ola desde hace una semana se me vuelven a abrir ventanas de publicidad , especialmente de pc.on internet , ademas de otras de targetas de credito y mas........ publicidad la primera mencionada me avisa de que tengo un virus y al cerrarla me "obliga" a descargar un programa .......... es algo desesperante puesto que antes incluso de entrar a ninguna pagina al abrir google me entra; tengo activado el adblock y el no script de mozilla ; he pasado anty virus (nod32),adware ,spybot,ewido scan,superantyspiware ......... y todo me sale bien asi que si tengo algo no lo encuentro he intentado entrar en nodo prueba de fallos con f8 pero en vista no me deja ; bueno aqui os pongo mi log , si veis algo decidmelo os agradezco la ayuda si me la dais y si no es asi almenos gracias por leerme


Logfile of HijackThis v1.99.1
Scan saved at 10:04:46, on 03/02/2008
Platform: Unknown Windows (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Powercinema\PCMService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Adobe\Reader 8.0\Reader\Reader_SL.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\SECUREMAKER\SecureMaker.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Users\david\Desktop\HijackThis.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ares.mp3.es/start.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://format.packardbell.com/cgi-bin/redirect/?country=ES&range=AD&phase=8&key=IESTART
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Program Files\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - Global Startup: SECUREMAKER.lnk = C:\Program Files\SECUREMAKER\SecureMaker.exe
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\nlaapi.dll
O10 - Unknown file in Winsock LSP: c:\windows\system32\napinsp.dll
O11 - Options group: [INTERNATIONAL] International*
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O18 - Protocol: livecall - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O18 - Protocol: msnim - {828030A1-22C1-4009-854F-8E305202313F} - C:\PROGRA~1\WI1F86~1\MESSEN~1\MSGRAP~1.DLL
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe (file missing)
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe (file missing)
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe (file missing)
O23 - Service: AVG E-mail Scanner (AVGEMS) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: @%SystemRoot%\system32\qwave.dll,-1 (QWAVE) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: @%SystemRoot%\system32\seclogon.dll,-7001 (seclogon) - Unknown owner - %windir%\system32\svchost.exe (file missing)
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: Securemaker Disk Defragmenter Service (smdefrag) - Unknown owner - C:\Program Files\SECUREMAKER\smdefrag.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
O23 - Service: @%ProgramFiles%\Windows Media Player\wmpnetwk.exe,-101 (WMPNetworkSvc) - Unknown owner - %ProgramFiles%\Windows Media Player\wmpnetwk.exe (file missing)

Hola saltamontes66,

Estas usando una versión antigua de HijackThis, por lo que descarga y ejecuta la nueva versión de
*HijackThis 2.0.2 para generar y dejarnos un nuevo log en este mismo mensaje.

Salu2

gracias por el consejo aqui te dejo el log con el hijackthis 2.0.2 decdme algo please

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 19:23:01, on 04/02/2008
Platform: Windows Vista (WinNT 6.00.1904)
MSIE: Internet Explorer v7.00 (7.00.6000.16575)
Boot mode: Normal

Running processes:
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\Powercinema\PCMService.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Eset\nod32kui.exe
C:\Windows\System32\mobsync.exe
C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Users\david\AppData\Local\rpougcpde.exe
C:\Program Files\Common Files\Nokia\MPAPI\MPAPI3s.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\CPSHelpRunner.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\IEUser.exe
C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLLoginProxy.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Trend Micro\HijackThis\HijackThis.exe
C:\Windows\system32\SearchFilterHost.exe

