandasoftware.com/activescan/as5/asinst.cab
O16 - DPF: {B38870E4-7ECB-40DA-8C6A-595F0A5519FF} (MsnMessengerSetupDownloadControl Class) - http://messenger.msn.com/download/ms...downloader.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{50F55DD0-7089-4DF6-A6BB-FA5E05DEBD07}: NameServer = 165.98.148.2,165.98.145.2
O17 - HKLM\System\CS1\Services\Tcpip\..\{50F55DD0-7089-4DF6-A6BB-FA5E05DEBD07}: NameServer = 165.98.148.2,165.98.145.2
O17 - HKLM\System\CS2\Services\Tcpip\..\{50F55DD0-7089-4DF6-A6BB-FA5E05DEBD07}: NameServer = 165.98.148.2,165.98.145.2
O23 - Service: activePDF DocConverter (APDOCCONV) - activePDF, Inc. - D:\WINDOWS\System32\APDOCCNV.EXE
O23 - Service: Symantec Event Manager (ccEvtMgr) - Symantec Corporation - D:\Archivos de programa\Archivos comunes\Symantec Shared\ccEvtMgr.exe
O23 - Service: Symantec Password Validation Service (ccPwdSvc) - Symantec Corporation - D:\Archivos de programa\Archivos comunes\Symantec Shared\ccPwdSvc.exe
O23 - Service: Symantec Proxy Service (ccPxySvc) - Unknown owner - D:\Archivos de programa\Norton Internet Security\ccPxySvc.exe (file missing)
O23 - Service: License Management Service ESD - Unknown owner - D:\Archivos de programa\Archivos comunes\element5 Shared\Service\Licence Manager ESD.exe
O23 - Service: Norton AntiVirus Auto Protect Service (navapsvc) - Symantec Corporation - D:\Archivos de programa\Norton AntiVirus\navapsvc.exe
O23 - Service: Norton Internet Security Accounts Manager (NISUM) - Unknown owner - D:\Archivos de programa\Norton Internet Security\NISUM.EXE (file missing)
O23 - Service: PCTEL Speaker Phone (Pctspk) - PCtel, Inc. - D:\WINDOWS\system32\pctspk.exe
O23 - Service: ScriptBlocking Service (SBService) - Symantec Corporation - D:\ARCHIV~1\ARCHIV~1\SYMANT~1\SCRIPT~1\SBServ.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - D:\Archivos de programa\Archivos comunes\Symantec Shared\Security Center\SymWSC.exe

Process PID CPU Description Company Name
System Idle Process 0 95.38
Interrupts n/a Hardware Interrupts
DPCs n/a Deferred Procedure Calls
System 4
smss.exe 476 Windows NT Session Manager Microsoft Corporation
csrss.exe 532 3.08 Client Server Runtime Process Microsoft Corporation
winlogon.exe 556 Aplicación de inicio de sesión de Windows NT Microsoft Corporation
services.exe 600 Aplicación de servicios y controlador Microsoft Corporation
svchost.exe 784 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 872 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1024 Generic Host Process for Win32 Services Microsoft Corporation
svchost.exe 1044 Generic Host Process for Win32 Services Microsoft Corporation
lsass.exe 612 LSA Shell (Export Version) Microsoft Corporation
explorer.exe 1304 Explorador de Windows Microsoft Corporation
procexp.exe 348 1.54 Sysinternals Process Explorer Sysinternals

Process: System Idle Process Pid: 0

Type Name
Process PID CPU Description Company Name
System Idle Process 0 86.15
explorer.exe 1304 1.54 Explorador de Windows Microsoft Corporation

