GRACIAS DE ANTEMANO POR EL APOYO A LA COMUNIDAD DEL FORO..

PROBLEMAS:
- CADA VEZ QUE SE REINICIA MI PC SE DESCONFIGURA EL WALLPAPER Y ME DA EL MENSAJE DE ACTIVAR "ACTIVE DESKTOP" DE NUEVO
- LA CONFIGURACION DE LA BARRA DE TAREAS SE PIERDE MOSTRANDOME ELEMENTOS QUE LOS HABIA PUESTO COMO OCULTOS

- CUANDO NAVEGO POR INTERNET ME APARECEN DIALOGOS DE ATAQUES REPETITIVOS DESDE OTROS COMPUTADORES QUE INTENTAN INGRESAR AL MIO..CON ZONE ALARM SEGUI EL RASTRO DE UNO Y ME LLEVO A KOREA.

- EL SPYBOT ME MUESTRA EL SIGUIENTE MENSAJE DEL INICIO DE SISTEMA EN LA SECCION DE HERRAMIENTAS DEL PROGRAMA:

Nombre del archivo actual: C:\WINDOWS\system32\ctfmon.exe

Estado de la base de datos: Innecesario - virus, software espía, maligno u otro tipo de programa consumidor de recursos
Valor: ctfmon.exe
Nombre del archivo: ctfmon32.exe

Descripción
_CoolWebSearch_ parasite related - hijacking to Slawsearch.com

Fuente: Paul Collins Startup list

HE LEIDO UN MONTON DE ARTICULOS EN EL INTERNET PARA AVERIGUAR COMO QUITARLO PORQUE HE TRATADO DE TODO: KASPERSKY, EWIDO, AD AWARE, MICROSOFT ANTISPYWARE, SPYBOT, KILL BOX, HJACK THIS (DANDOLE FIX A ESA ENTRADA), cwshredder, REG SEEK, REG CLEANER, LO BLOQUEE DE SU LIBRE ACCESO AL INTERNET EN EL ZONE ALARM INCLUSO LO INTENTE BORRAR DEL ZONE...Y NADA SIEMPRE VUELVE A APARECER...

AY PAGINAS WEB QUE DICEN QUE NO ES SPYWARE NI NADA...INCLUSO LA DE MICROSOFT QUE DICE QUE ES UN COMPONENTE DEL OFFICE XP...LO MALO ES QUE YO TENGO EL OFFICE 2003 NO EL XP ...

LES AGRADECERIA DE ANTEMANO ORIENTARME ACERCA DE LO QUE EL SPYBOOT ME DELATA...

UN POR SI ACASO EL LOG DEL HACK THIS Y EL DEL SPYBOT:

---------------------------------------------------------------------------
Logfile of HijackThis v1.99.1
Scan saved at 2:11:40, on 27-11-2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\System32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\ctfmon.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\system32\cisvc.exe
C:\Program Files\ewido\security suite\ewidoctrl.exe
C:\Program Files\Sony\Giga Pocket\shwserv.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Program Files\Eset\nod32krn.exe
C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
C:\WINDOWS\system32\ZoneLabs\vsmon.exe
C:\Program Files\Sony\Giga Pocket\RM_SV.exe
C:\WINDOWS\ATK0100\Hcontrol.exe
C:\Program Files\Apoint\Apoint.exe
C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
C:\Program Files\Sony\HotKey Utility\HKserv.exe
C:\Program Files\Sony\ISB Utility\ISBMgr.exe
C:\Program Files\Eset\nod32kui.exe
C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
C:\Program Files\Microsoft AntiSpyware\gcasDtServ.exe
C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
C:\Program Files\Apoint\Apntex.exe
C:\WINDOWS\ATK0100\ATKOSD.exe
C:\Program Files\Sony\HotKey Utility\HKWnd.exe
C:\Program Files\Star Downloader\stardown.exe
C:\Program Files\LClock\lclock.exe
C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
C:\Program Files\sony\usbsircs\usbsircs.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
C:\WINDOWS\system32\cidaemon.exe
C:\Program Files\HJT\HijackThis.exe