R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://ares.mp3.es/start.php
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = http://go.microsoft.com/fwlink/?LinkId=69157
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,SearchAssistant =
R0 - HKLM\Software\Microsoft\Internet Explorer\Search,CustomizeSearch =
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKCU\Software\Microsoft\Internet Explorer\Toolbar,LinksFolderName =
R3 - URLSearchHook: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O1 - Hosts: ::1 localhost
O2 - BHO: Yahoo! Toolbar Helper - {02478D38-C3F9-4EFB-9B51-7695ECA05670} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O2 - BHO: Aplicación auxiliar de vínculos de Adobe PDF Reader - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\Program Files\Spybot - Search & Destroy\SDHelper.dll
O2 - BHO: SSVHelper Class - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)
O2 - BHO: Windows Live Aplicación auxiliar de inicio de sesión - {9030D464-4C02-4ABF-8ECC-5164760863C6} - C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll
O3 - Toolbar: Barra Yahoo! con bloqueador de ventanas emergentes - {EF99BD32-C1FB-11D2-892F-0090271D4F88} - C:\Program Files\Yahoo!\Companion\Installs\cpn\yt.dll
O4 - HKLM\..\Run: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
O4 - HKLM\..\Run: [RtHDVCpl] RtHDVCpl.exe
O4 - HKLM\..\Run: [RoxWatchTray] "C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe"
O4 - HKLM\..\Run: [PCMService] "c:\Program Files\Powercinema\PCMService.exe"
O4 - HKLM\..\Run: [MSConfig] "C:\Windows\system32\msconfig.exe" /auto
O4 - HKLM\..\Run: [NvSvc] RUNDLL32.EXE C:\Windows\system32\nvsvc.dll,nvsvcStart
O4 - HKLM\..\Run: [NvCplDaemon] RUNDLL32.EXE C:\Windows\system32\NvCpl.dll,NvStartup
O4 - HKLM\..\Run: [NvMediaCenter] RUNDLL32.EXE C:\Windows\system32\NvMcTray.dll,NvTaskbarInit
O4 - HKLM\..\Run: [Adobe Reader Speed Launcher] "C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe"
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [SunJavaUpdateSched] "C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe"
O4 - HKCU\..\Run: [Sidebar] C:\Program Files\Windows Sidebar\sidebar.exe /autoRun
O4 - HKCU\..\Run: [SmpcSys] C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe
O4 - HKCU\..\Run: [Speech Recognition] "C:\Windows\Speech\Common\sapisvr.exe" -SpeechUX -Startup
O4 - HKCU\..\Run: [ISUSPM] "C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" -scheduler
O4 - HKCU\..\Run: [WMPNSCFG] C:\Program Files\Windows Media Player\WMPNSCFG.exe
O4 - HKCU\..\Run: [PcSync] C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe /NoDialog
O4 - HKCU\..\Run: [msnmsgr] "C:\Program Files\Windows Live\Messenger\msnmsgr.exe" /background
O4 - HKCU\..\Run: [rpougcpde] c:\users\david\appdata\local\rpougcpde.exe rpougcpde
O4 - HKUS\S-1-5-19\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [WindowsWelcomeCenter] rundll32.exe oobefldr.dll,ShowWelcomeCenter (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-19\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SERVICIO LOCAL')
O4 - HKUS\S-1-5-20\..\Run: [Sidebar] %ProgramFiles%\Windows Sidebar\Sidebar.exe /detectMem (User 'Servicio de red')
O4 - HKUS\S-1-5-18\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'SYSTEM')
O4 - HKUS\.DEFAULT\..\Run: [AVG7_Run] C:\PROGRA~1\Grisoft\AVG7\avgw.exe /RUNONCE (User 'Default user')
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O9 - Extra 'Tools' menuitem: Consola de Sun Java - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.6.0_03\bin\ssv.dll
O13 - Gopher Prefix:
O16 - DPF: {30528230-99f7-4bb4-88d8-fa1d4f56a2ab} (YInstStarter Class) - C:\Program Files\Yahoo!\Common\yinsthelper.dll
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} (Shockwave Flash Object) - http://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
O20 - Winlogon Notify: !SASWinLogon - C:\Program Files\SUPERAntiSpyware\SASWINLO.dll
O20 - Winlogon Notify: avgwlntf - C:\Windows\SYSTEM32\avgwlntf.dll
O23 - Service: Ares Chatroom server (AresChatServer) - Ares Development Group - C:\Program Files\Ares\chatServer.exe
O23 - Service: AVG7 Alert Manager Server (Avg7Alrt) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgamsvr.exe (file missing)
O23 - Service: AVG7 Update Service (Avg7UpdSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgupsvc.exe (file missing)
O23 - Service: AVG7 Resident Shield Service (AvgCoreSvc) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgrssvc.exe (file missing)
O23 - Service: AVG E-mail Scanner (AVGEMS) - Unknown owner - C:\PROGRA~1\Grisoft\AVG7\avgemc.exe (file missing)
O23 - Service: CyberLink Background Capture Service (CBCS) (CLCapSvc) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLCapSvc.exe
O23 - Service: CyberLink Task Scheduler (CTS) (CLSched) - Unknown owner - c:\Program Files\Powercinema\Kernel\TV\CLSched.exe
O23 - Service: Google Updater Service (gusvc) - Google - C:\Program Files\Google\Common\Google Updater\GoogleUpdaterService.exe
O23 - Service: InstallDriver Table Manager (IDriverT) - Macrovision Corporation - C:\Program Files\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: RoxMediaDB9 - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxMediaDB9.exe
O23 - Service: Roxio Hard Drive Watcher 9 (RoxWatch9) - Sonic Solutions - C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatch9.exe
O23 - Service: ServiceLayer - Nokia. - C:\Program Files\Common Files\PCSuite\Services\ServiceLayer.exe
O23 - Service: stllssvr - MicroVision Development, Inc. - C:\Program Files\Common Files\SureThing Shared\stllssvr.exe
O23 - Service: Symantec Core LC - Unknown owner - C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe

--
End of file - 8532 bytes

Hola saltamontes66,

Descarga la herramienta SDFix y guárdala y descomprimirla en tu escritorio pero no la ejecutes aun.