Process: explorer.exe Pid: 1304

Type Name
Desktop \Default
Directory \Windows
Directory \BaseNamedObjects
Directory \KnownDlls
Event \BaseNamedObjects\userenv: User Profile setup event
Event \BaseNamedObjects\crypt32LogoffEvent
Event \BaseNamedObjects\ShellReadyEvent
Event \BaseNamedObjects\userenv: Machine Group Policy has been applied
Event \BaseNamedObjects\userenv: User Group Policy has been applied
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\All Users\Escritorio
File D:\Documents and Settings\Claudia\Escritorio
File D:\Documents and Settings\Claudia\Configuración local\Application Data\Microsoft\CD Burning
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\NamedPipe\ntsvcs
File D:\Documents and Settings\All Users\Menú Inicio
File D:\Documents and Settings\Claudia\Menú Inicio
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Dfs
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\KsecDD
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Configuración local\Archivos temporales de Internet\Content.IE5\index.dat
File D:\Documents and Settings\Claudia\Cookies\index.dat
File D:\Documents and Settings\Claudia\Configuración local\Historial\History.IE5\index.dat
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Configuración local\Historial\History.IE5\MSHist0120050305200503 06\index.dat
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.GdiPlus_65 95b64144ccf1df_1.0.2600.1360_x-ww_24a2ed47
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File \Device\NamedPipe\srvsvc
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
File D:\Documents and Settings\Claudia\Datos de programa\Microsoft\SystemCertificates\My
File C:\procexpnt
File \Device\Tcp
File \Device\Afd
File \Device\Tcp
File D:\
File D:\WINDOWS\WinSxS\x86_Microsoft.Windows.Common-Controls_6595b64144ccf1df_6.0.0.0_x-ww_1382d70a
Key HKCU\Software\Microsoft\Plus!\Themes\Apply
Key HKCU\Control Panel\Appearance\New Schemes
Key HKCU\Control Panel\Appearance\New Schemes\21
Key HKCU\Control Panel\Appearance\New Schemes\21
Key HKCU\Control Panel\Appearance\New Schemes\21\Sizes\0
Key HKCU\Software\Classes
Key HKCR\http\shell
Key HKCU\Software\Classes
Key HKLM
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKU
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\FileExts
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Global
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Sites
Key HKCU\Software\Microsoft\Windows\Shell
Key HKCU\Software\Classes\CLSID
Key HKCU\Software\Microsoft\Windows\ShellNoRoam
Key HKCU\Software\Microsoft\Windows\ShellNoRoam\MUICac he
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\Windows\Shell
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SYSTEM\ControlSet001\Control\NetworkProvider\ HwOrder
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\UserAssist\{75048700-EF1F-11D0-9888-006097DEACF9}\Count
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\UserAssist\{5E6AB780-7743-11CF-A12B-00AA004AE837}\Count
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\TypedURLs
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap
Key HKCU\Software\Microsoft\Windows\ShellNoRoam\Bags\3 3\Shell
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Drivers32
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer\RunMRU
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\ROOT
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKLM\SYSTEM\Setup
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\P3P\History
Key HKCU\Software\Classes
Key HKCU
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Sites
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Internet Explorer\Security\P3Global
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU\Software\Classes
Key HKCU
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Roo t
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\CA
Key HKCU\Software\Microsoft\SystemCertificates\CA
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\AuthRoo t
Key HKCU\Software\Microsoft\SystemCertificates\Root
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\CA
Key HKCU\Software\Microsoft\SystemCertificates\trust
Key HKCU
Key HKLM\SOFTWARE\Microsoft\SystemCertificates\trust
Key HKLM\SOFTWARE\Microsoft\EnterpriseCertificates\Tru st