R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Start Page = http://update.microsoft.com/windowsupdate/v6/default.aspx?ln=en-us
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://www.sony.com/vaiopeople
R0 - HKCU\Software\Microsoft\Internet Explorer\Main,Local Page =
R0 - HKLM\Software\Microsoft\Internet Explorer\Main,Local Page =
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Window Title = Dr. Marcelo I. Cepeda P.
O2 - BHO: AcroIEHlprObj Class - {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} - C:\Program Files\Adobe\Acrobat 6.0\Reader\ActiveX\AcroIEHelper.dll
O2 - BHO: (no name) - {53707962-6F74-2D53-2644-206D7942484F} - C:\PROGRA~1\SPYBOT~1\SDHelper.dll
O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)
O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)
O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)
O2 - BHO: (no name) - {FFFFFEF0-5B30-21D4-945D-000000000000} - C:\PROGRA~1\STARDO~1\SDIEInt.dll
O4 - HKLM\..\Run: [Hcontrol] C:\WINDOWS\ATK0100\Hcontrol.exe
O4 - HKLM\..\Run: [Apoint] C:\Program Files\Apoint\Apoint.exe
O4 - HKLM\..\Run: [BluetoothAuthenticationAgent] rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
O4 - HKLM\..\Run: [SonyPowerCfg] C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
O4 - HKLM\..\Run: [HKSERV.EXE] C:\Program Files\Sony\HotKey Utility\HKserv.exe
O4 - HKLM\..\Run: [ISBMgr.exe] C:\Program Files\Sony\ISB Utility\ISBMgr.exe
O4 - HKLM\..\Run: [VAIOSurvey] c:\program files\sony\vaio survey\surveysa.exe
O4 - HKLM\..\Run: [nod32kui] "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
O4 - HKLM\..\Run: [gcasServ] "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
O4 - HKLM\..\Run: [Zone Labs Client] C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
O4 - HKCU\..\Run: [Star Downloader Free] C:\Program Files\Star Downloader\stardown.exe
O4 - HKCU\..\Run: [LClock] C:\Program Files\LClock\lclock.exe
O4 - HKCU\..\Run: [TuneUp MemOptimizer] "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
O4 - HKCU\..\Run: [ctfmon.exe] C:\WINDOWS\system32\ctfmon.exe
O4 - Startup: Stardock ObjectDock.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
O4 - Startup: UberIcon.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
O4 - Startup: Y'z Shadow.lnk = C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
O4 - Global Startup: Remocon Driver.lnk = ?
O6 - HKCU\Software\Policies\Microsoft\Internet Explorer\Restrictions present
O8 - Extra context menu item: Descargar con Star Downloader - C:\Program Files\Star Downloader\sdie.htm
O8 - Extra context menu item: E&xport to Microsoft Excel - res://C:\PROGRA~1\MICROS~3\OFFICE11\EXCEL.EXE/3000
O9 - Extra button: (no name) - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra 'Tools' menuitem: Sun Java Console - {08B0E5C0-4FCB-11CF-AAA5-00401C608501} - C:\Program Files\Java\jre1.5.0_05\bin\npjpi150_05.dll
O9 - Extra button: Research - {92780B25-18CC-41C8-B9BE-3C9C571A8263} - C:\PROGRA~1\MICROS~3\OFFICE11\REFIEBAR.DLL
O9 - Extra button: Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O9 - Extra 'Tools' menuitem: Windows Messenger - {FB5F1910-F110-11d2-BB9E-00C04F795683} - C:\Program Files\Messenger\msmsgs.exe
O14 - IERESET.INF: START_PAGE_URL=http://www.sony.com/vaiopeople
O16 - DPF: {17492023-C23A-453E-A040-C7C580BBF700} (Windows Genuine Advantage Validation Tool) - http://go.microsoft.com/fwlink/?linkid=39204
O16 - DPF: {9A9307A0-7DA4-4DAF-B042-5009F29E09E1} (ActiveScan Installer Class) - http://acs.pandasoftware.com/activescan/as5free/asinst.cab
O17 - HKLM\System\CCS\Services\Tcpip\..\{EB7F1BEA-776E-4DE1-887A-3CA201A099BF}: NameServer = 216.155.73.154 200.75.0.5
O23 - Service: Ati HotKey Poller - Unknown owner - C:\WINDOWS\System32\Ati2evxx.exe