(Es posible que el antivirus que tengas instalado te advierta de una infección en esta herramienta, es debido al tipo de código pero no te preocupes por ello, permite el paso de la herramienta)

Reinicia eh inicia en "Modo a prueba de fallos" (modo seguro)

Con todos los programas cerrados ejecuta el HijackThis y dale a esta entrada:


O2 - BHO: (no name) - {7E853D72-626A-48EC-A868-BA8D5E23E045} - (no file)

O4 - HKCU\..\Run: [rpougcpde] c:\users\david\appdata\local\rpougcpde.exe rpougcpde



Ejecuta SDFix.exe en el escritorio, se creará una nueva carpeta en el escritorio, entra en dicha carpeta y ejecuta el archivo "Runthis.bat" luego, presiona la tecla "Y" para que comience el chequeo, al terminar, se creará un archivo dentro de la carpeta llamado Report.txt, copia y pega lo que indique ese reporte acá.

Descarga CCleaner y ejecútalo usando primero su opción de "Limpiador" para borrar cookies, temporales de Internet y todos los archivos que este te muestre como obsoletos, y luego usa su opción de "Registro" para limpiar todo el registro de Windows (haciendo copia de seguridad).

Reinicia y nos contas los resultados.

Salu2

ola la entrada 04 no me aparece el el log la 02 esta liquiada pero siguen llegando ventanas SDFIX /RUN THIS no me reconoce como administrador

- Descarga la herramienta ComboFix.exe y guárdala en el escritorio.

• Desactiva temporalmente el Antivirus y/o Antispyware.
• Cierra todas las ventanas abiertas.
• Hacele doble clic al archivo combofix.exe y seguí las instrucciones.
• Cuando termine, generara un registro en C:\ComboFix.txt.
  • *Nota* Mientras CF este trabajando no mover el mouse ya que pararía su proceso.
  • *Nota* ComboFix puede reiniciar automáticamente el PC para completar el proceso de eliminación.
• Pega el reporte de ComboFix.txt en este mismo mensaje.

Reinicia y nos dejas los reportes.

Salu2

hola sr el piedra esta es el reporte de COMBOFIX espero que esto sea ya el final por que so no te voy a tener que pagar una cena despues de tantos dolores de cabeza que te estoy dando y por cierto gracias por las enseñanzas bueno el reporte que me lio


ComboFix 08-02.05.3 - david 2008-02-05 19:17:31.1 - NTFSx86
Microsoft® Windows Vista™ Home Basic 6.0.6000.0.1252.1.3082.18.1122 [GMT 1:00]
Se ejecuta desde: C:\Users\david\Desktop\ComboFix.exe
* Creado un nuevo punto de restauración
.

(((((((((((((((((((((((((((((((((((( Otras eliminaciones )))))))))))))))))))))))))))))))))))))))))))))))))
.

C:\Users\david\AppData\Local\dyodcqmcxn.dat
C:\Users\david\AppData\Local\dyodcqmcxn_nav.dat
C:\Users\david\AppData\Local\dyodcqmcxn_navps.dat
C:\Users\david\AppData\Roaming\Microsoft\Windows\S tart Menu\Programs\InternetGameBox

.
(((((((((((((((((( Archivos creados desde 2008-01-05 - 2008-02-05 )))))))))))))))))))))))))))))))))
.