Key HKCU\Software\Microsoft\SystemCertificates\My
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKLM\SOFTWARE\Policies\Microsoft\SystemCertificate s
Key HKCU\Software\Policies\Microsoft\SystemCertificate s
Key HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Network\World Full Access Shared Parameters
Key HKCU\Software\Policies\Microsoft\SystemCertificate s
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parame ters\Protocol_Catalog9
Key HKLM\SYSTEM\ControlSet001\Services\WinSock2\Parame ters\NameSpace_Catalog5
Key HKLM\SOFTWARE\Microsoft\Tracing\RASAPI32
Key HKCU
Key HKLM\SYSTEM\ControlSet001\Hardware Profiles\0001
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Int ernet Settings\ZoneMap
Key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKCR
Key HKCU\Software\Classes
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKCR
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCR
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKU
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKLM\SOFTWARE\Microsoft\COM3
Key HKCR\CLSID
Key HKCU\Software\Classes
Key HKCU\Software\Microsoft\Windows\CurrentVersion\Exp lorer
Key HKCU\Software\Classes
KeyedEvent \KernelObjects\CritSecOutOfMemoryEvent
Mutant \BaseNamedObjects\MSUIM.GlobalLangBarEventSink.Mut ex
Mutant \BaseNamedObjects\MSUIM.GlobalCompartment.Mutex
Mutant \BaseNamedObjects\MSUIM.Assembly.Mutex
Mutant \BaseNamedObjects\MSUIM.Layouts.Mutex
Mutant \BaseNamedObjects\MSUIM.MarshalInterfaceMutex.TMD
Mutant \BaseNamedObjects\MSCTF.TimListMUTEX.
Mutant \BaseNamedObjects\_SHuassist.mtx
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!historial!history.ie5!mshist0120050305200503 06!
Mutant \BaseNamedObjects\RasPbFile
Mutant \BaseNamedObjects\WininetStartupMutex
Mutant \BaseNamedObjects\WininetConnectionMutex
Mutant \BaseNamedObjects\_!MSFTHISTORY!_
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!archivos temporales de internet!content.ie5!
Mutant \BaseNamedObjects\d:!documents and settings!claudia!cookies!
Mutant \BaseNamedObjects\d:!documents and settings!claudia!configuración local!historial!history.ie5!
Mutant \BaseNamedObjects\WininetProxyRegistryMutex
Mutant \BaseNamedObjects\ZonesCounterMutex
Mutant \BaseNamedObjects\ZonesCacheCounterMutex
Mutant \BaseNamedObjects\_!SHMSFTHISTORY!_
Mutant \BaseNamedObjects\ExplorerIsShellMutex
Mutant \BaseNamedObjects\ShimCacheMutex
Port \RPC Control\OLE6C269EDEE1AC46C4AF776567B4FF
Section \BaseNamedObjects\CiceroSharedMemDefault
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Historial_History.IE5_MSHist0120050305200503 06_index.dat_32768
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Archivos temporales de Internet_Content.IE5_index.dat_6438912
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Configuración local_Historial_History.IE5_index.dat_409600
Section \BaseNamedObjects\D:_Documents and Settings_Claudia_Cookies_index.dat_65536
Section \BaseNamedObjects\UrlZonesSM_Claudia
Section \BaseNamedObjects\ShimSharedMemory
Section \BaseNamedObjects\__R_000000000007_SMem__
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{210A4BA0-3AEA-1069-A2D9-08002B30309D}
Semaphore \BaseNamedObjects\shell.{7CB834F0-527B-11D2-9D1F-0000F805CA57}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{A48F1A32-A340-11D1-BC6B-00A0C90312E1}
Semaphore \BaseNamedObjects\shell.{6D5313C0-8C62-11D1-B2CD-006097DF8C11}
Semaphore \BaseNamedObjects\shell.{090851A5-EB96-11D2-8BE4-00C04FA31A66}
Thread explorer.exe(1304): 1312
Thread explorer.exe(1304): 1424
Thread explorer.exe(1304): 1432
Thread explorer.exe(1304): 1436
Thread explorer.exe(1304): 1444
Thread explorer.exe(1304): 1456
Thread explorer.exe(1304): 1456
Thread explorer.exe(1304): 340
Thread explorer.exe(1304): 1428
Thread explorer.exe(1304): 1960
Thread explorer.exe(1304): 248
Thread explorer.exe(1304): 2008
Thread explorer.exe(1304): 256
Token NT AUTHORITY\SYSTEM
WindowStation \Windows\WindowStations\WinSta0
WindowStation \Windows\WindowStations\WinSta0

espero que con esto me puedas ayudar muchas gracias

Supongo que habrá alguna linea a borrar en el log, pero no creo que sea la fuente de tu problema.

Sin embargo si te puedo recomendar que actualices tu winXP pues así como lo tienes es un queso con tantos agujeros que casi no tienes queso.