O23 - Service: ewido security suite control - ewido networks - C:\Program Files\ewido\security suite\ewidoctrl.exe
O23 - Service: Giga Pocket Hardware Detector - Sony Corporation - C:\Program Files\Sony\Giga Pocket\shwserv.exe
O23 - Service: kavsvc - Kaspersky Lab - C:\Program Files\Kaspersky Lab\Kaspersky Anti-Virus Personal\kavsvc.exe
O23 - Service: MSCSPTISRV - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\MSCSPTISRV.exe
O23 - Service: NOD32 Kernel Service (NOD32krn) - Eset - C:\Program Files\Eset\nod32krn.exe
O23 - Service: PACSPTISVR - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\PACSPTISVR.exe
O23 - Service: Symantec Network Drivers Service (SNDSrvc) - Sony Corporation - (no file)
O23 - Service: Sony TV Tuner Controller - Sony Corporation - C:\Program Files\Sony\Giga Pocket\halsv.exe
O23 - Service: Sony TV Tuner Manager - Sony Corporation - C:\Program Files\Sony\Giga Pocket\RM_SV.exe
O23 - Service: Sony SPTI Service (SPTISRV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SPTISRV.exe
O23 - Service: SonicStage SCSI Service (SSScsiSV) - Sony Corporation - C:\Program Files\Common Files\Sony Shared\AVLib\SSScsiSV.exe
O23 - Service: SymWMI Service (SymWSC) - Symantec Corporation - (no file)
O23 - Service: TuneUp WinStyler Theme Service (TUWinStylerThemeSvc) - TuneUp Software GmbH - C:\Program Files\TuneUp Utilities 2006\WinStylerThemeSvc.exe
O23 - Service: VAIO Entertainment Aggregation and Control Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzRs\VzRs.exe
O23 - Service: VAIO Entertainment File Import Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCdb\VzFw.exe
O23 - Service: VAIO Entertainment TV Device Arbitration Service - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VzCs\VzHardwareResourceManager\VzHar dwareResourceManager.exe
O23 - Service: VAIO Entertainment UPnP Client Adapter - Sony Corporation - C:\Program Files\Common Files\Sony Shared\VAIO Entertainment\VCSW\VCSW.exe
O23 - Service: VAIO Media Integrated Server (VAIOMediaPlatform-IntegratedServer-AppServer) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\VMISrv.exe
O23 - Service: VAIO Media Integrated Server (HTTP) (VAIOMediaPlatform-IntegratedServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-IntegratedServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="Applications\IntegratedServer\HTTP (file missing)
O23 - Service: VAIO Media Integrated Server (UPnP) (VAIOMediaPlatform-IntegratedServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: VAIO Media Gateway Server (VAIOMediaPlatform-Mobile-Gateway) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\VmGateway.exe" /Service=VAIOMediaPlatform-Mobile-Gateway /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Addons\Packages\Mobile\Gateway" /DisplayName="VAIO Media Gateway Server (file missing)
O23 - Service: VAIO Media Video Server (VAIOMediaPlatform-VideoServer-AppServer) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Video\GPVSvr.exe" /Service=VAIOMediaPlatform-VideoServer-AppServer /DisplayName="VAIO Media Video Server (file missing)
O23 - Service: VAIO Media Video Server (HTTP) (VAIOMediaPlatform-VideoServer-HTTP) - Unknown owner - C:\Program Files\Sony\vaio media integrated server\Platform\SV_Httpd.exe" /Service=VAIOMediaPlatform-VideoServer-HTTP /RegRoot="SOFTWARE\Sony Corporation\VAIO Media Platform\2.0" /RegExt="\Applications\VideoServer\HTTP (file missing)
O23 - Service: VAIO Media Video Server (UPnP) (VAIOMediaPlatform-VideoServer-UPnP) - Sony Corporation - C:\Program Files\Sony\vaio media integrated server\Platform\UPnPFramework.exe
O23 - Service: TrueVector Internet Monitor (vsmon) - Zone Labs, LLC - C:\WINDOWS\system32\ZoneLabs\vsmon.exe