2008-02-04 21:18 . 2008-02-04 21:20 <DIR> d-a------ C:\Users\All Users\TEMP
2008-02-04 21:17 . 2008-02-04 21:17 <DIR> d-------- C:\Users\All Users\Simply Super Software
2008-02-04 21:17 . 2008-02-04 21:17 <DIR> d-------- C:\Program Files\Trojan Remover
2008-02-04 21:17 . 2006-05-25 14:52 162,304 --a------ C:\Windows\System32\ztvunrar36.dll
2008-02-04 21:17 . 2003-02-02 19:06 153,088 --a------ C:\Windows\System32\UNRAR3.dll
2008-02-04 21:17 . 2005-08-26 00:50 77,312 --a------ C:\Windows\System32\ztvunace26.dll
2008-02-04 21:17 . 2002-03-06 00:00 75,264 --a------ C:\Windows\System32\unacev2.dll
2008-02-04 21:17 . 2006-06-19 12:01 69,632 --a------ C:\Windows\System32\ztvcabinet.dll
2008-02-04 20:13 . 2008-02-04 20:21 <DIR> d-------- C:\SDFix
2008-02-04 19:22 . 2008-02-04 19:22 <DIR> d-------- C:\Program Files\Trend Micro
2008-02-03 11:21 . 2008-02-03 11:21 543,232 --a------ C:\Windows\System32\FWPUCLNT.DLL
2008-02-03 11:21 . 2008-02-03 11:21 416,768 --a------ C:\Windows\System32\IKEEXT.DLL
2008-02-03 11:21 . 2008-02-03 11:21 317,440 --a------ C:\Windows\System32\BFE.DLL
2008-02-03 11:21 . 2008-02-03 11:21 84,992 --a------ C:\Windows\System32\drivers\FWPKCLNT.SYS
2008-01-31 21:03 . 2008-01-31 21:12 <DIR> d-------- C:\Program Files\Ascentive
2008-01-31 21:03 . 2007-10-17 10:19 184,320 --a------ C:\Windows\System32\ConTest.dll
2008-01-31 21:03 . 2007-10-17 10:19 20,480 --a------ C:\Windows\System32\SysRestore.dll
2008-01-29 20:04 . 2008-01-29 20:06 <DIR> d-------- C:\Ares Tube
2008-01-27 20:06 . 2008-01-27 20:06 <DIR> d-------- C:\Program Files\Xilisoft
2008-01-27 17:50 . 2008-01-27 19:07 <DIR> d-------- C:\VideoOutput
2008-01-27 17:44 . 2008-01-27 17:50 <DIR> d-------- C:\Program Files\Ultra Video Converter
2008-01-27 17:44 . 2007-04-12 14:19 129,024 --a------ C:\Windows\System32\AVERM.dll
2008-01-27 17:44 . 2006-09-26 13:57 28,672 --a------ C:\Windows\System32\AVEQT.dll
2008-01-27 11:00 . 2008-01-27 11:00 <DIR> d-------- C:\Users\All Users\Nokia
2008-01-27 10:57 . 2008-01-27 10:57 <DIR> d-------- C:\Users\All Users\Installations
2008-01-26 20:19 . 2008-01-26 20:19 <DIR> d-------- C:\Program Files\Lavalys
2008-01-18 21:29 . 2008-01-18 22:10 <DIR> d-------- C:\Windows\System32\oodag
2008-01-18 21:25 . 2008-01-18 21:25 0 --a------ C:\Windows\OODCNT.INI
2008-01-18 20:11 . 2008-01-18 20:11 <DIR> d-------- C:\Program Files\Java
2008-01-18 20:11 . 2007-09-24 23:31 69,632 --a------ C:\Windows\System32\javacpl.cpl
2008-01-18 20:10 . 2008-01-18 20:10 <DIR> d-------- C:\Program Files\Common Files\Java
2008-01-17 19:49 . 2008-01-17 19:49 512,096 --a------ C:\Windows\System32\drivers\amon.sys
2008-01-17 19:49 . 2008-01-17 19:49 298,104 --a------ C:\Windows\System32\imon.dll
2008-01-17 19:49 . 2008-01-17 19:49 15,424 --a------ C:\Windows\System32\drivers\nod32drv.sys
2008-01-16 19:52 . 2008-01-16 19:53 <DIR> d-------- C:\Users\All Users\BitDefender
2008-01-16 19:52 . 2008-01-16 19:52 <DIR> d-------- C:\Program Files\Softwin
2008-01-16 19:51 . 2008-01-16 19:53 <DIR> d-------- C:\Program Files\Common Files\Softwin
2008-01-15 19:48 . 2008-01-15 19:48 <DIR> d-------- C:\Users\All Users\ESET
2008-01-14 19:18 . 2008-01-16 19:42 <DIR> d-------- C:\Users\All Users\Kaspersky Lab
2008-01-13 21:01 . 2008-01-13 21:01 <DIR> d-------- C:\wweraw
2008-01-12 21:15 . 2008-01-12 21:15 <DIR> d-------- C:\Program Files\VSO
2008-01-11 19:24 . 2008-01-11 19:24 <DIR> d-------- C:\Users\All Users\avg7(1267)
2008-01-10 20:01 . 2008-01-16 20:32 <DIR> d-------- C:\Users\All Users\Grisoft
2008-01-10 20:01 . 2008-01-17 20:51 <DIR> d-------- C:\Users\All Users\avg7
2008-01-10 20:01 . 2008-01-10 20:01 55,304 --a------ C:\Windows\System32\drivers\avgwfp.sys
2008-01-10 20:01 . 2008-01-10 20:01 9,216 --a------ C:\Windows\System32\avgwlntf.dll
2008-01-08 21:39 . 2008-01-08 21:39 804,352 --a------ C:\Windows\System32\drivers\tcpip.sys
2008-01-08 21:39 . 2008-01-08 21:39 217,272 --a------ C:\Windows\System32\drivers\netio.sys
2008-01-08 21:39 . 2008-01-08 21:39 167,424 --a------ C:\Windows\System32\tcpipcfg.dll
2008-01-08 21:39 . 2008-01-08 21:39 24,064 --a------ C:\Windows\System32\netcfg.exe
2008-01-08 21:39 . 2008-01-08 21:39 22,016 --a------ C:\Windows\System32\netiougc.exe
2008-01-08 21:38 . 2008-01-08 21:38 4,247,552 --a------ C:\Windows\System32\GameUXLegacyGDFs.dll
2008-01-08 21:38 . 2008-01-08 21:38 1,686,016 --a------ C:\Windows\System32\gameux.dll
2008-01-08 21:38 . 2008-01-08 21:38 1,060,920 --a------ C:\Windows\System32\drivers\ntfs.sys
2008-01-08 21:38 . 2008-01-08 21:38 211,000 --a------ C:\Windows\System32\drivers\volsnap.sys
2008-01-08 21:38 . 2008-01-08 21:38 154,624 --a------ C:\Windows\System32\drivers\nwifi.sys
2008-01-08 21:38 . 2008-01-08 21:38 109,624 --a------ C:\Windows\System32\drivers\ataport.sys
2008-01-08 21:38 . 2008-01-08 21:38 45,112 --a------ C:\Windows\System32\drivers\pciidex.sys
2008-01-08 21:38 . 2008-01-08 21:38 21,560 --a------ C:\Windows\System32\drivers\atapi.sys
2008-01-08 21:38 . 2008-01-08 21:38 15,928 --a------ C:\Windows\System32\drivers\pciide.sys
2008-01-08 21:37 . 2008-01-08 21:37 11,776 --a------ C:\Windows\System32\sbunattend.exe
2008-01-06 09:17 . 2008-01-06 09:17 <DIR> d-------- C:\Program Files\Auslogics

.
(((((((((((((((((((((((((((((((((((((( Reporte Find3M )))))))))))))))))))))))))))))))))))))))))))))))))) )
.
2008-01-31 20:11 --------- d--h--w C:\Program Files\InstallShield Installation Information
2008-01-27 10:02 --------- d-----w C:\Program Files\Nokia
2008-01-27 10:02 --------- d-----w C:\Program Files\Common Files\Nokia
2008-01-24 19:41 --------- d-----w C:\Program Files\SUPERAntiSpyware
2008-01-20 15:44 --------- d-----w C:\Program Files\ESET
2008-01-16 19:32 --------- d-----w C:\Program Files\SpywareBlaster
2008-01-16 19:32 --------- d-----w C:\Program Files\Spybot - Search & Destroy
2008-01-16 19:32 --------- d-----w C:\Program Files\SecondLife
2008-01-16 19:32 --------- d-----w C:\Program Files\Powercinema
2008-01-16 19:32 --------- d-----w C:\Program Files\Norton Security Scan
2008-01-16 19:32 --------- d-----w C:\Program Files\Lavasoft
2008-01-16 19:32 --------- d-----w C:\Program Files\HDReg
2008-01-16 19:32 --------- d-----w C:\Program Files\FileASSASSIN
2008-01-16 19:32 --------- d-----w C:\Program Files\DivX
2008-01-16 19:32 --------- d-----w C:\Program Files\Common Files\SureThing Shared
2008-01-16 19:32 --------- d-----w C:\Program Files\Common Files\Sonic Shared
2008-01-16 19:32 --------- d-----w C:\Program Files\CCleaner
2008-01-16 19:32 --------- d-----w C:\Program Files\Ares
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Sidebar
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Photo Gallery
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Mail
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Defender
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Collaboration
2008-01-16 19:31 --------- d-----w C:\Program Files\Windows Calendar
2008-01-16 19:31 --------- d-----w C:\Program Files\VistaCodecPack
2008-01-16 19:31 --------- d-----w C:\Program Files\Packard Bell
2008-01-16 19:30 --------- d-----w C:\Program Files\Reference Assemblies
2008-01-16 19:30 --------- d-----w C:\Program Files\Microsoft Games
2008-01-16 19:30 --------- d-----w C:\Program Files\Microsoft CAPICOM 2.1.0.2
2008-01-08 20:38 537,600 ----a-w C:\Windows\AppPatch\AcLayers.dll
2008-01-08 20:38 449,024 ----a-w C:\Windows\AppPatch\AcSpecfc.dll
2008-01-08 20:38 2,143,744 ----a-w C:\Windows\AppPatch\AcGenral.dll
2008-01-08 20:38 173,056 ----a-w C:\Windows\AppPatch\AcXtrnal.dll
2008-01-03 18:20 --------- d-----w C:\Program Files\Common Files\Adobe
2007-12-31 19:31 --------- d-----w C:\Program Files\Yahoo!
2007-12-31 19:18 --------- d-----w C:\Program Files\RegCleaner
2007-12-30 09:10 --------- d-----w C:\Program Files\3D Live Pool
2007-12-30 08:34 615,424 ----a-w C:\Windows\System32\themeui.dll
2007-12-30 08:34 240,640 ----a-w C:\Windows\System32\uxtheme.dll
2007-12-25 17:19 --------- d-----w C:\Program Files\Jasc Software Inc
2007-12-23 17:18 --------- d-----w C:\Program Files\Common Files\PCSuite
2007-12-23 07:50 --------- d-----w C:\Program Files\Common Files\Wise Installation Wizard
2007-12-22 18:27 --------- d-----w C:\Program Files\PhotoZoom Pro 2
2007-12-22 07:27 --------- d-----w C:\Program Files\DVD Shrink
2007-12-20 20:25 --------- d-----w C:\Program Files\a-squared Free
2007-12-18 18:58 --------- d-----w C:\Program Files\VideoLAN
2007-12-16 18:11 --------- d-----w C:\Program Files\WellGet
2007-12-16 09:28 --------- d-----w C:\Program Files\DVDFab Platinum 3
2007-12-13 17:50 --------- d-----w C:\Program Files\Common Files\Symantec Shared