-------------------------------------------------------------------------



--- Spybot - Search & Destroy version: 1.4 (build: 20050523) ---

2005-05-31 blindman.exe (1.0.0.1)
2005-05-31 SpybotSD.exe (1.4.0.3)
2005-05-31 TeaTimer.exe (1.4.0.2)
2005-11-01 unins000.exe (51.41.0.0)
2005-05-31 Update.exe (1.4.0.0)
2005-05-31 advcheck.dll (1.0.2.0)
2005-05-31 aports.dll (2.1.0.0)
2005-05-31 borlndmm.dll (7.0.4.453)
2005-05-31 delphimm.dll (7.0.4.453)
2005-05-31 SDHelper.dll (1.4.0.0)
2005-05-31 Tools.dll (2.0.0.2)
2005-05-31 UnzDll.dll (1.73.1.1)
2005-05-31 ZipDll.dll (1.73.2.0)
2005-11-18 Includes\Cookies.sbi
2005-11-18 Includes\Dialer.sbi
2005-11-18 Includes\Hijackers.sbi
2005-11-18 Includes\Keyloggers.sbi
2005-11-18 Includes\Malware.sbi
2005-11-18 Includes\PUPS.sbi
2005-11-18 Includes\Revision.sbi
2005-11-18 Includes\Security.sbi
2005-11-18 Includes\Spybots.sbi
2005-02-17 Includes\Tracks.uti
2005-11-18 Includes\Trojans.sbi

Located: HK_LM:Run, Apoint
command: C:\Program Files\Apoint\Apoint.exe
file: C:\Program Files\Apoint\Apoint.exe
size: 114688
MD5: 5ec6a3a27642f72a9d58bf6631d9f6dd

Located: HK_LM:Run, BluetoothAuthenticationAgent
command: rundll32.exe irprops.cpl,,BluetoothAuthenticationAgent
file: C:\WINDOWS\system32\rundll32.exe
size: 33280
MD5: da285490bbd8a1d0ce6623577d5ba1ff

Located: HK_LM:Run, gcasServ
command: "C:\Program Files\Microsoft AntiSpyware\gcasServ.exe"
file: C:\Program Files\Microsoft AntiSpyware\gcasServ.exe
size: 473928
MD5: e8177b5150cab1509d2e9807c3f6366c

Located: HK_LM:Run, Hcontrol
command: C:\WINDOWS\ATK0100\Hcontrol.exe
file: C:\WINDOWS\ATK0100\Hcontrol.exe
size: 61440
MD5: 37af08722b28ce50d4dffb739b38c967

Located: HK_LM:Run, HKSERV.EXE
command: C:\Program Files\Sony\HotKey Utility\HKserv.exe
file: C:\Program Files\Sony\HotKey Utility\HKserv.exe
size: 98304
MD5: 5b410ba2ed39af022fb7c448fcdecda7

Located: HK_LM:Run, ISBMgr.exe
command: C:\Program Files\Sony\ISB Utility\ISBMgr.exe
file: C:\Program Files\Sony\ISB Utility\ISBMgr.exe
size: 32768
MD5: 93eefbc237adfc406f52ee56d97f784b