2007-12-11 19:46 9,728 ----a-w C:\Windows\System32\LAPRXY.DLL
2007-12-11 19:46 223,232 ----a-w C:\Windows\System32\WMASF.DLL
2007-12-11 19:46 1,327,104 ----a-w C:\Windows\System32\quartz.dll
2007-12-11 19:45 84,992 ----a-w C:\Windows\system32\drivers\srvnet.sys
2007-12-11 19:45 824,832 ----a-w C:\Windows\System32\wininet.dll
2007-12-11 19:45 58,368 ----a-w C:\Windows\system32\drivers\mrxsmb20.sys
2007-12-11 19:45 56,320 ----a-w C:\Windows\System32\iesetup.dll
2007-12-11 19:45 52,736 ----a-w C:\Windows\AppPatch\iebrshim.dll
2007-12-11 19:45 26,624 ----a-w C:\Windows\System32\ieUnatt.exe
2007-12-11 19:45 130,048 ----a-w C:\Windows\system32\drivers\srv2.sys
2007-12-11 19:45 101,888 ----a-w C:\Windows\system32\drivers\mrxsmb.sys
2007-12-11 19:44 3,504,824 ----a-w C:\Windows\System32\ntkrnlpa.exe
2007-12-11 19:44 3,470,520 ----a-w C:\Windows\System32\ntoskrnl.exe
2007-12-09 16:00 805 ----a-w C:\Windows\system32\drivers\SYMEVENT.INF
2007-12-09 16:00 10,740 ----a-w C:\Windows\system32\drivers\SYMEVENT.CAT
2007-12-09 15:39 --------- d-----w C:\Program Files\Google
2007-12-08 19:55 --------- dcsh--w C:\Program Files\Common Files\WindowsLiveInstaller
2007-12-08 19:55 --------- d-----w C:\Program Files\Windows Live
2007-12-08 19:36 174 --sha-w C:\Program Files\desktop.ini
2007-12-08 19:29 8,192 ----a-w C:\Windows\System32\riched32.dll
2007-12-08 19:29 77,824 ----a-w C:\Windows\System32\rascfg.dll
2007-12-08 19:29 704,000 ----a-w C:\Windows\System32\PhotoScreensaver.scr
2007-12-08 19:29 70,144 ----a-w C:\Windows\system32\drivers\pacer.sys
2007-12-08 19:29 694,784 ----a-w C:\Windows\System32\localspl.dll
2007-12-08 19:29 619,008 ----a-w C:\Windows\system32\drivers\dxgkrnl.sys
2007-12-08 19:29 61,952 ----a-w C:\Windows\system32\drivers\wanarp.sys
2007-12-08 19:29 542,720 ----a-w C:\Windows\System32\sysmain.dll
2007-12-08 19:29 52,736 ----a-w C:\Windows\System32\rasdiag.dll
2007-12-08 19:29 48,640 ----a-w C:\Windows\system32\drivers\ndproxy.sys
2007-12-08 19:29 384,000 ----a-w C:\Windows\System32\netcfgx.dll
2007-12-08 19:29 36,864 ----a-w C:\Windows\System32\cdd.dll
2007-12-08 19:29 33,280 ----a-w C:\Windows\System32\traffic.dll
2007-12-08 19:29 32,768 ----a-w C:\Windows\System32\rasmxs.dll
2007-12-08 19:29 286,208 ----a-w C:\Windows\System32\ipnathlp.dll
2007-12-08 19:29 258,232 ----a-w C:\Windows\system32\drivers\acpi.sys
2007-12-08 19:29 24,064 ----a-w C:\Windows\System32\wtsapi32.dll
2007-12-08 19:29 22,016 ----a-w C:\Windows\System32\rasser.dll
2007-12-08 19:29 20,480 ----a-w C:\Windows\system32\drivers\ndistapi.sys
2007-12-08 19:29 2,923,520 ----a-w C:\Windows\explorer.exe
2007-12-08 19:29 2,027,008 ----a-w C:\Windows\System32\win32k.sys
2007-12-08 19:29 15,360 ----a-w C:\Windows\System32\pacerprf.dll
2007-12-08 19:29 134,656 ----a-w C:\Windows\System32\dps.dll
2007-12-08 19:29 13,824 ----a-w C:\Windows\System32\wshqos.dll
2007-12-08 19:29 13,824 ----a-w C:\Windows\System32\icsunattend.exe
2007-12-08 19:28 67,584 ----a-w C:\Windows\System32\wlanhlp.dll
2007-12-08 19:28 502,784 ----a-w C:\Windows\System32\wlansvc.dll
2007-12-08 19:28 47,104 ----a-w C:\Windows\System32\wlanapi.dll
2007-12-08 19:28 297,984 ----a-w C:\Windows\System32\wlansec.dll
2007-12-08 19:28 290,816 ----a-w C:\Windows\System32\wlanmsm.dll
2007-12-08 19:25 8,147,968 ----a-w C:\Windows\System32\wmploc.DLL
2007-12-08 19:25 7,680 ----a-w C:\Windows\System32\spwmp.dll
2007-07-20 07:38 65,536 --sha-w C:\Windows\oem\mp\boot\bootstat.dat
.

((((((((((((((((((((((((((((((((( Cargando Puntos Reg ))))))))))))))))))))))))))))))))))))))))))))))))))
.
.
REGEDIT4
*Nota* entradas vacías & entradas legítimas predeterminadas no son mostradas

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\Curre ntVersion\Run]
"Sidebar"="C:\Program Files\Windows Sidebar\sidebar.exe" [2008-01-08 21:37 1232896]
"SmpcSys"="C:\Program Files\Packard Bell\SetUpMyPC\SmpSys.exe" [2007-02-06 10:39 1093632]
"Speech Recognition"="C:\Windows\Speech\Common\sapisvr.exe " [2006-11-02 10:45 49664]
"ISUSPM"="C:\Program Files\Common Files\InstallShield\UpdateService\ISUSPM.exe" [2006-09-11 03:40 218032]
"WMPNSCFG"="C:\Program Files\Windows Media Player\WMPNSCFG.exe" [2006-11-02 13:34 201728]
"PcSync"="C:\Program Files\Nokia\Nokia PC Suite 6\PcSync2.exe" [2006-06-27 16:21 1449984]
"msnmsgr"="C:\Program Files\Windows Live\Messenger\msnmsgr.exe" [2007-10-18 11:34 5724184]

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\Curr entVersion\Run]
"Windows Defender"="C:\Program Files\Windows Defender\MSASCui.exe" [2007-07-20 08:47 1006264]
"RtHDVCpl"="RtHDVCpl.exe" [2007-03-01 15:38 4390912 C:\Windows\RtHDVCpl.exe]
"RoxWatchTray"="C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe" [2007-01-11 10:40 232184]
"PCMService"="c:\Program Files\Powercinema\PCMService.exe" [2007-02-14 19:45 159744]
"MSConfig"="C:\Windows\system32\msconfig.exe" [2006-11-02 10:45 222208]
"NvSvc"="C:\Windows\system32\nvsvc.dll" [2007-09-12 05:28 86016]
"NvCplDaemon"="C:\Windows\system32\NvCpl.dll" [2007-09-12 05:28 8497696]
"NvMediaCenter"="C:\Windows\system32\NvMcTray. dll" [2007-09-12 05:28 81920]
"Adobe Reader Speed Launcher"="C:\Program Files\Adobe\Reader 8.0\Reader\Reader_sl.exe" [2007-10-10 19:51 39792]
"nod32kui"="C:\Program Files\Eset\nod32kui.exe" [2008-01-17 19:49 949376]
"SunJavaUpdateSched"="C:\Program Files\Java\jre1.6.0_03\bin\jusched.exe" [2007-09-25 01:11 132496]
"TrojanScanner"="C:\Program Files\Trojan Remover\Trjscan.exe" [2008-02-01 14:42 743504]