Located: HK_LM:Run, nod32kui
command: "C:\Program Files\Eset\nod32kui.exe" /WAITSERVICE
file: C:\Program Files\Eset\nod32kui.exe
size: 917504
MD5: 070eb3a91409f0e725666356659bf982

Located: HK_LM:Run, SonyPowerCfg
command: C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
file: C:\Program Files\Sony\VAIO Power Management\SPMgr.exe
size: 167936
MD5: 59b4c0570b1cd8378e200840490ec80f

Located: HK_LM:Run, VAIOSurvey
command: c:\program files\sony\vaio survey\surveysa.exe
file: c:\program files\sony\vaio survey\surveysa.exe
size: 1052672
MD5: 71c4ed0ac7c61a88e57adb65951e35db

Located: HK_LM:Run, Zone Labs Client
command: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
file: C:\Program Files\Zone Labs\ZoneAlarm\zlclient.exe
size: 755472
MD5: e85c5dc2659f562c496e839649aa7200

Located: HK_LM:Run, ATIPTA (DISABLED)
command: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
file: C:\Program Files\ATI Technologies\ATI Control Panel\atiptaxx.exe
size: 339968
MD5: 96eb989dbe61260ed396fa0f9ce12c17

Located: HK_LM:Run, ezShieldProtector for Px (DISABLED)
command: C:\WINDOWS\System32\ezSP_Px.exe
file: C:\WINDOWS\System32\ezSP_Px.exe
size: 40960
MD5: 2849ed071a0d83406bda342aa767f24e

Located: HK_LM:Run, SsAAD.exe (DISABLED)
command: C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
file: C:\PROGRA~1\Sony\SONICS~1\SsAAD.exe
size: 81920
MD5: 181363b608b30bcc973f3b5077972068

Located: HK_LM:Run, SunJavaUpdateSched (DISABLED)
command: C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
file: C:\Program Files\Java\jre1.5.0_05\bin\jusched.exe
size: 36975
MD5: 4428823c1edcc549e3f494f7a90b46a3

Located: HK_LM:Run, VAIO Recovery (DISABLED)
command: C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
file: C:\WINDOWS\Sonysys\VAIO Recovery\PartSeal.exe
size: 28672
MD5: 3edf6f722c8cc022b6f51cec19ea477b

Located: HK_LM:Run, VAIO Update 2 (DISABLED)
command: "C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe" /Stationary
file: C:\Program Files\Sony\VAIO Update 2\VAIOUpdt.exe
size: 135168
MD5: 87b844a6ac351768232e07ac9d856499

Located: HK_CU:Run, ctfmon.exe
command: C:\WINDOWS\system32\ctfmon.exe
file: C:\WINDOWS\system32\ctfmon.exe
size: 15360
MD5: 24232996a38c0b0cf151c2140ae29fc8

Located: HK_CU:Run, LClock
command: C:\Program Files\LClock\lclock.exe
file: C:\Program Files\LClock\lclock.exe
size: 65536
MD5: 38cc541d105dcba3d3768d6b191d9505

Located: HK_CU:Run, Star Downloader Free
command: C:\Program Files\Star Downloader\stardown.exe
file: C:\Program Files\Star Downloader\stardown.exe
size: 1739776
MD5: 9c6c66a984dff0519deb06fdf2e1af0a

Located: HK_CU:Run, TuneUp MemOptimizer
command: "C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe" autostart
file: C:\Program Files\TuneUp Utilities 2006\MemOptimizer.exe
size: 294912
MD5: 1ab91306646c1a464732c2b6585027f0

Located: HK_CU:Run, SpybotSD TeaTimer (DISABLED)
command: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
file: C:\Program Files\Spybot - Search & Destroy\TeaTimer.exe
size: 1415824
MD5: 70496eee0ddbe485f658693826f44d38

Located: Inicio (común), Remocon Driver.lnk
command: C:\Program Files\sony\usbsircs\usbsircs.exe
file: C:\Program Files\sony\usbsircs\usbsircs.exe
size: 229376
MD5: 1c4942ac15fba6eeee45e711ef02b9af