[HKEY_USERS\.DEFAULT\Software\Microsoft\Windows\Cur rentVersion\Run]
"AVG7_Run"="C:\PROGRA~1\Grisoft\AVG7\avgw.exe" [ ]

[hkey_local_machine\software\microsoft\windows\curr entversion\explorer\shellexecutehooks]
"{5AE067D3-9AFB-48E0-853A-EBB7F4A000DA}"= C:\Program Files\SUPERAntiSpyware\SASSEH.DLL [2006-12-20 13:55 77824]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\!SASWinLogon]
C:\Program Files\SUPERAntiSpyware\SASWINLO.dll 2007-04-19 13:41 294912 C:\Program Files\SUPERAntiSpyware\SASWINLO.dll

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\winlogon\notify\avgwlntf]
avgwlntf.dll 2008-01-10 20:01 9216 C:\Windows\System32\avgwlntf.dll

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\msnmsgr]
--a------ 2007-10-18 11:34 5724184 C:\Program Files\Windows Live\Messenger\msnmsgr.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\PCSuiteTrayApplication]
--a------ 2006-06-15 12:36 229376 C:\PROGRA~1\Nokia\NOKIAP~1\LAUNCH~1.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\Picasa Media Detector]
C:\Program Files\Picasa2\PicasaMediaDetector.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\SUPERAntiSpyware]
--a------ 2007-06-21 14:06 1318912 C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe

[HKEY_LOCAL_MACHINE\software\microsoft\shared tools\msconfig\startupreg\toolbar_eula_launcher]
--a------ 2007-02-20 17:20 28672 C:\Program Files\Packard Bell\GOOGLE_EULA\EULALauncher.exe

R3 yukonwlh;NDIS6.0 Miniport Driver for Marvell Yukon Ethernet Controller;C:\Windows\system32\DRIVERS\yk60x86.sys [2006-11-03 09:11]
S3 AvgWFP;AVG7 Firewall Driver x86;C:\Windows\system32\Drivers\avgwfp.sys [2008-01-10 20:01]
S3 stllssvr;stllssvr;"C:\Program Files\Common Files\SureThing Shared\stllssvr.exe" [2006-09-14 13:54]

[HKEY_LOCAL_MACHINE\software\microsoft\windows nt\currentversion\svchost]
LocalServiceNoNetwork REG_MULTI_SZ PLA DPS BFE mpssvc

[HKEY_CURRENT_USER\software\microsoft\windows\curre ntversion\explorer\mountpoints2\{ec841a6b-a5bb-11dc-93f4-806e6f6e6963}]
\shell\AutoRun\command - D:\autorun.exe

.
Contenido de carpeta 'Tareas Programadas'
"2008-02-04 20:31:26 C:\Windows\Tasks\Garantía ampliable.job"
- C:\Program Files\Packard Bell\SetupmyPC\PBCarNot.exe
"2007-12-30 08:21:57 C:\Windows\Tasks\Norton Security Scan.job"
- C:\Program Files\Norton Security Scan\Nss.exe
"2008-02-04 18:05:12 C:\Windows\Tasks\User_Feed_Synchronization-{72C9E54E-4165-46CC-8033-8B5C0BBF37DC}.job"
- C:\Windows\system32\msfeedssync.exe
.
************************************************** ************************

catchme 0.3.1344 W2K/XP/Vista - rootkit/stealth malware detector by Gmer, http://www.gmer.net
Rootkit scan 2008-02-05 19:19:11
Windows 6.0.6000 NTFS

escaneando procesos ocultos ...

escaneando entradas ocultas de autostart ...

escaneando archivos ocultos ...

el escaneo se completo con exito
archivos ocultos: 0

************************************************** ************************
.
Tiempo completado: 2008-02-05 19:19:47
ComboFix-quarantined-files.txt 2008-02-05 18:19:45
.
2008-02-01 19:34:21 --- E O F ---

hola solo decir gracias creo que de momento todo esta limpio almenos no se me abren ventanas sin mas y internet me va mas rapido no se si eso es por la limpieza pero GRACIAS

Hola, ComboFix ya se encargo de eliminar los archivos de malwares encontrados en tu PC, por lo que si todo esta funcionado bien, damos por terminado el tema.

Para terminar solo te quedaría desinstalar CF de la siguiente manera:

• Ir a Inicio > Ejecutar
• Escribir lo siguiente: ComboFix /u como muestra la imagen debajo:
  
  
  • 
• Esto activara el desinstalador de ComboFix abriendo su pantalla principal y luego de unos segundos veras ("ComboFix is uninstalled")

Salu2