Located: Inicio (usuario), Stardock ObjectDock.lnk
command: C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
file: C:\WINDOWS\BricoPacks\Vista Inspirat\ObjectDock\ObjectDock.exe
size: 1826885
MD5: ffed2f0c2e32579f2e07404b2ab7e6bf

Located: Inicio (usuario), UberIcon.lnk
command: C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
file: C:\WINDOWS\BricoPacks\Vista Inspirat\UberIcon\UberIcon Manager.exe
size: 180224
MD5: 9ac9fb375270822f4e5d65ca4d76605a

Located: Inicio (usuario), Y'z Shadow.lnk
command: C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
file: C:\WINDOWS\BricoPacks\Vista Inspirat\YzShadow\YzShadow.exe
size: 151552
MD5: fc8b588e9bbc070c411136554a9aa56e

Located: WinLogon, AtiExtEvent
command: Ati2evxx.dll
file: Ati2evxx.dll

Located: WinLogon, crypt32chain
command: crypt32.dll
file: crypt32.dll

Located: WinLogon, cryptnet
command: cryptnet.dll
file: cryptnet.dll

Located: WinLogon, cscdll
command: cscdll.dll
file: cscdll.dll

Located: WinLogon, ScCertProp
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, Schedule
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, sclgntfy
command: sclgntfy.dll
file: sclgntfy.dll

Located: WinLogon, SensLogn
command: WlNotify.dll
file: WlNotify.dll

Located: WinLogon, termsrv
command: wlnotify.dll
file: wlnotify.dll

Located: WinLogon, wlballoon
command: wlnotify.dll
file: wlnotify.dll




Amen................

Hola!!!

Vamos a ver, una cosa es ctfmon.exe que es legítimo y otra ctfmon32.exe que pertenece al parásito de CoolWebSearch.

¿Estas seguro de que no tienes el Microsoft Office XP?. Mira en Agregar/Quitar Programas del Panel de Control y nos lo confirmas.

En cuanto a tu log, dale Fix checked a:

O2 - BHO: (no name) - {9ECB9560-04F9-4bbc-943D-298DDF1699E1} - (no file)

O2 - BHO: (no name) - {AA58ED58-01DD-4d91-8333-CF10577473F7} - (no file)

O2 - BHO: (no name) - {BDF3E430-B101-42AD-A544-FADC6B084872} - (no file)

Después sigue estos pasos:

- Pasa al menos 2 de estos Antivirus Online

- Limpia el registro con RegSeeker y pasa Ad-Aware actualizado.

- Elimina cookies y temporales con Disk Cleaner y vacía la papelera.

Reinicia y nos cuentas los resultados.

Saludos

Gracias....hice Lo Que Me Dijiste...di Fix A Las Entradas....ademas Aumente El Nivel De Seguridad Del Zone Alarm..y Asi Ya No Me Da Tantas Advertencias De Bloqueo De Equipos ExtraÑos....el Archivo Ctfmon.exe He Tratado De Desactivarlo Por Donde Sea..pero Siempre Se Activa No Obedece A Nada.....ha Por Cierto Tengo El Office 2003 No El Xp...no Aparece Nada En Instalar Desinstalar Programas......

Resultado:
* Problema De Reactivar Cada Momento Active Desktop Disminuido
* Problema De Zone Alarm De Mensajes De Ataques De Otros Equipos Disminuido.


Conclusion: Archivo Bloquedo Pero No Eliminado Del Computador Ya Que Se Reactiva Solo Frente A Cualquier Intento De Ser Borrado Tanto Del Registro Como El Archivo En Si.

http://support.microsoft.com/default...d=kb;es;282599

Prueba a seguir estas indicaciones y después nos cuentas.

Si no estoy equivocado creo que ese archivo aparece en alguna actualización del SP2.

Saludos